Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/323830343a386336343a3a2f33322d3438203d3e203631363135.roa
File:                     323830343a386336343a3a2f33322d3438203d3e203631363135.roa (raw, json)
Hash identifier:          mX/9LVHgWjOGXFiCwp6cirl0bx9eKfANCjbZadpVoCM=
Subject key identifier:   96:49:AB:2E:15:C7:F7:94:E9:E6:97:3E:95:A6:E3:9D:B4:C3:86:24
Certificate issuer:       /CN=B385E4C3A03F79AE38D8D654C2A650373A095B90
Certificate serial:       57BA00D72F9D45E5F4AAAAE24B3C484A4DD21FDB
Authority key identifier: B3:85:E4:C3:A0:3F:79:AE:38:D8:D6:54:C2:A6:50:37:3A:09:5B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B385E4C3A03F79AE38D8D654C2A650373A095B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/323830343a386336343a3a2f33322d3438203d3e203631363135.roa
Signing time:             Thu 17 Sep 2026 19:50:21 +0000
ROA not before:           Thu 17 Sep 2026 19:45:21 +0000
ROA not after:            Thu 16 Sep 2027 19:50:21 +0000
asID:                     61615
IP address blocks:        2804:8c64::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/B385E4C3A03F79AE38D8D654C2A650373A095B90.crl
                          rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/B385E4C3A03F79AE38D8D654C2A650373A095B90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B385E4C3A03F79AE38D8D654C2A650373A095B90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 11:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ba:00:d7:2f:9d:45:e5:f4:aa:aa:e2:4b:3c:48:4a:4d:d2:1f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B385E4C3A03F79AE38D8D654C2A650373A095B90
        Validity
            Not Before: Sep 17 19:45:21 2026 GMT
            Not After : Sep 16 19:50:21 2027 GMT
        Subject: CN=9649AB2E15C7F794E9E6973E95A6E39DB4C38624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:3e:2b:0e:bb:7f:87:d0:f6:70:8b:bf:af:
                    20:98:db:b5:82:4d:a7:09:63:41:d5:0e:58:4a:68:
                    79:f8:d9:e3:e6:d6:ac:6e:0a:95:d0:99:47:87:62:
                    8c:3c:1f:9c:5a:3f:78:39:25:3c:d0:ea:f2:8f:50:
                    e5:2a:33:b5:8e:48:0d:9f:bd:ae:3b:8e:cd:8f:3b:
                    a0:cf:2d:34:4d:5c:44:68:36:10:f0:32:3d:1e:95:
                    d9:07:b3:73:6e:a7:44:7b:af:33:ed:48:53:0d:49:
                    af:b2:01:03:dd:23:be:a8:87:2c:8a:52:30:32:61:
                    b0:bc:8a:35:bf:94:d7:21:e0:e7:dd:8c:47:75:a6:
                    1d:22:67:59:a4:bb:84:8a:1d:9a:d1:42:af:50:00:
                    d3:70:4f:4d:08:d0:07:b2:40:08:02:cc:21:4f:e0:
                    90:24:ed:5b:e3:b5:07:ba:cc:93:d3:fc:8c:4b:7d:
                    ce:b8:00:3e:62:b6:27:d1:23:24:04:9d:0e:a3:72:
                    bc:dd:3b:dd:84:23:91:37:2d:b2:a0:da:69:67:ea:
                    a8:c1:19:45:78:b2:8c:47:2b:4b:f8:76:da:a9:12:
                    24:83:05:ac:79:38:d9:04:d1:5a:cb:bd:1b:92:36:
                    3f:24:de:05:6e:07:63:85:ba:90:87:0e:0d:46:af:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:AB:2E:15:C7:F7:94:E9:E6:97:3E:95:A6:E3:9D:B4:C3:86:24
            X509v3 Authority Key Identifier:
                keyid:B3:85:E4:C3:A0:3F:79:AE:38:D8:D6:54:C2:A6:50:37:3A:09:5B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/B385E4C3A03F79AE38D8D654C2A650373A095B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B385E4C3A03F79AE38D8D654C2A650373A095B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/323830343a386336343a3a2f33322d3438203d3e203631363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:a6:ea:55:bc:ac:f0:3a:73:54:74:94:44:d7:fc:ae:fa:
         90:f2:29:cc:24:d0:8c:9d:f8:e3:16:7c:b7:e6:f0:e0:46:da:
         67:7b:ae:9f:3b:68:a3:ba:40:ef:3b:43:a4:f1:2e:92:7d:8a:
         09:d8:96:b8:2a:77:d2:90:35:39:41:df:0a:e3:5b:b5:31:80:
         8b:ee:28:fa:3a:a0:e0:fa:8a:55:6b:04:dc:b8:a4:8b:5f:a5:
         be:f8:36:f2:b8:b9:9a:df:ef:d8:fb:ac:5c:95:07:ad:4c:cd:
         0a:00:20:24:97:b6:9c:4f:e4:80:bd:2a:d3:df:90:7e:09:47:
         54:52:8e:0e:f3:7e:bb:cc:2d:9e:f1:e9:d8:9b:08:d2:a0:0c:
         bf:ce:54:83:db:90:70:d5:41:7b:fb:95:51:20:4b:46:10:02:
         af:16:d4:90:48:7d:e3:78:4f:70:f6:ad:1d:d6:8a:4b:ee:0b:
         04:70:04:88:2b:6e:f7:d9:4b:75:db:25:c2:40:b6:77:6f:77:
         6a:0e:2e:95:b7:2b:c0:27:f3:f7:58:23:eb:20:47:5f:5d:01:
         7d:b2:d2:22:7c:02:2f:e0:da:7a:0d:01:11:6e:17:fe:58:de:
         fa:ae:e4:74:68:d4:20:c9:09:e0:d6:39:c2:83:77:27:15:50:
         26:42:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:09:28 2026 by rpki-client