Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3438203d3e203631383530.roa
File:                     323830343a316134383a3a2f33322d3438203d3e203631383530.roa (raw, json)
Hash identifier:          ZUKXDELc7I4iiarO2f53dbq6Ryu9A2ahPqk84JooN/w=
Subject key identifier:   8D:C2:CB:8E:6A:0D:5B:BB:4F:29:92:48:A3:BF:BC:D1:46:0E:F1:4F
Certificate issuer:       /CN=704337C4217BBD58936864A322995C0D657BB548
Certificate serial:       69D9CF3F432BC4276DF354BD21A1AB4252821215
Authority key identifier: 70:43:37:C4:21:7B:BD:58:93:68:64:A3:22:99:5C:0D:65:7B:B5:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704337C4217BBD58936864A322995C0D657BB548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3438203d3e203631383530.roa
Signing time:             Thu 22 Oct 2026 16:20:22 +0000
ROA not before:           Thu 22 Oct 2026 16:15:22 +0000
ROA not after:            Thu 21 Oct 2027 16:20:22 +0000
asID:                     61850
IP address blocks:        2804:1a48::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/704337C4217BBD58936864A322995C0D657BB548.crl
                          rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/704337C4217BBD58936864A322995C0D657BB548.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704337C4217BBD58936864A322995C0D657BB548.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 01:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d9:cf:3f:43:2b:c4:27:6d:f3:54:bd:21:a1:ab:42:52:82:12:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704337C4217BBD58936864A322995C0D657BB548
        Validity
            Not Before: Oct 22 16:15:22 2026 GMT
            Not After : Oct 21 16:20:22 2027 GMT
        Subject: CN=8DC2CB8E6A0D5BBB4F299248A3BFBCD1460EF14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c1:97:55:9f:fb:6c:21:9c:48:d1:49:ed:dc:
                    f0:48:f4:fb:c4:d5:1a:7f:aa:cd:6a:a2:8f:95:e6:
                    bc:ed:55:2f:7a:8b:a0:72:e8:00:e6:83:e6:0d:e9:
                    69:45:60:6c:9b:a3:a2:df:ed:73:31:74:0c:c1:9e:
                    19:f9:94:58:d6:f0:14:9b:24:ab:ca:c9:16:28:1c:
                    91:2f:e2:5d:c3:e2:44:51:5a:5e:18:13:33:e8:9e:
                    64:0d:c9:89:92:8e:0a:40:f0:e1:ea:a6:a4:fd:a7:
                    bc:94:10:a1:d1:96:de:31:ee:2c:2b:27:74:2b:00:
                    c1:4b:7a:93:1c:21:4a:64:5b:58:cd:f4:47:40:c8:
                    82:be:53:c1:2f:a4:9b:c8:4b:0a:6d:cc:09:f8:e8:
                    03:15:3b:b2:92:ce:4e:e7:73:62:9a:51:af:6d:89:
                    f0:a9:aa:fe:17:07:38:d2:08:be:8c:34:b9:10:4c:
                    b4:45:43:6a:98:d2:4b:ef:8d:e1:0a:32:88:4e:1f:
                    ad:36:c1:c6:65:6a:de:9e:85:fb:45:87:7f:0b:6a:
                    28:cd:5e:43:9f:8c:41:ed:45:14:c2:d7:72:ef:2c:
                    b8:90:63:6e:54:87:a6:8e:a6:d9:06:dc:59:55:54:
                    64:c3:26:4b:ff:98:17:0b:7c:15:74:58:c6:bc:18:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C2:CB:8E:6A:0D:5B:BB:4F:29:92:48:A3:BF:BC:D1:46:0E:F1:4F
            X509v3 Authority Key Identifier:
                keyid:70:43:37:C4:21:7B:BD:58:93:68:64:A3:22:99:5C:0D:65:7B:B5:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/704337C4217BBD58936864A322995C0D657BB548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704337C4217BBD58936864A322995C0D657BB548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3438203d3e203631383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:ee:74:e6:4d:33:a1:12:c3:3b:2b:1d:a5:16:ee:22:44:5f:
         e3:8c:2e:4a:3c:70:1c:c9:70:ba:6a:ab:03:5e:d1:02:fa:cf:
         83:03:98:b3:dd:a5:01:80:0d:98:d0:fa:74:22:7e:a1:31:63:
         ce:f7:b8:f5:8c:59:84:5d:21:4b:6d:aa:b5:99:f4:ae:16:52:
         c8:7c:46:ea:f4:9a:4b:99:e6:1b:bb:7b:b2:a0:91:51:6b:00:
         dc:2e:f1:ba:10:25:2c:0e:24:81:93:5f:fe:4c:ed:a1:c5:60:
         58:7f:33:56:61:a8:98:ec:8a:b1:a7:8a:c5:72:31:d8:6a:31:
         94:86:a6:35:24:4a:01:57:60:a7:ea:f1:15:e7:de:3f:6b:fb:
         96:bf:56:73:c5:f3:db:13:5c:fd:9f:46:a1:05:78:eb:3b:29:
         26:20:1d:b2:3b:3d:fb:bb:d1:21:73:fd:4c:e3:f6:71:4b:b4:
         cc:7e:0e:9a:13:2b:b7:63:ba:d3:41:a1:7d:1d:35:37:d6:86:
         39:4a:bd:86:f8:23:38:56:a1:15:27:02:a6:4c:80:fd:7c:cc:
         6d:c8:05:0b:04:5a:27:9a:f2:52:6b:d1:eb:3a:0f:7c:6e:33:
         10:7b:c0:b9:2a:b9:71:a7:23:2c:3b:94:ad:fe:22:0b:1d:85:
         8f:54:db:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:58:49 2026 by rpki-client