Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33322d3438203d3e20323730383134.roa
File:                     323830343a6637303a3a2f33322d3438203d3e20323730383134.roa (raw, json)
Hash identifier:          blYH100d1EC3SJZHjW5n5qTeJ9HzvJP8gGeChNRBgqo=
Subject key identifier:   AF:C3:6A:56:90:32:72:0E:13:22:58:B1:A4:19:63:4F:49:A0:75:96
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       24D4D617EBF7F29DD551DE60466F505AEFAF1191
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33322d3438203d3e20323730383134.roa
Signing time:             Mon 28 Sep 2026 17:50:03 +0000
ROA not before:           Mon 28 Sep 2026 17:45:03 +0000
ROA not after:            Mon 27 Sep 2027 17:50:03 +0000
asID:                     270814
IP address blocks:        2804:f70::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 16:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d4:d6:17:eb:f7:f2:9d:d5:51:de:60:46:6f:50:5a:ef:af:11:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Sep 28 17:45:03 2026 GMT
            Not After : Sep 27 17:50:03 2027 GMT
        Subject: CN=AFC36A569032720E132258B1A419634F49A07596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:23:f8:7e:bc:fc:6a:31:bc:ae:86:37:1d:
                    5f:62:d9:57:c0:69:f2:50:6f:5f:5c:58:56:84:58:
                    21:ad:e1:18:fd:7b:c1:03:c5:8c:ec:8d:44:df:e7:
                    ff:b5:0f:5e:fa:07:24:17:77:4a:55:3b:6e:d8:2b:
                    f5:99:4b:f3:59:65:64:9b:df:aa:68:50:8c:c0:53:
                    39:b5:cd:15:05:16:fa:b9:1b:35:97:77:b9:91:fa:
                    90:6c:dc:22:72:32:3e:dc:90:b2:d5:71:21:ab:4c:
                    a1:44:13:b5:37:0f:1b:8c:15:1d:2e:39:69:d0:bb:
                    4e:96:89:44:3e:13:e2:41:2f:e2:43:72:a5:8d:40:
                    fa:6d:8a:aa:c7:d9:1c:95:2a:1a:73:bd:7c:1e:2a:
                    64:a6:27:ac:78:04:46:7e:4a:28:4b:f9:5e:5f:6a:
                    a8:58:ff:e2:b8:52:c2:fd:0a:38:aa:a4:30:e5:66:
                    86:c6:7a:6f:66:c8:ca:d7:2a:d2:d1:e4:88:4a:82:
                    df:04:84:50:61:f8:7c:2d:8f:80:5f:c4:b9:37:ab:
                    b0:0a:9f:0d:32:71:eb:bc:8c:58:7c:93:cc:c9:0b:
                    85:0d:3b:55:e6:f0:4b:8e:5d:41:d6:f8:55:25:0e:
                    24:00:1a:ac:87:dd:6b:8c:8b:76:89:38:7e:0e:c9:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:6A:56:90:32:72:0E:13:22:58:B1:A4:19:63:4F:49:A0:75:96
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33322d3438203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f70::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:ab:01:0f:b9:4a:0f:76:ec:2d:67:0d:b1:52:9b:41:69:42:
         32:df:7e:d4:15:08:0e:5b:d3:32:09:20:58:85:28:80:21:16:
         66:41:74:59:73:30:13:4d:f5:89:72:e1:5e:1e:4b:7d:13:45:
         63:8a:57:1f:3d:33:48:a0:93:65:33:3f:76:b7:1b:5a:29:f6:
         d6:41:82:d2:aa:fb:5b:61:bc:43:37:1d:e6:46:6f:40:a1:28:
         8a:60:1b:7e:34:ba:f6:44:ef:31:69:d9:a5:49:5b:8c:d8:cc:
         67:b8:e4:c3:34:11:a3:9a:a9:bf:97:88:ba:4e:98:3b:b7:c9:
         b4:56:35:c9:de:62:87:1a:0a:a9:de:25:b1:fe:fa:82:c4:70:
         9c:e7:44:15:91:62:b3:8a:e2:d9:a5:f2:2d:54:11:d5:c2:70:
         5e:f3:30:54:57:98:ce:90:2b:f0:31:d4:46:c1:22:c6:62:7c:
         3b:6a:bd:6e:81:f2:0e:8c:82:24:56:da:61:08:b7:21:c2:44:
         e0:9c:4f:b5:eb:d5:03:02:cc:2f:af:41:0d:af:21:e2:72:65:
         1e:c0:36:b7:d8:59:a5:b7:b4:a1:9e:38:19:ad:6d:81:9f:4e:
         af:72:c2:28:ad:e3:e2:94:86:51:28:73:1b:07:5a:3a:74:44:
         93:ec:17:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:53:05 2026 by rpki-client