Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383130303a3a2f34302d3430203d3e20323733343433.roa
File:                     323830343a386562343a383130303a3a2f34302d3430203d3e20323733343433.roa (raw, json)
Hash identifier:          brt78uC7T96o6l3JY3/NWmTpXd2u3eHYlEgCUEeDkQI=
Subject key identifier:   BE:F7:E4:28:22:1A:30:2E:0A:FF:F7:D7:5A:52:7D:3E:D0:CB:79:62
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       60D68BC13BB938E1BB96640A0C6AE22CD2AEE750
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383130303a3a2f34302d3430203d3e20323733343433.roa
Signing time:             Tue 27 Oct 2026 17:43:58 +0000
ROA not before:           Tue 27 Oct 2026 17:38:58 +0000
ROA not after:            Tue 26 Oct 2027 17:43:58 +0000
asID:                     273443
IP address blocks:        2804:8eb4:8100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 23:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d6:8b:c1:3b:b9:38:e1:bb:96:64:0a:0c:6a:e2:2c:d2:ae:e7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Oct 27 17:38:58 2026 GMT
            Not After : Oct 26 17:43:58 2027 GMT
        Subject: CN=BEF7E428221A302E0AFFF7D75A527D3ED0CB7962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:c1:4e:58:98:1a:cc:b8:c6:39:82:3b:00:
                    21:1b:29:f1:95:1a:39:73:19:1f:af:02:77:1e:79:
                    2f:ba:bd:fc:8d:62:8c:07:b9:06:90:a1:7f:86:49:
                    2f:da:62:e5:3a:16:30:93:93:ef:20:36:fc:02:38:
                    a7:a7:5f:a9:2a:f9:92:bf:9e:84:0d:07:cb:e2:16:
                    37:92:b5:f8:04:a6:61:bf:8e:15:62:c0:bd:cf:2f:
                    ca:e6:c0:df:b9:16:db:49:26:01:ac:bc:03:c6:9f:
                    e8:e8:ed:00:77:5b:6e:2c:39:d5:96:60:e8:6c:d7:
                    37:ba:6d:07:30:8f:a2:cf:9b:61:95:17:eb:9d:50:
                    5c:58:78:13:87:d1:77:fb:27:08:ef:29:dd:09:5b:
                    16:e3:c4:cd:ce:2b:c9:e7:bb:50:52:f5:2b:22:12:
                    d4:3c:7e:9f:fd:25:81:97:a2:51:d7:1b:78:57:10:
                    e3:55:0c:db:7b:a8:24:ce:07:11:94:87:4d:21:a0:
                    27:a3:4f:92:c5:52:9e:43:a8:db:ea:43:d0:67:2e:
                    ff:5b:5e:35:01:9f:e5:12:fe:d4:70:25:73:a8:f4:
                    28:22:01:d2:7f:28:e5:b9:11:fa:ba:f8:f8:68:87:
                    da:9c:49:11:ae:1a:15:36:2e:5d:2f:a5:d0:95:ad:
                    08:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F7:E4:28:22:1A:30:2E:0A:FF:F7:D7:5A:52:7D:3E:D0:CB:79:62
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383130303a3a2f34302d3430203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb4:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:fa:6f:92:1f:a8:52:cb:0d:3e:df:e5:16:99:14:12:38:2c:
         5b:73:e0:2c:13:40:a7:de:8d:0c:54:c3:4d:37:82:c6:30:8f:
         e9:dc:1c:c3:12:6f:dd:81:68:8c:94:e0:52:34:6f:99:9d:24:
         0e:43:33:91:77:89:c9:bc:1b:c4:7f:2f:22:84:61:83:53:7e:
         05:01:40:11:94:e7:2b:ee:35:9a:ff:1f:6e:c7:64:42:8a:80:
         26:d6:a6:6b:b3:b8:84:4d:b3:32:b6:9b:ba:3b:a6:84:ce:b3:
         83:72:89:9f:9b:2d:ec:17:4a:f6:ee:b8:29:a3:fd:ea:39:a9:
         ca:73:0e:7b:70:ad:84:8e:05:7a:90:4b:7b:20:9c:0e:8f:de:
         90:9c:8f:3a:65:6e:c8:6f:61:88:8d:ea:fb:f2:bc:5e:8a:26:
         f1:7e:ec:09:df:66:0c:da:59:cd:5c:b7:d2:0d:ec:51:3b:8d:
         33:b6:79:9a:a6:09:d3:7a:7e:b6:cb:89:0f:ea:69:54:90:18:
         c5:f4:48:75:d2:46:ae:af:be:77:8c:6c:ba:20:56:4f:e8:14:
         f6:3c:37:2e:25:3f:8c:00:d7:c9:f6:d3:99:e3:45:3e:40:2a:
         7b:e8:1e:fc:17:17:97:8e:22:d0:44:60:eb:10:e1:0a:d8:7c:
         05:eb:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:48:30 2026 by rpki-client