Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa
File:                     323830343a366433633a3a2f33322d313238203d3e20323730353139.roa (raw, json)
Hash identifier:          M+1kYavQG3CBR07rzUbS1KY5vtDlvMScx1R1CzbUc44=
Subject key identifier:   CD:50:62:24:CC:30:3E:30:71:9D:6D:F2:03:2E:6D:43:32:F8:C9:5B
Certificate issuer:       /CN=1A5050EEA434138710D1F922949F1181F26D44A5
Certificate serial:       6DAD4343AB6ADD4ECC15223769DA0BFFE8FA358D
Authority key identifier: 1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa
Signing time:             Thu 01 Oct 2026 14:06:06 +0000
ROA not before:           Thu 01 Oct 2026 14:01:06 +0000
ROA not after:            Thu 30 Sep 2027 14:06:06 +0000
asID:                     270519
IP address blocks:        2804:6d3c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl
                          rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 10:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ad:43:43:ab:6a:dd:4e:cc:15:22:37:69:da:0b:ff:e8:fa:35:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5050EEA434138710D1F922949F1181F26D44A5
        Validity
            Not Before: Oct  1 14:01:06 2026 GMT
            Not After : Sep 30 14:06:06 2027 GMT
        Subject: CN=CD506224CC303E30719D6DF2032E6D4332F8C95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:e4:aa:fb:20:37:6f:8f:ed:50:af:3e:da:
                    db:3a:06:4a:66:18:5e:49:36:07:52:58:9b:dd:9d:
                    58:f4:bc:bb:17:21:44:6a:b7:d0:98:42:4b:19:e7:
                    2b:f7:40:38:05:ce:e4:67:57:b8:01:3f:e7:f1:bf:
                    25:3b:b0:e2:77:4f:f4:42:0c:99:6e:4e:b3:fa:26:
                    b2:ac:d5:8d:48:bc:1d:54:fa:7f:e9:41:7c:49:40:
                    cc:8f:d2:59:96:32:01:92:5e:76:ff:01:a5:42:d4:
                    18:32:b3:3a:13:d9:5b:10:fe:f9:81:e5:44:cf:a7:
                    76:65:3d:83:df:aa:5b:d1:2c:2e:12:9e:5e:0c:3e:
                    ce:68:81:56:38:67:de:fa:99:ec:82:00:20:a7:c3:
                    06:53:03:6d:02:25:a3:77:69:14:47:be:b6:b0:85:
                    d1:80:71:f3:fd:ed:10:7c:1e:5b:aa:13:c1:b0:71:
                    6d:fa:f9:8d:8d:9a:ee:a5:b4:ec:f0:cd:f9:9e:04:
                    91:71:d9:76:91:14:f6:eb:3d:e8:f4:24:2e:60:08:
                    1e:0f:08:63:40:a0:8e:d4:e0:2d:1c:1a:17:d0:16:
                    66:5a:08:fc:21:92:34:2b:fa:7b:83:73:01:48:d3:
                    77:46:4b:fd:d7:50:32:72:84:8c:b0:30:a7:d7:26:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:62:24:CC:30:3E:30:71:9D:6D:F2:03:2E:6D:43:32:F8:C9:5B
            X509v3 Authority Key Identifier:
                keyid:1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:a0:fa:68:dd:16:12:fd:ec:d9:bd:f7:2f:86:5f:33:4f:e6:
         40:79:cd:82:00:22:f8:6e:07:78:fb:c5:b9:9d:28:c2:0a:5f:
         b6:9d:be:9a:c0:23:07:a2:de:6f:86:98:0f:e6:1a:59:9f:8a:
         30:f9:62:87:51:b8:f0:0c:15:c2:87:c4:eb:2d:81:ac:8e:62:
         f8:44:f2:a3:bc:93:62:d4:1d:b5:60:52:29:3a:96:62:2e:7f:
         96:49:19:4a:bf:0e:44:f8:d8:5d:bb:19:18:a3:cb:df:68:df:
         13:de:60:42:15:9e:3c:60:b5:ff:a0:0c:bc:ed:b1:cc:68:ed:
         a7:c4:81:5e:df:ff:f8:91:63:28:06:44:b6:68:d0:9c:7c:16:
         58:d9:7e:1c:96:3f:ca:61:49:ad:cc:dc:4c:35:7d:36:c5:44:
         4c:ad:a5:f7:3f:9e:88:44:8b:10:0f:28:24:a8:a9:1d:9a:bb:
         90:96:d3:e2:12:b0:a6:df:c5:0f:2d:da:2e:be:2e:b5:a4:a4:
         cf:33:7f:6e:59:65:c5:af:fb:12:85:6e:44:7a:4f:76:1b:8b:
         dd:68:5d:ca:4e:e1:ed:a1:2e:5c:ef:01:f5:83:f8:e9:71:23:
         3e:90:c9:e3:c4:6b:65:31:60:fc:e7:1f:b3:49:f1:00:9d:72:
         18:69:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:27:01 2026 by rpki-client