Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/323830343a6431633a3a2f33322d3332203d3e203532363030.roa
File:                     323830343a6431633a3a2f33322d3332203d3e203532363030.roa (raw, json)
Hash identifier:          ACtJ5Vqx4GhwUtYTyv1rczht7Irc0ib4H2XSDceUfGA=
Subject key identifier:   7B:74:F9:E6:7A:B1:BD:B7:B0:DD:11:6A:A2:46:6F:4E:36:9F:11:1E
Certificate issuer:       /CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
Certificate serial:       027B976FFB511EBE3E96949FE515CCC86CA86C7E
Authority key identifier: 29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/323830343a6431633a3a2f33322d3332203d3e203532363030.roa
Signing time:             Mon 19 Oct 2026 12:59:46 +0000
ROA not before:           Mon 19 Oct 2026 12:54:46 +0000
ROA not after:            Mon 18 Oct 2027 12:59:46 +0000
asID:                     52600
IP address blocks:        2804:d1c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl
                          rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 05:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7b:97:6f:fb:51:1e:be:3e:96:94:9f:e5:15:cc:c8:6c:a8:6c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
        Validity
            Not Before: Oct 19 12:54:46 2026 GMT
            Not After : Oct 18 12:59:46 2027 GMT
        Subject: CN=7B74F9E67AB1BDB7B0DD116AA2466F4E369F111E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:84:14:1d:7a:bf:a6:38:82:d3:b7:d6:5a:00:
                    63:25:c5:99:56:6b:21:a9:77:a0:ff:01:4c:18:d1:
                    4e:a7:95:65:42:d8:85:04:49:d9:a4:32:b8:b6:f3:
                    46:44:d1:28:46:14:da:1b:2d:de:c1:02:86:43:df:
                    ca:54:95:71:58:7b:ff:d1:e5:a0:5f:1b:42:c6:a6:
                    b2:76:f9:6e:bd:99:31:31:e9:25:dd:15:4b:5b:ad:
                    97:31:9e:a9:44:5d:e4:e8:25:6b:ae:e6:f6:c7:4b:
                    b3:52:69:cc:00:54:df:3a:88:7e:a0:7c:08:7c:96:
                    f6:69:07:60:3f:99:1e:52:fe:6d:d1:3a:71:c8:2a:
                    d2:7a:58:ee:69:cd:98:29:f4:70:0c:80:3b:dd:3e:
                    cb:25:e2:09:25:88:51:e4:77:3a:c4:e0:f1:64:79:
                    e9:76:1e:d7:f5:2d:87:f4:5c:ae:ef:b0:87:8c:2e:
                    93:82:4e:05:3c:26:0b:29:ea:14:40:f1:7e:7b:68:
                    41:a8:68:2d:45:e5:f4:07:ef:5d:42:9b:46:45:62:
                    e9:e6:90:98:d8:5f:88:bd:30:b1:b0:c7:2f:da:bc:
                    09:da:ae:c5:e3:6f:b0:dd:ad:37:eb:57:09:e8:b4:
                    0a:b7:fc:80:4e:6b:97:1f:ec:54:4b:3a:f9:6b:70:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:74:F9:E6:7A:B1:BD:B7:B0:DD:11:6A:A2:46:6F:4E:36:9F:11:1E
            X509v3 Authority Key Identifier:
                keyid:29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/323830343a6431633a3a2f33322d3332203d3e203532363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:d6:ba:53:b3:87:ad:be:6c:d2:d7:22:87:17:12:90:22:f4:
         3e:f8:00:3e:16:97:6e:df:e2:90:66:f1:e7:93:47:8b:ab:4c:
         57:a7:2c:68:34:6c:13:0e:3b:9c:f1:77:22:e5:5d:e2:ce:1c:
         01:65:df:9c:ef:33:27:75:02:9f:29:10:6b:80:3a:24:6b:54:
         24:49:bf:c4:0f:76:4a:e2:8b:27:17:9b:1a:f6:33:44:2d:26:
         b7:69:3c:f8:8c:26:74:1b:a9:b1:fb:be:f1:29:74:b6:a3:20:
         36:91:9b:ce:8f:f7:de:92:a6:b4:26:e5:dc:93:82:0a:82:a8:
         5f:7e:3e:62:37:a6:2f:1a:cb:7f:81:f9:cf:a9:a3:d3:94:b2:
         53:51:fb:5c:5c:35:0d:93:8f:f8:2c:7b:57:7f:aa:7d:3c:3b:
         47:fc:46:07:19:58:e3:5f:38:48:7b:0f:c1:44:78:d4:02:42:
         1e:af:94:31:7f:d6:ee:2c:83:36:8d:7e:e1:f6:2e:2d:7c:4a:
         e0:66:18:15:f4:ed:6c:fa:51:96:32:9e:6e:8e:64:e3:53:6c:
         8b:5a:f9:22:4c:89:19:ab:34:26:0f:6d:e6:03:60:ec:37:7f:
         3a:3f:d4:9b:b7:7e:01:4a:c9:bd:bc:d0:ac:9a:07:72:bb:46:
         81:5b:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:26:12 2026 by rpki-client