Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33322d3336203d3e20323635313430.roa
File:                     323830343a326233343a3a2f33322d3336203d3e20323635313430.roa (raw, json)
Hash identifier:          cH40g+7Aem8FjCpt9tyPurCa9ISBh0snIa/Ybm8NKJk=
Subject key identifier:   8A:C4:A5:6D:6D:6B:C4:95:F1:32:50:5A:96:38:DD:9B:F8:9C:E6:62
Certificate issuer:       /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
Certificate serial:       3163D538E8397E95EF0971708E74034351873209
Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33322d3336203d3e20323635313430.roa
Signing time:             Tue 06 Oct 2026 20:46:27 +0000
ROA not before:           Tue 06 Oct 2026 20:41:27 +0000
ROA not after:            Tue 05 Oct 2027 20:46:27 +0000
asID:                     265140
IP address blocks:        2804:2b34::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl
                          rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:63:d5:38:e8:39:7e:95:ef:09:71:70:8e:74:03:43:51:87:32:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
        Validity
            Not Before: Oct  6 20:41:27 2026 GMT
            Not After : Oct  5 20:46:27 2027 GMT
        Subject: CN=8AC4A56D6D6BC495F132505A9638DD9BF89CE662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:2e:f4:18:4d:d2:89:3f:c0:b9:2a:71:35:
                    72:28:92:a0:25:af:19:88:8d:34:f2:a2:45:09:a6:
                    aa:ab:e4:ac:3e:bc:71:6f:a8:d7:75:26:3a:73:89:
                    67:14:0c:2b:3a:63:f0:a1:2a:f8:87:91:12:93:e4:
                    e2:3d:92:86:a1:54:d3:04:36:e4:5f:a2:cc:41:ac:
                    4b:5e:20:d6:15:db:03:5c:66:1b:63:79:bc:f7:93:
                    dd:99:fe:f0:82:32:31:18:fb:92:0a:d5:5c:34:a6:
                    8c:60:cf:d6:40:9e:8f:de:ed:73:7c:43:fb:13:d1:
                    87:75:a2:7a:23:a7:ce:ea:fd:55:45:9f:47:0b:32:
                    db:59:85:2f:94:a5:29:df:4a:39:9e:86:97:52:d2:
                    d2:d3:10:20:8d:c3:90:16:46:5a:5b:bc:fa:c7:64:
                    dd:43:9c:99:88:3d:0e:60:08:02:a2:71:4b:9a:cc:
                    0c:a6:64:cc:ee:c4:45:51:ed:0f:19:13:39:64:00:
                    02:aa:65:ee:1c:7e:a5:63:ee:85:13:2c:6a:5a:aa:
                    4d:bf:a9:97:dd:e9:1a:56:30:44:c3:a5:cf:59:bd:
                    86:69:52:43:2e:46:0e:42:1d:17:ec:db:d9:a0:10:
                    21:28:d9:a1:00:b1:70:02:9f:f3:50:78:68:fa:39:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C4:A5:6D:6D:6B:C4:95:F1:32:50:5A:96:38:DD:9B:F8:9C:E6:62
            X509v3 Authority Key Identifier:
                keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a3a2f33322d3336203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b34::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:26:37:57:61:12:25:18:27:6b:e7:11:1a:d4:fe:33:b2:
         fa:7a:87:29:a6:69:f9:05:01:b7:27:48:61:e3:9e:21:fd:d2:
         36:85:a3:ed:4b:93:49:72:7d:18:41:75:06:41:e8:09:d3:8c:
         84:ac:57:bd:83:e4:35:83:87:a5:3f:3b:83:69:0c:02:95:30:
         64:7b:09:7b:84:c8:fd:1f:e4:c0:79:6d:e9:1f:23:26:c9:96:
         82:db:5a:b5:be:1a:0e:bb:0a:00:35:7d:4f:71:86:78:4a:7a:
         4f:4f:16:df:69:26:b9:4c:50:6c:bb:4d:8f:78:1c:2a:c2:e6:
         fd:41:0e:a9:e2:ca:90:fe:4d:f9:25:06:fd:05:aa:13:27:1e:
         9a:3d:29:5a:d3:b6:2c:ec:9e:7e:e7:91:fe:e8:dc:6f:6e:f6:
         46:84:63:fe:34:ed:b2:4b:47:2e:53:d0:ab:28:05:b5:37:4e:
         e3:8c:08:f6:58:f8:d7:19:f5:55:f9:3e:74:28:2e:75:dd:e2:
         b8:28:7c:2e:58:2e:e6:81:1c:6c:c2:56:25:92:b4:df:e2:14:
         24:36:2a:56:e9:b3:d0:9d:1d:84:e3:18:ea:97:79:6c:47:11:
         64:b0:44:e8:4e:20:53:0c:dc:f3:88:89:e8:21:ba:a5:63:23:
         66:45:0f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:04:04 2026 by rpki-client