Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a363030303a3a2f33362d3336203d3e20323735383038.roa
File:                     323830343a393964383a363030303a3a2f33362d3336203d3e20323735383038.roa (raw, json)
Hash identifier:          1kOEVo2jHPOzu+W+5qn5wPlq2tDFj3P+O5F/DMzZC3U=
Subject key identifier:   54:4A:90:66:9A:83:A9:CC:C9:E8:C6:B4:EA:BC:90:45:9C:1A:35:83
Certificate issuer:       /CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
Certificate serial:       0A0E15619935274D13999C79B776ED4984BC2C4B
Authority key identifier: B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a363030303a3a2f33362d3336203d3e20323735383038.roa
Signing time:             Fri 02 Oct 2026 12:48:07 +0000
ROA not before:           Fri 02 Oct 2026 12:43:07 +0000
ROA not after:            Fri 01 Oct 2027 12:48:07 +0000
asID:                     275808
IP address blocks:        2804:99d8:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl
                          rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 00:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0e:15:61:99:35:27:4d:13:99:9c:79:b7:76:ed:49:84:bc:2c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
        Validity
            Not Before: Oct  2 12:43:07 2026 GMT
            Not After : Oct  1 12:48:07 2027 GMT
        Subject: CN=544A90669A83A9CCC9E8C6B4EABC90459C1A3583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:b6:63:e0:f7:c2:51:91:d9:33:7b:46:b8:
                    56:b7:b6:59:89:d3:55:e2:7e:45:f7:f2:6f:21:af:
                    6d:0a:60:df:d6:4a:1b:7c:5d:cb:0f:a8:77:26:a3:
                    5a:46:2b:7a:69:70:5b:7a:4e:c6:aa:11:c6:b1:b6:
                    28:d8:ae:e3:5a:0d:3b:df:41:34:6a:13:d1:42:8c:
                    73:34:7e:80:e7:72:01:22:71:69:58:36:47:f1:ad:
                    8a:8e:12:3e:7e:9b:80:af:87:ed:72:27:88:64:11:
                    58:e9:ac:e9:06:c0:66:60:c1:44:6e:99:25:a0:12:
                    b1:ae:ed:ff:fe:36:3e:08:f2:0e:12:03:7b:6a:d3:
                    44:0d:d4:3a:ce:bc:de:f4:a8:10:92:aa:98:de:aa:
                    a2:45:0e:ed:72:e4:cb:9d:73:cb:aa:ff:7b:10:b5:
                    9c:6a:ff:79:2f:4e:52:a7:28:f5:26:07:19:d8:46:
                    2a:17:d9:db:11:26:2f:e9:60:8b:18:fc:af:89:fb:
                    eb:d9:39:aa:cc:46:b5:3a:76:95:d6:50:72:f4:8a:
                    1f:88:a3:7b:eb:f6:d0:d7:dd:4d:75:81:1e:80:5d:
                    e3:ff:6a:4e:96:92:14:10:a7:01:a6:fd:b0:14:d5:
                    21:e6:b1:5c:96:07:71:e8:77:1e:ac:00:b0:96:ff:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4A:90:66:9A:83:A9:CC:C9:E8:C6:B4:EA:BC:90:45:9C:1A:35:83
            X509v3 Authority Key Identifier:
                keyid:B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a363030303a3a2f33362d3336203d3e20323735383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:99d8:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:8f:0d:4d:d9:bb:26:92:21:51:a4:a0:14:ee:9a:48:0d:
         74:73:44:6f:e9:8e:ce:1b:f9:b9:fc:11:93:7f:a4:2d:49:06:
         e2:d7:e1:d0:22:a9:fb:62:41:b9:d1:e1:56:06:bd:58:63:ed:
         7d:63:cc:bd:b2:60:c6:e7:60:32:e4:9b:33:2d:f9:73:55:3f:
         e6:c4:d2:0e:e5:f9:bd:12:5e:f7:7b:36:24:d2:c3:e1:e7:01:
         ba:ab:1d:c2:20:a3:5d:98:a8:2b:ce:5a:28:2f:a4:43:37:a7:
         3b:dc:85:35:86:5c:16:cd:7f:45:9b:4c:34:09:4c:6d:c8:7a:
         d7:27:77:d6:f7:65:e1:02:06:ff:99:11:d6:73:ba:a0:87:b1:
         d2:61:c9:76:74:29:13:57:18:58:4b:46:81:88:5c:01:0b:3f:
         74:7d:3c:4c:32:1d:e9:9c:c7:ad:0e:0d:59:79:dc:cc:d2:f4:
         d0:b1:e8:34:92:fb:54:50:ca:e4:fc:a4:94:7c:da:0e:67:44:
         3f:22:67:17:d7:54:4c:b5:85:10:0d:f8:d5:08:61:db:66:83:
         45:55:54:e9:8f:04:14:23:21:a5:cd:28:e0:e8:e5:db:68:db:
         84:5f:22:9a:e0:00:7f:7f:dd:20:c8:e8:32:5e:73:de:ae:73:
         48:0d:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:25:36 2026 by rpki-client