Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3438203d3e20323639303536.roa
File:                     323830343a356563383a3a2f33322d3438203d3e20323639303536.roa (raw, json)
Hash identifier:          xY6wpnnVnYRC7JChtQO1NC17A55ZK0nbW9kLpwt+dFQ=
Subject key identifier:   DD:CD:64:9C:BC:F3:AD:90:5D:17:F8:AC:BD:23:EC:ED:6E:91:C0:77
Certificate issuer:       /CN=4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB
Certificate serial:       ABC48461268621F45803782E6960338C19CA1C
Authority key identifier: 4A:E7:97:3F:0F:E2:F2:A9:FF:F6:DF:3F:24:D3:87:F3:B7:E1:4E:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3438203d3e20323639303536.roa
Signing time:             Thu 10 Sep 2026 20:17:36 +0000
ROA not before:           Thu 10 Sep 2026 20:12:36 +0000
ROA not after:            Thu 09 Sep 2027 20:17:36 +0000
asID:                     269056
IP address blocks:        2804:5ec8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.crl
                          rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ab:c4:84:61:26:86:21:f4:58:03:78:2e:69:60:33:8c:19:ca:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB
        Validity
            Not Before: Sep 10 20:12:36 2026 GMT
            Not After : Sep  9 20:17:36 2027 GMT
        Subject: CN=DDCD649CBCF3AD905D17F8ACBD23ECED6E91C077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:08:2f:e1:40:12:dc:7b:47:e2:f3:ab:54:
                    dd:2c:a6:f8:0f:66:8c:9b:72:61:9e:e7:51:3b:e4:
                    d7:00:b8:cb:e7:05:7f:05:c9:1e:36:d4:fa:8e:a7:
                    1a:60:d6:07:a1:e7:d2:aa:b1:52:e1:be:45:94:0b:
                    67:6f:25:44:54:e6:b7:6b:5f:36:eb:f7:f7:94:24:
                    ed:04:55:65:af:a5:a8:ac:2b:a1:15:97:86:f1:d8:
                    21:df:20:db:96:43:90:7f:45:da:d2:82:8f:a9:31:
                    29:2d:cc:f6:b0:18:cd:22:da:4f:7b:60:0a:e2:8d:
                    27:7b:30:f7:ca:dd:56:2c:67:13:25:14:7f:3b:18:
                    ea:68:8e:68:89:f1:b6:55:5c:f1:35:e3:de:6f:06:
                    8a:b2:72:c6:8c:07:2e:b5:33:75:01:20:bd:d2:6d:
                    84:9f:8f:55:d8:57:89:38:c7:18:36:32:62:2b:f1:
                    41:53:25:64:7b:10:33:14:79:00:b7:5c:16:26:34:
                    43:4e:b3:2d:07:cc:5f:82:98:0a:55:5a:a8:00:89:
                    96:31:c7:97:70:06:09:55:d7:ac:83:d7:84:84:4c:
                    3e:b8:4a:4b:8e:64:b4:ab:b9:61:b4:30:02:bd:4a:
                    87:91:10:80:fb:ad:55:d7:4e:28:39:2f:c1:c4:17:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CD:64:9C:BC:F3:AD:90:5D:17:F8:AC:BD:23:EC:ED:6E:91:C0:77
            X509v3 Authority Key Identifier:
                keyid:4A:E7:97:3F:0F:E2:F2:A9:FF:F6:DF:3F:24:D3:87:F3:B7:E1:4E:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AE7973F0FE2F2A9FFF6DF3F24D387F3B7E14EFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3438203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:b3:4c:72:35:6c:36:28:4d:94:fe:6a:78:9d:b5:a3:5b:b4:
         96:46:d3:13:af:46:9e:7f:ea:bb:38:c2:f0:22:25:72:9a:b2:
         36:23:db:24:a2:13:a2:91:2d:36:f4:3e:d0:44:3f:e4:41:8e:
         f1:30:79:fa:15:c5:81:9a:a5:fd:f2:cd:82:20:20:f3:58:2f:
         1e:25:eb:43:d7:dd:b8:62:8f:ca:d6:4a:84:14:dd:51:ac:7c:
         c6:d2:81:76:ce:2f:20:62:78:6b:4c:38:8b:a1:b8:37:75:86:
         c0:ed:b9:2d:b0:0f:d0:50:ee:f9:95:e2:8f:6b:5f:31:a4:5d:
         de:0f:67:cb:4a:d7:f4:eb:31:e0:3c:b1:51:9c:65:56:49:0a:
         35:a6:b5:62:5b:04:50:70:fd:71:9c:61:a6:36:77:c1:71:08:
         d7:d9:78:da:2e:88:ee:e0:42:a9:62:37:25:40:f1:97:b0:d9:
         3f:9e:73:08:ad:f0:6f:1b:7c:d5:9f:3a:03:cc:b5:d0:cb:ca:
         ef:21:dd:a5:e4:9e:b7:43:5d:f8:73:65:ab:9b:0a:88:52:a0:
         12:da:c4:8f:c7:90:ac:e4:42:5c:ba:b4:f3:1d:a4:6a:a6:f1:
         3a:2c:f3:b7:23:96:fe:5d:7e:c3:f5:ff:59:fb:84:de:9c:3a:
         d0:e7:ba:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:59:20 2026 by rpki-client