Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/323830343a353830633a3a2f33342d3334203d3e20323638313033.roa
File:                     323830343a353830633a3a2f33342d3334203d3e20323638313033.roa (raw, json)
Hash identifier:          zmSN3nEZyfXs297lwf9fbC+ammEbK084cA1vY2dT4Eg=
Subject key identifier:   0C:E1:4A:A5:84:C9:C0:9C:DF:B4:59:9E:D0:E0:D0:5C:3E:1C:28:7A
Certificate issuer:       /CN=D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB
Certificate serial:       5E94FE2D4B497DC16624B1083B0216986D36DDC4
Authority key identifier: D9:AA:E9:D9:DA:06:BB:1F:2A:65:27:2E:17:58:B4:0F:DE:7F:D9:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/323830343a353830633a3a2f33342d3334203d3e20323638313033.roa
Signing time:             Tue 27 Oct 2026 20:03:37 +0000
ROA not before:           Tue 27 Oct 2026 19:58:37 +0000
ROA not after:            Tue 26 Oct 2027 20:03:37 +0000
asID:                     268103
IP address blocks:        2804:580c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.crl
                          rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 08:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:94:fe:2d:4b:49:7d:c1:66:24:b1:08:3b:02:16:98:6d:36:dd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB
        Validity
            Not Before: Oct 27 19:58:37 2026 GMT
            Not After : Oct 26 20:03:37 2027 GMT
        Subject: CN=0CE14AA584C9C09CDFB4599ED0E0D05C3E1C287A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:3c:34:b6:9a:0a:41:60:87:42:d7:da:e5:
                    97:24:48:d8:f0:c7:e4:04:6d:7d:df:6d:fa:57:b4:
                    2f:73:93:75:f6:da:c5:bd:9a:de:2e:59:3e:9b:56:
                    d6:c1:c7:82:f2:08:91:94:ea:e4:72:a3:c0:83:4b:
                    81:eb:b1:c6:1f:d5:b2:09:92:06:eb:ae:31:79:bc:
                    77:b7:e1:d7:e7:28:5a:a2:96:28:f8:12:77:79:c4:
                    33:c7:56:76:59:9f:51:c4:fa:5d:1a:07:de:a5:81:
                    e3:b2:0c:c8:95:18:10:13:98:02:8c:d8:c5:28:eb:
                    97:14:5c:bf:bb:37:27:91:a9:ff:38:1b:77:9e:85:
                    6a:82:8b:6b:7d:d6:b0:d1:d5:ff:8a:d2:28:c5:c4:
                    31:1b:c5:f8:70:91:9a:44:ae:10:60:6d:bb:cd:b0:
                    d6:10:fe:bd:a7:21:1f:7a:b0:2b:ad:1a:fe:d3:23:
                    76:f4:4b:eb:d3:b4:a4:82:df:97:6d:7c:68:92:b7:
                    5d:a7:a8:3b:a9:b5:13:84:fb:ab:6c:c0:44:ae:be:
                    01:89:da:4f:2f:e8:5a:4c:7c:22:ea:d0:69:92:ec:
                    68:7e:4a:e0:60:5d:fe:d5:29:78:38:18:25:9d:fa:
                    11:e9:b5:21:e3:77:20:ea:78:94:22:5b:7a:46:34:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E1:4A:A5:84:C9:C0:9C:DF:B4:59:9E:D0:E0:D0:5C:3E:1C:28:7A
            X509v3 Authority Key Identifier:
                keyid:D9:AA:E9:D9:DA:06:BB:1F:2A:65:27:2E:17:58:B4:0F:DE:7F:D9:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/323830343a353830633a3a2f33342d3334203d3e20323638313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:580c::/34

    Signature Algorithm: sha256WithRSAEncryption
         73:2c:91:26:ad:da:82:74:15:42:a3:05:5a:fa:1d:88:d1:e0:
         e2:08:06:38:55:86:5d:bf:21:f7:3f:f5:f1:03:a2:f8:28:e5:
         a9:c6:dc:d7:b8:62:d4:ad:d4:86:1b:ac:80:ab:fe:45:dc:4a:
         bb:b2:c5:f5:9b:2e:51:46:47:c3:42:1c:32:c4:6b:d5:44:c9:
         a1:3a:22:61:b3:f2:51:af:0c:c8:4a:f0:b9:36:0a:de:92:dd:
         35:a2:7d:9b:ac:7a:c8:55:25:3c:ae:50:52:09:2a:94:b4:46:
         c0:82:f2:eb:b2:d9:8d:0b:d5:51:52:b3:dd:bb:e2:94:2d:ac:
         93:48:1d:44:7a:a3:ea:1a:4d:cd:ea:21:6b:80:26:ab:03:32:
         53:ae:9f:ba:33:3c:ed:d3:e2:88:b1:25:d8:a7:6e:f5:88:e6:
         9d:14:28:e0:ed:b2:52:ea:10:56:22:2a:01:a1:c1:4e:93:ed:
         64:57:64:12:81:ea:61:90:37:9b:81:6d:f5:6d:a2:02:e5:68:
         87:dd:c2:bf:ab:93:f4:1a:c3:70:18:73:46:13:90:4f:4d:23:
         42:22:28:f1:05:e8:5a:4d:08:47:98:80:85:1b:1c:ba:e3:a6:
         df:54:9d:29:2b:1d:cb:db:87:0c:91:91:09:a4:15:78:e7:0b:
         84:09:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:41:13 2026 by rpki-client