Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/323830343a313234383a3a2f33322d3438203d3e20323633343637.roa
File:                     323830343a313234383a3a2f33322d3438203d3e20323633343637.roa (raw, json)
Hash identifier:          1omrHlx1IUKGmjlQvWaxZ4fhnwouogvcrbKTOxQIHRs=
Subject key identifier:   54:AC:A9:70:AF:7A:68:A3:50:F3:82:53:D8:D3:3C:A4:B9:3F:CA:04
Certificate issuer:       /CN=718FD7745122924B2C0447ECC4439A2FA495E189
Certificate serial:       02B9FF2732FA171E1FAB262B8907BF8C4F534F94
Authority key identifier: 71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/323830343a313234383a3a2f33322d3438203d3e20323633343637.roa
Signing time:             Wed 30 Sep 2026 14:03:10 +0000
ROA not before:           Wed 30 Sep 2026 13:58:10 +0000
ROA not after:            Wed 29 Sep 2027 14:03:10 +0000
asID:                     263467
IP address blocks:        2804:1248::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.crl
                          rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 08:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b9:ff:27:32:fa:17:1e:1f:ab:26:2b:89:07:bf:8c:4f:53:4f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718FD7745122924B2C0447ECC4439A2FA495E189
        Validity
            Not Before: Sep 30 13:58:10 2026 GMT
            Not After : Sep 29 14:03:10 2027 GMT
        Subject: CN=54ACA970AF7A68A350F38253D8D33CA4B93FCA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:a5:18:bb:cc:55:98:9d:79:ed:8d:d4:15:
                    77:9b:e5:68:27:ec:d1:a6:5e:46:6d:46:d8:f0:ac:
                    ba:1a:9e:ce:de:16:93:e2:88:8a:97:31:22:37:39:
                    b9:0f:e7:e1:b5:58:5a:de:cd:23:71:3b:16:55:49:
                    46:34:2f:b8:07:08:6f:09:68:f9:58:c8:ec:fe:21:
                    3e:39:48:c3:0f:f1:da:32:ce:f7:26:2a:a2:28:b0:
                    72:8a:34:56:ee:63:02:34:38:61:1b:3f:6f:3d:0f:
                    d6:37:fd:1a:6a:ad:78:78:05:d0:93:e3:58:c7:59:
                    37:1f:a5:7d:d8:a2:11:f2:02:7b:36:75:d1:16:0c:
                    d7:45:5f:46:b1:8f:e0:21:e5:68:d4:db:5f:c7:d7:
                    9f:a0:39:08:41:8a:e2:4d:7e:85:00:48:45:fc:49:
                    c3:46:8c:54:20:3f:ea:0a:c0:40:aa:0a:da:32:11:
                    c3:83:85:be:03:6d:6a:4e:75:d4:e2:aa:4a:a3:9d:
                    f6:10:c3:61:67:bb:71:c2:cf:3d:6b:fb:54:b3:64:
                    27:d2:cb:2c:f0:ca:77:7d:d7:0e:34:68:33:17:92:
                    14:1d:22:b8:a4:8b:93:95:50:ca:53:e7:ec:39:25:
                    3b:0e:c7:7c:90:2b:d9:32:e8:bc:65:78:9e:a8:fd:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:A9:70:AF:7A:68:A3:50:F3:82:53:D8:D3:3C:A4:B9:3F:CA:04
            X509v3 Authority Key Identifier:
                keyid:71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/323830343a313234383a3a2f33322d3438203d3e20323633343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1248::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:a6:17:f7:1c:65:5a:64:5e:db:3f:66:4e:49:75:dc:91:
         ae:7c:d7:0d:0b:c6:64:00:09:8c:db:d1:99:7f:9b:b7:54:d8:
         75:71:42:54:60:45:e4:13:bc:52:b7:5b:14:26:3e:38:62:7f:
         41:5c:ab:2a:f6:bf:6d:44:d4:78:22:b3:58:c2:d4:ca:13:e5:
         49:9d:d3:e3:3a:4e:de:33:69:f8:f6:d9:80:16:8f:9e:48:95:
         b6:15:03:66:b5:83:cf:6b:d4:ba:7b:22:76:fe:d8:80:a5:1d:
         35:e9:71:60:29:43:07:61:ad:61:f4:6c:6d:f0:69:9f:42:40:
         5b:5f:bf:f0:2e:a1:c2:0d:a3:f5:62:6d:76:82:69:6b:db:3d:
         d3:f7:0b:da:84:48:83:ce:0b:a1:34:48:7c:3b:54:21:e1:22:
         ec:b1:98:e6:c8:3d:7b:21:58:65:3f:4c:e6:d7:fa:8a:7f:09:
         4d:32:b9:29:60:3d:c1:ae:f3:77:f3:47:6d:d8:af:d2:aa:42:
         83:94:53:9e:c0:4f:d9:ec:0f:cf:5f:c8:7c:b4:8e:1c:95:6f:
         60:97:ec:62:cc:50:17:85:24:e4:c0:a1:52:92:14:46:c4:79:
         8a:4e:85:48:e2:f0:1a:f0:f8:2a:d7:b3:eb:a0:33:07:c5:79:
         0e:7b:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:28:29 2026 by rpki-client