Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a3a2f33322d3332203d3e20323639323435.roa
File:                     323830343a363139633a3a2f33322d3332203d3e20323639323435.roa (raw, json)
Hash identifier:          T9/AWRCWMQNabhvpvc5DoqBOXzxTDxl+MVVw+9zAd9M=
Subject key identifier:   FC:EB:5E:70:1E:E9:AE:1D:7B:51:7D:8A:D1:D1:18:A4:56:EE:15:99
Certificate issuer:       /CN=556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241
Certificate serial:       6C905BF952AE0E2EBB915F1D561F34E25E31FDC0
Authority key identifier: 55:6E:63:1D:A1:03:9E:6B:9A:8A:0A:7E:A8:93:8A:2B:1C:F3:E2:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a3a2f33322d3332203d3e20323639323435.roa
Signing time:             Tue 06 Oct 2026 13:11:41 +0000
ROA not before:           Tue 06 Oct 2026 13:06:41 +0000
ROA not after:            Tue 05 Oct 2027 13:11:41 +0000
asID:                     269245
IP address blocks:        2804:619c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:90:5b:f9:52:ae:0e:2e:bb:91:5f:1d:56:1f:34:e2:5e:31:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241
        Validity
            Not Before: Oct  6 13:06:41 2026 GMT
            Not After : Oct  5 13:11:41 2027 GMT
        Subject: CN=FCEB5E701EE9AE1D7B517D8AD1D118A456EE1599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:cc:56:98:a7:3a:84:26:d5:ac:dd:36:4e:
                    34:40:5a:b0:9e:2c:c4:32:27:95:00:fd:b3:3f:d1:
                    32:38:28:2d:9b:a5:0a:e1:8c:98:3a:c0:48:cd:00:
                    2d:fd:7e:94:ab:4c:d4:85:81:11:84:c5:60:00:b5:
                    cb:16:27:93:f6:78:bc:cf:b1:59:20:fc:39:4e:6c:
                    bf:54:81:34:e4:60:0b:6e:3e:51:ba:a7:ca:e3:5f:
                    e2:f3:78:55:3f:22:81:33:c5:15:c3:bb:ec:d4:28:
                    6a:4f:32:2e:af:38:e3:e6:80:48:8c:d5:89:f5:ea:
                    59:bd:74:f0:87:b7:ee:c7:7b:03:cc:77:1f:12:e8:
                    bb:99:c9:df:c7:00:83:e4:7a:67:bb:1d:cf:40:c4:
                    45:cf:14:07:64:99:e8:5e:36:5f:6c:d3:8e:91:ba:
                    33:48:44:cd:31:ba:8f:41:37:76:68:c7:88:ad:9d:
                    68:ff:9a:6e:4f:68:02:fc:50:0f:9d:20:3f:b6:40:
                    81:ba:eb:8c:08:f8:9b:06:e6:0a:e5:0d:a3:c1:4e:
                    13:b9:ec:3e:23:87:d4:b5:4c:2b:a7:0c:8a:d5:c2:
                    e9:73:38:8b:b8:c1:e1:03:e7:46:b1:17:3b:b7:82:
                    8b:12:ae:13:75:ae:c0:04:6c:da:a8:ec:d2:a4:d1:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EB:5E:70:1E:E9:AE:1D:7B:51:7D:8A:D1:D1:18:A4:56:EE:15:99
            X509v3 Authority Key Identifier:
                keyid:55:6E:63:1D:A1:03:9E:6B:9A:8A:0A:7E:A8:93:8A:2B:1C:F3:E2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a3a2f33322d3332203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:619c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:b3:0f:d5:bd:82:77:ee:b0:06:8a:45:fa:cf:89:40:c7:c4:
         b7:cd:02:62:ac:68:37:c1:43:7b:e6:37:d8:26:65:82:3d:65:
         4a:94:73:43:64:7e:62:89:81:1f:ad:8d:6c:58:52:1a:cd:de:
         5e:16:6b:86:7c:1a:3a:31:50:d5:b8:06:20:3d:7f:47:95:5d:
         57:b0:bb:5e:18:ae:75:48:d2:ba:82:74:8d:9a:36:2c:05:b7:
         00:18:e9:c6:5d:1d:22:fe:e7:6a:67:12:0a:3a:77:b2:93:56:
         e9:b7:8a:b6:32:d1:6e:03:1a:2e:7b:d0:ea:85:43:8a:12:c9:
         57:4f:f0:fa:fe:28:71:4e:ad:a8:41:18:a7:33:1a:31:30:c4:
         b2:f9:f8:c3:b2:fc:e3:0c:16:7b:86:c2:d6:74:d5:c3:05:f7:
         e3:ed:a1:51:f4:92:de:08:f6:e7:1e:70:cc:6b:a7:0c:00:2b:
         14:69:57:f8:f1:75:71:ab:ca:a0:c0:e8:b5:c4:61:8d:78:3e:
         0b:ee:5a:2e:d2:1c:4b:bc:fd:7e:cd:40:5a:df:55:43:b4:14:
         7f:a0:6f:22:43:bb:65:40:5a:45:d7:dd:5f:ef:3c:d1:be:4e:
         68:68:ea:62:e9:81:0f:98:43:79:ef:33:ef:28:5e:34:54:77:
         fa:35:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:38:49 2026 by rpki-client