Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8jLdkTksHuXpgzFQBcd5uAu9m4zsuQWacuZTNCrbJULa/0/323830343a316535303a3a2f33322d313238203d3e20323634343231.roa
File:                     323830343a316535303a3a2f33322d313238203d3e20323634343231.roa (raw, json)
Hash identifier:          uaBacD98xi9R6kzjveJfD77QOR0PqMZx+r0aRiv1NcU=
Subject key identifier:   48:AE:1B:95:62:87:41:86:58:6C:E5:D8:BE:CE:05:67:1A:5D:2D:9A
Certificate issuer:       /CN=1F7C202C6E896DB8ECE6E2EA626F5959568DCE13
Certificate serial:       5B856DB6BFF93BA7A99735FA5B5B3AB484282D3B
Authority key identifier: 1F:7C:20:2C:6E:89:6D:B8:EC:E6:E2:EA:62:6F:59:59:56:8D:CE:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F7C202C6E896DB8ECE6E2EA626F5959568DCE13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jLdkTksHuXpgzFQBcd5uAu9m4zsuQWacuZTNCrbJULa/0/323830343a316535303a3a2f33322d313238203d3e20323634343231.roa
Signing time:             Wed 16 Sep 2026 16:57:16 +0000
ROA not before:           Wed 16 Sep 2026 16:52:16 +0000
ROA not after:            Wed 15 Sep 2027 16:57:16 +0000
asID:                     264421
IP address blocks:        2804:1e50::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8jLdkTksHuXpgzFQBcd5uAu9m4zsuQWacuZTNCrbJULa/0/1F7C202C6E896DB8ECE6E2EA626F5959568DCE13.crl
                          rsync://rpki-repo.registro.br/repo/8jLdkTksHuXpgzFQBcd5uAu9m4zsuQWacuZTNCrbJULa/0/1F7C202C6E896DB8ECE6E2EA626F5959568DCE13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F7C202C6E896DB8ECE6E2EA626F5959568DCE13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:85:6d:b6:bf:f9:3b:a7:a9:97:35:fa:5b:5b:3a:b4:84:28:2d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F7C202C6E896DB8ECE6E2EA626F5959568DCE13
        Validity
            Not Before: Sep 16 16:52:16 2026 GMT
            Not After : Sep 15 16:57:16 2027 GMT
        Subject: CN=48AE1B9562874186586CE5D8BECE05671A5D2D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:4a:47:f9:9e:90:e0:53:13:d4:6e:2c:d5:
                    ee:15:75:e3:55:22:69:28:e3:2d:65:a9:92:cf:04:
                    b5:2b:7f:fa:60:8b:99:2c:25:00:a3:a9:be:44:72:
                    5f:8c:7e:ef:8a:c5:71:db:10:83:15:36:01:31:71:
                    01:34:48:94:fe:1b:ad:f9:37:2d:84:3e:dd:b1:8d:
                    ce:dc:5a:71:e2:a8:bf:f6:85:57:b7:32:19:d6:7b:
                    6a:fd:e2:ed:a5:2c:ff:4d:52:1c:eb:ba:64:10:cf:
                    0f:ea:1c:ad:44:37:d4:c2:ea:d2:01:3f:ee:7a:2c:
                    a2:0d:35:6e:f5:82:43:a6:37:1d:d3:01:b3:72:76:
                    13:29:da:3c:1e:0e:3e:f7:44:aa:a2:67:57:8a:ab:
                    94:74:58:c4:e3:f5:f1:c3:d2:a7:6f:a3:9b:64:da:
                    61:ec:f1:8d:4e:b0:46:cd:ef:b3:fb:69:7d:fa:05:
                    e8:95:06:de:63:9e:2f:e8:18:79:16:33:f5:46:6e:
                    46:1b:98:08:d0:f9:4e:34:44:75:5e:91:75:94:5b:
                    00:f4:0a:06:93:51:a3:05:60:b6:e0:36:9a:68:a2:
                    94:c7:a9:87:27:bc:0d:0c:17:83:59:86:53:b8:bf:
                    2f:a5:de:89:bc:6b:8c:ea:46:0d:63:fa:8b:21:27:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:1B:95:62:87:41:86:58:6C:E5:D8:BE:CE:05:67:1A:5D:2D:9A
            X509v3 Authority Key Identifier:
                keyid:1F:7C:20:2C:6E:89:6D:B8:EC:E6:E2:EA:62:6F:59:59:56:8D:CE:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jLdkTksHuXpgzFQBcd5uAu9m4zsuQWacuZTNCrbJULa/0/1F7C202C6E896DB8ECE6E2EA626F5959568DCE13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F7C202C6E896DB8ECE6E2EA626F5959568DCE13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jLdkTksHuXpgzFQBcd5uAu9m4zsuQWacuZTNCrbJULa/0/323830343a316535303a3a2f33322d313238203d3e20323634343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:0d:ed:16:58:2f:00:df:b8:07:58:25:36:44:b5:c0:a9:
         2f:db:d0:59:d5:ac:07:dc:d4:58:f4:84:2d:4a:95:6a:e8:51:
         08:76:ad:41:77:10:48:66:68:57:67:8f:af:23:04:99:e7:70:
         94:0c:49:e8:ed:85:d0:d3:68:3e:16:fa:ce:c1:1a:f0:62:bb:
         9b:0d:0f:24:e6:5a:bf:62:bb:24:27:15:02:d2:82:f0:4a:ed:
         c4:83:65:e6:54:2a:e5:ae:fe:89:ef:b6:52:8e:aa:21:1a:64:
         19:79:1a:49:c9:c8:46:3d:68:d8:ae:1b:1d:48:c7:5d:58:96:
         f6:a1:5d:1d:56:85:c5:17:d5:49:6d:5a:8f:4b:72:d1:a3:bc:
         ce:fb:f8:25:06:b6:95:a4:83:7d:27:ce:73:56:d8:ff:e6:f5:
         84:57:ae:b7:5b:a4:43:8e:d6:43:3c:f9:7e:52:4e:30:4a:51:
         5a:0e:08:a8:50:41:11:40:d2:2f:e5:30:e5:11:17:e4:09:0e:
         26:a4:12:12:38:2d:fe:f7:c3:d3:1b:26:41:57:22:0a:3b:3f:
         27:72:bf:0b:8e:d4:ea:dd:d8:a6:8b:bd:0c:dc:ad:f4:88:2b:
         85:20:b5:91:6e:11:39:2d:67:6e:3e:be:0f:62:67:6e:14:9c:
         cd:29:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:08:37 2026 by rpki-client