Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a343030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a343030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          X96NKNdpNtmnCu9QTgaAvn+sFMFMnAqm3zu8YX4Iibs=
Subject key identifier:   64:78:34:5A:4D:92:65:BE:9A:FC:2D:02:C1:18:1F:E7:45:54:E9:2D
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       1B89D6D1F85B0E772562089619A1D747D1EDC84F
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a343030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 17 Sep 2026 17:00:35 +0000
ROA not before:           Thu 17 Sep 2026 16:55:35 +0000
ROA not after:            Thu 16 Sep 2027 17:00:35 +0000
asID:                     262585
IP address blocks:        2804:8f70:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 09:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:89:d6:d1:f8:5b:0e:77:25:62:08:96:19:a1:d7:47:d1:ed:c8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Sep 17 16:55:35 2026 GMT
            Not After : Sep 16 17:00:35 2027 GMT
        Subject: CN=6478345A4D9265BE9AFC2D02C1181FE74554E92D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:64:2a:35:f2:92:f1:9b:c0:24:2b:20:48:
                    31:53:af:bb:c6:9d:f1:0a:be:49:10:e4:78:43:82:
                    a0:7b:e3:f0:fe:80:1d:68:72:f6:9f:ed:e2:76:f9:
                    a0:eb:4e:91:cb:c8:cd:19:a6:1e:07:b1:5a:d3:1c:
                    b4:22:98:d3:de:90:0a:3e:c2:32:0b:4c:d0:ed:c6:
                    0e:62:fb:a8:aa:3f:31:6a:d8:9d:e7:ea:e2:20:5d:
                    3f:3f:5e:56:0a:60:9a:84:14:33:12:3f:41:52:23:
                    28:7c:72:6b:02:75:bb:b8:84:89:0b:d2:a3:cb:15:
                    f0:06:e5:63:97:b5:aa:6b:4c:78:68:5b:86:64:1b:
                    93:84:5f:69:0c:8f:c9:12:b1:47:bd:fa:25:52:cc:
                    aa:b1:d6:4e:c9:48:b3:09:db:20:d0:90:95:47:47:
                    3b:f7:9b:98:1f:80:30:91:7f:67:23:a9:f0:61:1b:
                    40:d2:a9:8c:48:18:b9:36:da:6c:81:39:63:1e:0d:
                    24:ef:1b:8a:86:96:df:c9:27:6d:15:7b:30:c1:48:
                    12:b9:26:2b:70:72:73:9d:fa:54:30:13:d2:a5:08:
                    b8:64:57:9a:2f:aa:93:4e:3d:9a:bd:e9:cb:22:9e:
                    7f:98:93:ad:43:7d:b8:8a:0e:4c:34:d8:0d:a9:7e:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:34:5A:4D:92:65:BE:9A:FC:2D:02:C1:18:1F:E7:45:54:E9:2D
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a343030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:83:92:ef:50:a5:ff:c3:cd:7d:67:6d:df:20:8e:38:60:27:
         ec:f7:7d:58:d3:ee:11:0d:60:eb:a5:dc:79:a7:71:6d:ce:3b:
         ab:84:e6:36:82:72:03:2a:e5:59:7f:2f:30:e4:e1:4e:52:f1:
         05:37:48:29:b0:26:c9:2e:a1:58:f1:cb:68:49:72:78:70:79:
         1d:78:e1:00:59:de:2a:5a:82:f5:94:59:a9:2f:e3:8b:57:5c:
         bf:c9:dd:51:f1:c6:2c:21:96:a8:d2:7c:ae:78:2c:0b:3c:3a:
         8f:fb:da:e1:35:8b:52:e9:96:c3:e9:dc:39:a8:a6:92:28:6b:
         d6:b9:31:ad:8e:ae:b3:18:9d:a2:49:93:f2:1a:c5:05:74:08:
         c3:80:8f:25:c7:31:33:82:7c:d2:59:5b:67:58:6f:6b:54:3f:
         ba:95:c3:6e:14:58:c3:e7:05:2c:ee:6f:7d:06:eb:33:11:9a:
         b6:b2:58:44:9f:a2:47:4d:74:76:fd:36:6b:53:8d:07:9f:13:
         97:b5:93:5c:0f:49:44:16:a3:2e:99:d0:39:0d:71:19:34:26:
         7a:15:62:13:49:70:c7:80:77:57:fe:40:b7:5d:30:4b:5f:91:
         8c:b1:4c:4c:82:6e:af:24:b5:13:87:4d:97:06:69:ec:f1:db:
         76:58:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 23:19:32 2026 by rpki-client