Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa
File:                     323830343a6433383a3a2f33322d3438203d3e203533313538.roa (raw, json)
Hash identifier:          ixVfGjOAuGJZVaOPOHqjLsdG60dhgkgolPMWrR0XXRg=
Subject key identifier:   47:01:FD:2C:D5:26:6D:2A:0B:D8:47:91:F8:A6:B0:70:6F:F2:43:94
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       1C90026B11775A65E8FA303F805ADC72AE506FEB
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa
Signing time:             Fri 23 Oct 2026 15:25:06 +0000
ROA not before:           Fri 23 Oct 2026 15:20:06 +0000
ROA not after:            Fri 22 Oct 2027 15:25:06 +0000
asID:                     53158
IP address blocks:        2804:d38::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 15:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:90:02:6b:11:77:5a:65:e8:fa:30:3f:80:5a:dc:72:ae:50:6f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Oct 23 15:20:06 2026 GMT
            Not After : Oct 22 15:25:06 2027 GMT
        Subject: CN=4701FD2CD5266D2A0BD84791F8A6B0706FF24394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:97:44:16:a4:3b:76:98:fc:a4:b6:35:bf:
                    c0:86:38:83:38:e8:39:60:0f:b0:85:ff:8c:d6:51:
                    ae:2b:a0:d1:01:0f:57:84:ce:1f:3f:98:3c:32:5f:
                    db:19:9c:63:32:cb:c8:ab:8e:47:74:bb:65:8e:0d:
                    c7:5f:4f:9d:bf:e8:75:0b:af:38:7b:a3:88:05:13:
                    d3:5b:8b:73:ee:37:81:21:a1:1e:bc:03:33:b1:43:
                    1b:7a:29:9b:1e:85:5b:83:99:cc:54:7a:aa:ce:e5:
                    34:52:52:5a:2d:d4:ff:85:ce:6d:81:b8:10:25:86:
                    7f:ee:4f:72:8a:f9:a5:10:3a:79:69:3a:8f:5d:2b:
                    6a:22:62:8d:ff:d3:87:2e:42:5e:63:da:24:27:f7:
                    e0:08:7c:6b:7a:ea:a5:8f:0f:34:a2:ad:05:72:d9:
                    0c:c6:e0:a1:b0:45:8a:b7:db:39:9a:09:4f:2d:43:
                    6c:ab:84:69:b7:c0:a6:0e:35:3a:23:80:23:09:c6:
                    24:29:9a:63:21:84:d6:22:16:3f:16:25:ca:12:e6:
                    3d:2e:00:72:33:6c:6f:a5:68:b4:9f:ad:bd:ec:33:
                    a7:2f:22:54:2d:46:03:59:6e:87:36:72:40:e1:93:
                    fb:91:2d:72:ce:0d:7e:e3:d2:6c:51:e9:10:7c:8a:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:01:FD:2C:D5:26:6D:2A:0B:D8:47:91:F8:A6:B0:70:6F:F2:43:94
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d38::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:a6:d2:f4:b4:05:77:af:ee:c3:a3:e6:c0:17:70:cd:33:
         56:39:63:65:b0:d5:58:44:7b:60:46:26:cd:52:71:30:b7:b6:
         a8:e9:3b:8a:73:17:18:42:9d:74:44:1c:6d:93:1c:6b:47:11:
         c0:8e:e8:56:66:ca:bb:cc:c6:6d:05:fc:a7:5d:46:e1:a2:53:
         23:63:de:84:be:4d:51:12:df:d7:25:95:23:f4:26:42:b9:47:
         7f:15:2c:9e:2f:5f:35:ef:78:87:f7:e3:e1:f2:89:3e:93:ff:
         24:26:b4:38:e5:66:91:bc:89:29:b0:e5:f7:77:09:f2:5b:b1:
         56:6c:be:3b:ec:a4:10:5f:ae:d3:40:35:d7:86:36:19:6b:78:
         7b:c2:aa:02:a7:52:01:83:be:4d:c8:b2:88:16:84:43:f8:7a:
         4c:02:53:59:13:6e:2b:da:4c:35:a6:1b:c7:5c:2e:56:b4:d7:
         1a:62:ae:43:b4:3b:a3:af:81:2f:b6:22:83:c7:6f:df:47:d4:
         99:ab:68:08:53:29:fc:4e:63:c7:e0:a6:96:82:e1:d3:d4:bc:
         40:6b:00:ac:6e:6f:e0:c4:f1:72:02:5f:ea:c7:88:9e:1e:e3:
         a4:1a:ae:77:69:69:7f:dd:0c:36:8f:cf:a9:47:6e:72:33:99:
         2d:3a:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:11:08 2026 by rpki-client