Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/323830343a373566303a3a2f33322d313238203d3e20323731303739.roa
File:                     323830343a373566303a3a2f33322d313238203d3e20323731303739.roa (raw, json)
Hash identifier:          M/4NDrxLueMISz/26XIgQs1IRXCS8n74CwhaDkD1y50=
Subject key identifier:   B1:AB:0B:D4:BA:D7:52:B6:5A:32:D6:41:6C:F6:9E:91:5F:57:8C:5F
Certificate issuer:       /CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9
Certificate serial:       14376BB265A23E4987E878786FC6B31DC8126D3C
Authority key identifier: A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/323830343a373566303a3a2f33322d313238203d3e20323731303739.roa
Signing time:             Wed 14 Oct 2026 15:31:25 +0000
ROA not before:           Wed 14 Oct 2026 15:26:25 +0000
ROA not after:            Wed 13 Oct 2027 15:31:25 +0000
asID:                     271079
IP address blocks:        2804:75f0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl
                          rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 06:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:37:6b:b2:65:a2:3e:49:87:e8:78:78:6f:c6:b3:1d:c8:12:6d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9
        Validity
            Not Before: Oct 14 15:26:25 2026 GMT
            Not After : Oct 13 15:31:25 2027 GMT
        Subject: CN=B1AB0BD4BAD752B65A32D6416CF69E915F578C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:f1:c4:ad:df:0e:be:a1:5e:cd:29:b8:79:
                    29:03:08:72:8b:03:ce:8a:a6:19:87:30:5b:97:77:
                    1c:b4:d7:40:9a:6a:63:9b:55:b2:c6:70:b2:52:3c:
                    d5:cf:94:f0:ce:03:b9:4a:7c:76:d5:b6:46:14:35:
                    03:fe:6f:7e:fa:3b:49:10:d7:d7:84:29:91:c3:6f:
                    7a:f3:ef:8e:0e:cd:6e:90:00:13:ae:9d:4f:7b:6c:
                    dc:d7:05:3d:f1:fd:b2:42:0b:32:00:41:47:a5:d1:
                    ec:85:db:1a:55:32:25:21:5c:db:59:f1:51:5e:e2:
                    61:ce:60:a4:a6:fa:de:9e:18:90:7b:01:19:3d:c9:
                    31:4a:90:9c:e3:67:bf:66:e9:0b:c6:b8:bd:29:56:
                    46:98:38:d2:f2:c3:13:f5:0b:f8:cb:fd:ed:f9:ea:
                    dd:30:f3:57:18:e2:76:4e:40:eb:ca:d2:09:6e:ba:
                    ca:d7:f0:0e:6c:2f:79:0f:22:6c:50:7e:37:49:e0:
                    40:99:b2:2a:69:ec:c3:cc:9c:31:7c:f8:89:e9:38:
                    d7:43:2f:b8:a1:c1:e0:90:f0:d8:dd:24:79:cc:4c:
                    44:2e:eb:9f:72:a7:df:44:47:e9:b9:50:96:23:41:
                    8f:8b:7a:b5:a8:9e:a1:60:98:c9:ba:30:c6:ff:ce:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AB:0B:D4:BA:D7:52:B6:5A:32:D6:41:6C:F6:9E:91:5F:57:8C:5F
            X509v3 Authority Key Identifier:
                keyid:A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/323830343a373566303a3a2f33322d313238203d3e20323731303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:44:d4:71:e5:76:ac:71:48:e3:44:44:1c:8b:78:2f:34:f0:
         56:db:a1:90:e9:00:1e:2c:cc:72:79:9f:fa:a8:54:65:96:ea:
         45:01:b9:5b:ea:ac:71:63:fc:5b:6c:ee:24:18:40:0b:20:e8:
         9a:b6:56:85:7b:67:64:eb:7e:4d:fc:0a:35:52:85:2a:a2:21:
         de:51:aa:e9:ed:d9:42:07:6c:a6:78:c5:c4:8d:f2:0b:51:31:
         87:f2:73:5c:d5:63:82:1f:12:c3:06:66:d3:57:0a:10:fd:43:
         99:c5:2c:6d:20:72:98:49:07:17:69:e3:6e:c2:6f:08:5a:76:
         49:3b:5c:b8:ed:4a:3b:1b:f1:06:87:a9:1c:93:22:06:92:b6:
         d5:f6:19:dc:30:42:be:21:37:07:8b:2b:c3:35:5e:ca:a0:51:
         b5:a6:9c:06:4f:ff:27:52:15:84:7b:03:f4:47:4b:ac:98:a1:
         04:1b:f3:9f:ce:ca:02:44:95:10:5c:d0:93:a7:ca:b1:14:c3:
         ee:3f:1f:f4:c8:16:6e:a5:7c:b7:42:50:bb:2b:3e:16:23:62:
         94:02:59:7d:06:35:cf:75:be:20:bc:4f:ee:86:a0:43:87:5e:
         d3:11:9f:b2:c6:59:2d:40:e7:34:f8:a7:38:d2:88:56:49:4d:
         3c:9a:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:40:59 2026 by rpki-client