Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/323830343a353461383a3a2f33322d3438203d3e20323638363633.roa
File:                     323830343a353461383a3a2f33322d3438203d3e20323638363633.roa (raw, json)
Hash identifier:          hUB9o2HkmbnhyXHqkKcbKQS1Thn2CVxAmzq3BI9KDXM=
Subject key identifier:   24:52:21:8B:C6:51:3E:0E:D6:B6:6F:84:C2:1F:40:2E:97:B3:EF:13
Certificate issuer:       /CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
Certificate serial:       2C6D069DCF757600AC666F79A6ABDD57960CCB26
Authority key identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/323830343a353461383a3a2f33322d3438203d3e20323638363633.roa
Signing time:             Fri 11 Sep 2026 16:15:53 +0000
ROA not before:           Fri 11 Sep 2026 16:10:53 +0000
ROA not after:            Fri 10 Sep 2027 16:15:53 +0000
asID:                     268663
IP address blocks:        2804:54a8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl
                          rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6d:06:9d:cf:75:76:00:ac:66:6f:79:a6:ab:dd:57:96:0c:cb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
        Validity
            Not Before: Sep 11 16:10:53 2026 GMT
            Not After : Sep 10 16:15:53 2027 GMT
        Subject: CN=2452218BC6513E0ED6B66F84C21F402E97B3EF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:c2:48:92:37:14:42:28:05:67:b9:37:9c:
                    16:1b:ba:48:c0:fb:4b:fc:c4:40:2a:7c:57:77:ae:
                    57:47:44:82:29:7b:94:d7:57:57:93:33:40:11:20:
                    61:b8:c3:b4:83:fc:82:a3:3b:5a:7c:3b:6d:96:d7:
                    6b:5b:1e:af:5e:ac:c4:be:7c:ba:c3:42:c7:a5:da:
                    26:60:91:43:a4:08:0e:00:86:0e:57:17:c4:86:76:
                    21:bf:ca:54:6d:f5:c7:42:fe:63:8b:7d:0b:09:99:
                    a1:a0:d5:f4:6c:65:8a:80:5b:09:6f:c0:78:27:cf:
                    85:db:da:de:30:80:d0:c3:96:a1:4c:88:76:84:f6:
                    1f:48:c1:04:fa:62:04:91:62:75:dd:02:87:ec:6c:
                    a3:d1:c9:48:44:b5:45:2a:88:f2:d1:40:1a:e9:51:
                    b5:d6:3d:92:c4:3d:8c:66:42:02:e0:92:14:0f:89:
                    8f:8c:51:cf:7f:ce:e8:f2:07:ca:82:b7:d2:b4:f0:
                    f0:db:0a:38:8b:36:a8:09:19:1a:0a:d9:77:97:09:
                    41:fc:16:d1:50:46:42:8b:af:0d:b3:ec:53:68:79:
                    84:8f:a6:35:14:52:ed:47:7d:2b:0e:ee:a7:ec:d9:
                    4c:22:6e:be:73:8d:6e:88:41:47:27:d4:df:1f:57:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:52:21:8B:C6:51:3E:0E:D6:B6:6F:84:C2:1F:40:2E:97:B3:EF:13
            X509v3 Authority Key Identifier:
                keyid:8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/323830343a353461383a3a2f33322d3438203d3e20323638363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:dd:26:36:16:ad:da:3b:93:2a:96:c1:e7:9d:1f:c0:7d:34:
         d1:d4:fc:12:61:e7:94:83:0d:a5:b7:70:b3:13:f5:40:25:62:
         6f:1c:da:ff:4c:63:6b:b4:5f:fd:26:a6:d6:7f:bf:ca:1c:3c:
         f7:18:99:3c:60:2a:13:48:eb:f8:0e:81:ab:f6:c4:35:f5:f7:
         94:ce:4e:3d:8a:0e:e6:4a:8a:ba:24:1d:3d:da:59:28:34:13:
         60:fe:68:e1:f4:dd:3c:1a:95:fb:8d:e3:7f:b3:21:e7:a9:4d:
         6f:cf:9b:02:73:af:2a:fb:1c:16:8c:72:56:25:57:14:80:f1:
         b4:f4:ab:20:c6:f3:6b:68:8d:3d:98:eb:2f:29:0e:f2:cd:79:
         93:c4:1f:8a:e6:e0:2a:2b:b1:6c:77:4b:0e:6b:9c:e4:f9:ec:
         be:ca:98:d3:e8:b1:0e:f5:1e:80:b0:a6:73:2d:27:ed:1c:ee:
         b4:17:58:36:d9:07:47:89:d0:e5:e7:0d:aa:11:dd:d1:03:6e:
         9f:fc:52:41:95:b5:b4:5a:53:09:14:c6:35:72:87:55:8f:28:
         76:ef:eb:ca:40:c2:b7:ca:86:62:7a:ba:c4:e7:d2:70:e8:1e:
         4c:8d:40:d2:6b:71:23:8f:c3:0e:1b:e9:e0:81:81:20:59:a9:
         58:fc:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:14:55 2026 by rpki-client