Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a653030303a3a2f33362d3336203d3e20323735383038.roa
File:                     323830343a393964383a653030303a3a2f33362d3336203d3e20323735383038.roa (raw, json)
Hash identifier:          qRR0k1RV23HMnlBDuSOcwXOo15j8pWK9wOlEjUCfvrg=
Subject key identifier:   8F:A7:14:8B:D5:0E:77:6E:DE:96:6F:4F:02:3A:CE:A3:F9:E2:9A:06
Certificate issuer:       /CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
Certificate serial:       2662B16977C2EF5EFC46A89EBD5FEA524AB98DB4
Authority key identifier: B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a653030303a3a2f33362d3336203d3e20323735383038.roa
Signing time:             Fri 02 Oct 2026 12:50:34 +0000
ROA not before:           Fri 02 Oct 2026 12:45:34 +0000
ROA not after:            Fri 01 Oct 2027 12:50:34 +0000
asID:                     275808
IP address blocks:        2804:99d8:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl
                          rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 00:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:62:b1:69:77:c2:ef:5e:fc:46:a8:9e:bd:5f:ea:52:4a:b9:8d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
        Validity
            Not Before: Oct  2 12:45:34 2026 GMT
            Not After : Oct  1 12:50:34 2027 GMT
        Subject: CN=8FA7148BD50E776EDE966F4F023ACEA3F9E29A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:5f:14:9e:aa:4d:56:22:cb:53:4c:d8:e5:
                    18:ca:05:aa:34:c5:cd:f6:0c:e7:75:bd:61:06:b1:
                    29:4c:2b:6f:3b:3e:6e:40:b9:cf:0c:08:70:ec:48:
                    63:9d:81:6b:00:38:6f:69:94:fc:91:96:de:b3:39:
                    db:bd:a1:d6:c3:8a:45:31:bb:de:7a:d1:75:9c:aa:
                    e5:00:8f:7e:ba:36:99:a8:cb:6c:42:06:4c:ed:3a:
                    8c:d7:c5:c3:f6:ed:46:08:57:83:89:de:83:24:b0:
                    e2:b2:3d:6b:00:a9:15:58:41:e8:42:71:84:3d:ba:
                    14:a3:54:db:46:5b:e9:af:b2:7e:a8:7b:8e:07:b1:
                    2f:38:a2:a2:85:b8:6d:f6:ac:f7:a4:40:e4:c4:b8:
                    12:19:91:60:58:5a:87:eb:c2:71:50:39:21:b5:f3:
                    3b:da:87:a4:97:b8:ab:4e:2a:fd:8d:46:59:5e:d5:
                    41:cc:69:79:01:bc:c2:09:1e:18:c2:85:ed:53:d9:
                    76:dc:7a:ee:2c:be:49:be:23:0c:9d:fe:3b:77:99:
                    f6:a6:ea:88:46:4a:86:75:e1:7b:b1:1a:0e:f9:b2:
                    f0:75:d7:bd:9d:a6:7d:0e:be:cf:1d:0c:d1:1c:60:
                    e5:21:89:67:d5:f4:e0:af:1b:02:36:87:ad:46:b6:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:14:8B:D5:0E:77:6E:DE:96:6F:4F:02:3A:CE:A3:F9:E2:9A:06
            X509v3 Authority Key Identifier:
                keyid:B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a653030303a3a2f33362d3336203d3e20323735383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:99d8:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a7:69:2b:12:4a:27:a9:73:c3:3a:21:3c:6b:b0:96:01:88:77:
         68:24:8a:1e:7b:ce:8f:c0:9d:71:4f:f1:7f:73:cc:b2:b1:c1:
         4b:71:95:8e:41:e0:ba:68:33:fc:25:28:6d:08:96:c6:2f:4a:
         53:0d:3a:03:13:59:c7:f6:70:14:62:9d:aa:26:29:2a:49:f6:
         3d:0a:8c:02:3d:d9:0d:c3:30:aa:de:28:00:7d:12:00:26:8a:
         c7:36:50:95:c5:f4:86:88:27:ed:c7:20:a2:56:0c:f9:99:de:
         b8:06:df:17:47:db:26:9f:fe:b5:8d:6b:52:44:6b:d8:56:e9:
         63:1e:19:d3:7d:ab:19:b3:d4:6e:28:e1:21:85:a9:28:6f:a1:
         ae:e5:0c:e2:12:89:b6:7b:71:5f:56:7e:8e:63:07:d7:af:f7:
         da:b9:fe:db:81:86:03:f3:bc:e0:e2:7d:06:e8:dc:1b:c9:d2:
         2a:91:a1:2d:41:66:33:1f:ed:bf:b8:d9:d3:c7:9c:5f:7a:f0:
         1b:30:f2:02:0f:d9:7b:5a:b1:29:98:51:d2:bc:8c:0f:43:d6:
         d5:a1:c7:c6:49:ec:23:8a:96:c7:c2:6c:ed:b4:9c:dc:da:b0:
         65:18:ce:69:b0:fb:a8:85:5e:18:35:30:03:f8:51:00:0b:cb:
         eb:96:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:25:30 2026 by rpki-client