Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
File:                     323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (raw, json)
Hash identifier:          ZytDhW155wV3Tzd5YWy0iSdE01jD6ibuH/RJfiLphYE=
Subject key identifier:   7B:50:17:24:1D:80:F2:5B:62:B0:89:6B:79:7A:C2:DD:3C:50:06:30
Certificate issuer:       /CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
Certificate serial:       37980C6F9981CB159AF291257FF6085E27229AC0
Authority key identifier: D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
Signing time:             Thu 08 Oct 2026 13:30:38 +0000
ROA not before:           Thu 08 Oct 2026 13:25:38 +0000
ROA not after:            Thu 07 Oct 2027 13:30:38 +0000
asID:                     271428
IP address blocks:        2804:7b60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl
                          rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 03:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:98:0c:6f:99:81:cb:15:9a:f2:91:25:7f:f6:08:5e:27:22:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
        Validity
            Not Before: Oct  8 13:25:38 2026 GMT
            Not After : Oct  7 13:30:38 2027 GMT
        Subject: CN=7B5017241D80F25B62B0896B797AC2DD3C500630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:27:dd:fe:81:eb:9f:44:4e:3c:6c:79:8a:
                    4a:98:87:7b:f4:77:3e:fa:83:99:f7:f9:ba:ba:02:
                    a4:be:56:68:ef:af:62:47:35:f9:f6:18:a7:28:2c:
                    1d:8a:05:9a:26:33:df:5d:74:93:5b:b1:96:70:66:
                    1e:3b:68:43:53:a3:f7:df:e6:01:b8:f8:4a:07:20:
                    56:a0:c7:9f:4c:3c:a3:2e:ff:80:54:6f:a4:3f:05:
                    f1:d9:b8:fd:11:c1:ec:17:02:a0:4a:e3:60:6d:c4:
                    31:f7:7d:00:14:76:dd:51:e8:33:bd:10:7e:88:ca:
                    1b:15:9a:d8:0e:55:02:70:71:e2:f0:05:97:d9:fa:
                    b6:93:31:f4:f3:c9:ea:ac:31:09:64:09:bd:05:74:
                    58:f2:6e:24:ff:66:65:2a:1f:ec:60:7b:8b:af:ff:
                    a3:30:00:ca:64:f5:45:11:11:48:2f:d4:45:72:b2:
                    e6:b7:82:9e:d9:05:65:6d:bc:a5:91:c7:19:12:90:
                    3c:46:b4:2c:4d:e8:ac:64:1a:15:59:79:2b:b6:4e:
                    be:05:c8:22:00:20:86:9f:77:b4:1c:c7:db:b1:61:
                    46:94:55:26:d9:c1:34:10:fd:f7:3e:4d:9d:68:74:
                    1d:a3:43:ab:cb:54:fc:8e:8e:8d:c9:ba:bd:21:c3:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:50:17:24:1D:80:F2:5B:62:B0:89:6B:79:7A:C2:DD:3C:50:06:30
            X509v3 Authority Key Identifier:
                keyid:D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:8f:c8:b3:9c:3d:e8:d3:a4:de:bd:82:4e:82:0b:5a:2d:19:
         f1:69:f5:c6:ec:95:bb:a1:3b:45:bf:85:af:8d:5e:65:37:5d:
         65:cc:6d:c8:2e:15:9a:ef:bd:a8:11:94:a5:a8:e4:69:e6:81:
         a3:2b:b8:e4:39:12:a6:d8:87:46:97:81:9d:42:c4:fb:61:28:
         7c:6b:9a:1f:19:4b:41:88:30:5a:10:10:c8:ab:53:0e:28:ac:
         81:f1:77:50:6d:3d:a7:64:8c:0b:ae:0d:21:7a:82:59:84:ad:
         99:5b:2a:c2:bb:0d:91:5c:7b:4c:40:aa:e5:01:78:ba:ef:28:
         91:89:b8:84:7d:ae:0d:e0:94:4c:ce:64:9d:30:95:1c:50:1c:
         47:7d:4f:5a:fc:b6:a0:3f:16:80:72:34:f3:fe:5c:69:70:da:
         62:d8:f2:c7:57:bf:91:f5:fa:6d:b4:76:50:21:b7:db:47:da:
         d2:2d:83:28:4a:a8:b5:c4:57:b4:4a:37:a6:1f:77:2a:de:3a:
         13:9a:d4:bc:43:8d:f9:47:c2:ac:46:3d:48:21:b6:92:4f:c7:
         90:52:fe:c9:15:b0:b1:3c:4f:14:38:a2:e9:12:31:64:6c:4a:
         93:81:f5:d4:eb:69:c8:a8:c9:8a:20:ba:04:59:c4:ca:6f:69:
         a8:42:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:23:49 2026 by rpki-client