Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/323830343a343836383a3a2f33322d3332203d3e20323637313139.roa
File:                     323830343a343836383a3a2f33322d3332203d3e20323637313139.roa (raw, json)
Hash identifier:          smeTxWi+Kvdb0qYUuA2tcCR+cjSyPuFqIwdzV48VGbw=
Subject key identifier:   3A:B0:85:6C:9B:6E:59:C7:FD:AA:D5:99:F5:B8:E4:AC:80:45:D5:D8
Certificate issuer:       /CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
Certificate serial:       5FD65D4718B83DC0B54D5284501F6EDA5BA2A901
Authority key identifier: 6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/323830343a343836383a3a2f33322d3332203d3e20323637313139.roa
Signing time:             Thu 15 Oct 2026 19:32:39 +0000
ROA not before:           Thu 15 Oct 2026 19:27:39 +0000
ROA not after:            Thu 14 Oct 2027 19:32:39 +0000
asID:                     267119
IP address blocks:        2804:4868::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl
                          rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 18:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d6:5d:47:18:b8:3d:c0:b5:4d:52:84:50:1f:6e:da:5b:a2:a9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
        Validity
            Not Before: Oct 15 19:27:39 2026 GMT
            Not After : Oct 14 19:32:39 2027 GMT
        Subject: CN=3AB0856C9B6E59C7FDAAD599F5B8E4AC8045D5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:58:e3:ac:db:78:54:01:8b:a8:72:b0:e3:
                    f0:a3:14:de:c9:1c:8f:f9:6d:bf:84:1f:e3:65:1f:
                    97:fa:12:5e:ad:2c:c3:10:e4:58:e7:b9:83:51:7d:
                    d6:9a:ab:33:09:ff:f7:d5:2c:0a:8e:a3:0b:e8:e1:
                    54:ec:60:35:94:d1:63:af:ad:d6:8b:b8:2e:ad:a0:
                    81:50:07:47:8b:66:3f:62:9c:ac:df:87:74:81:24:
                    15:2a:86:79:7c:64:12:40:de:fc:c4:5f:d4:5e:ad:
                    a7:9e:21:30:00:a3:9d:27:bf:fc:ba:09:75:3b:f8:
                    9f:2f:66:23:ba:82:e1:e1:49:3a:a4:5d:bc:bc:9c:
                    e9:42:3f:ad:08:5a:6a:ab:41:68:33:97:dc:66:f4:
                    2d:ec:7d:88:c9:0c:d4:bd:71:0a:17:e4:25:e3:c1:
                    7e:49:21:8a:99:4a:48:73:11:66:41:8e:d5:2d:07:
                    27:a8:aa:2c:3a:d3:44:26:dc:5a:1a:8c:1b:21:b6:
                    fc:0f:4a:d5:6f:1a:45:f7:a0:36:b5:4f:74:5f:c3:
                    da:93:39:0e:3c:6d:b3:36:ba:2f:c7:93:47:db:53:
                    5e:74:96:26:c9:8d:53:56:c4:15:43:85:3e:a9:1a:
                    c7:8d:e1:60:60:4f:8c:e0:06:da:7f:e4:6f:0d:6c:
                    1e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:85:6C:9B:6E:59:C7:FD:AA:D5:99:F5:B8:E4:AC:80:45:D5:D8
            X509v3 Authority Key Identifier:
                keyid:6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/323830343a343836383a3a2f33322d3332203d3e20323637313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4868::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:f2:15:a7:2a:f1:16:aa:28:b5:84:5f:3d:b2:63:ab:0d:1b:
         4b:b7:c2:47:01:b0:22:78:4f:f0:ad:26:58:54:ee:5a:83:a1:
         b9:58:36:50:b4:67:33:5b:3a:c6:f2:80:73:b9:58:89:12:a6:
         b0:ff:4c:0d:16:7b:bf:08:4c:02:d7:c7:a8:86:0d:35:6c:85:
         45:f3:48:d1:51:bd:d6:0c:37:c9:82:4b:1a:07:0c:fa:e0:d6:
         da:9d:b6:50:b8:14:dc:3c:5e:91:2c:4c:a3:28:3e:9d:c7:64:
         ce:52:1e:f7:e6:82:d5:e1:5d:7b:70:56:4b:8c:b2:93:b7:7e:
         e4:6e:7a:4c:51:f6:c3:bf:c6:a0:a3:9a:8c:bc:8b:7b:1b:b6:
         fe:7c:af:e9:32:cb:7f:12:a7:4e:70:d7:17:11:0f:f6:d3:c3:
         ee:1a:ba:7a:ce:e0:58:d2:de:d7:d3:5f:7d:8b:db:25:02:60:
         32:ce:47:05:4d:08:eb:ae:8a:bc:61:1f:66:22:a0:65:2c:f8:
         03:f1:1e:e6:e8:f0:5c:82:6f:66:03:0e:ea:e7:51:b3:d7:37:
         85:16:ba:3d:f5:50:67:a5:c8:93:f4:24:e2:77:ce:55:28:d4:
         66:4c:54:d0:8b:6c:68:4f:cc:10:9d:22:57:75:76:b5:28:6d:
         82:38:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:40:12 2026 by rpki-client