Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa
File:                     323830343a343737383a3a2f33322d3438203d3e20323637303536.roa (raw, json)
Hash identifier:          UhVYsVh0UQJp3UVHCPuuZSR4dFaVj49upwmtiQ0GydY=
Subject key identifier:   FB:32:CE:E3:B6:DC:E8:70:B0:F9:14:18:46:7C:06:A8:38:44:5B:82
Certificate issuer:       /CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8
Certificate serial:       3DE59F7F17F46287396D9BCE806E41B871E69657
Authority key identifier: AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa
Signing time:             Mon 07 Sep 2026 23:45:37 +0000
ROA not before:           Mon 07 Sep 2026 23:40:37 +0000
ROA not after:            Mon 06 Sep 2027 23:45:37 +0000
asID:                     267056
IP address blocks:        2804:4778::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl
                          rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e5:9f:7f:17:f4:62:87:39:6d:9b:ce:80:6e:41:b8:71:e6:96:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8
        Validity
            Not Before: Sep  7 23:40:37 2026 GMT
            Not After : Sep  6 23:45:37 2027 GMT
        Subject: CN=FB32CEE3B6DCE870B0F91418467C06A838445B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:70:18:b0:da:89:af:60:da:f3:bf:97:64:86:
                    63:96:be:ff:11:a8:ad:b7:c4:d7:a6:bf:7a:1a:75:
                    31:4b:b5:97:b0:75:db:e6:41:19:72:01:e5:5f:1c:
                    f7:d3:26:9b:7a:78:c0:09:27:fd:16:2b:f6:43:cc:
                    e5:27:97:b6:9b:09:d4:94:f8:04:82:c2:11:4a:e9:
                    f6:e4:3d:03:3c:26:0d:25:4f:2e:c2:e7:b5:07:c2:
                    9a:1a:57:ea:82:fa:fc:94:9a:9c:50:a5:f5:41:7c:
                    ac:ed:c6:41:47:2a:f6:e9:24:5e:aa:8d:3b:32:ed:
                    33:ef:98:6d:1b:46:6d:d1:9b:0a:f3:8a:67:c7:2c:
                    85:45:2c:a3:4e:3d:cd:46:82:3d:f9:51:6d:b8:a2:
                    1a:83:23:46:e1:3c:b3:0a:7a:87:aa:81:ca:52:29:
                    72:38:53:e1:41:7a:de:a9:66:49:f9:68:3d:84:6d:
                    66:8e:de:d9:31:c7:83:15:fd:07:d8:ec:b3:de:9f:
                    26:19:ec:ee:0a:e5:a1:90:35:79:77:b0:08:2c:11:
                    8d:cf:29:48:93:1c:cf:c1:13:7d:1c:99:6e:ef:d3:
                    b4:b8:71:d1:89:68:56:e4:fb:25:1f:a0:7d:f1:7e:
                    f4:2b:20:29:59:62:aa:65:9d:71:b2:31:44:28:ce:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:32:CE:E3:B6:DC:E8:70:B0:F9:14:18:46:7C:06:A8:38:44:5B:82
            X509v3 Authority Key Identifier:
                keyid:AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4778::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:96:03:d1:d3:d9:f3:f6:e1:ea:d4:cf:e0:99:75:c4:58:ed:
         ff:4b:3a:e7:97:f1:5b:2c:10:63:fe:63:3c:ea:03:7b:00:b0:
         a5:08:f7:f7:46:43:2d:51:22:1d:11:16:06:30:fa:b4:6c:58:
         df:f2:81:86:21:8d:db:8c:64:fe:10:cc:fe:d3:a5:a8:35:27:
         65:71:59:dd:46:2f:c7:bc:a5:7b:10:75:1a:af:26:77:05:e4:
         11:1a:db:e8:4a:1e:73:09:a8:2f:38:8d:14:2e:7b:f5:93:3f:
         9e:0b:dd:60:d2:e0:58:50:a5:42:d9:cd:e6:37:0d:cd:2d:44:
         71:c9:b9:84:0b:c0:d7:47:56:12:25:6d:7c:91:e9:42:03:0d:
         ad:57:fa:96:39:90:04:e8:4f:bf:2f:c5:42:f4:f9:28:06:f4:
         6b:6d:c4:af:0e:37:42:57:d9:01:6b:72:fd:8e:eb:fb:41:74:
         52:d7:fc:37:a6:d7:d8:91:f9:d5:62:d5:cd:ea:db:9b:a8:97:
         05:cd:1d:f6:04:59:3a:b8:3a:9b:b9:a2:e7:bd:21:ca:04:30:
         80:58:4b:d5:26:df:c0:af:f8:46:5f:5f:43:63:85:5d:9d:fb:
         9b:b4:4e:de:a7:f4:0b:33:cc:49:f7:da:54:af:1b:af:bc:95:
         ba:2e:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:57 2026 by rpki-client