Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa
File:                     323830343a376266383a3a2f33332d3333203d3e20323731343636.roa (raw, json)
Hash identifier:          GfBNra+b+2FsJLWDlMkZ6rmi9aFqy2ktuS/hCLwUyqI=
Subject key identifier:   79:89:8A:B0:30:14:1E:AB:5D:5C:EB:7A:C0:2F:9D:29:6C:B7:0C:89
Certificate issuer:       /CN=5FBBD46F46AAD33267364B457DBF26525E4469A5
Certificate serial:       1AB6517BFE464028343FCD3741225FCCF276B314
Authority key identifier: 5F:BB:D4:6F:46:AA:D3:32:67:36:4B:45:7D:BF:26:52:5E:44:69:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa
Signing time:             Wed 16 Sep 2026 13:21:12 +0000
ROA not before:           Wed 16 Sep 2026 13:16:12 +0000
ROA not after:            Wed 15 Sep 2027 13:21:12 +0000
asID:                     271466
IP address blocks:        2804:7bf8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b6:51:7b:fe:46:40:28:34:3f:cd:37:41:22:5f:cc:f2:76:b3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBBD46F46AAD33267364B457DBF26525E4469A5
        Validity
            Not Before: Sep 16 13:16:12 2026 GMT
            Not After : Sep 15 13:21:12 2027 GMT
        Subject: CN=79898AB030141EAB5D5CEB7AC02F9D296CB70C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:ca:7d:3c:1a:b4:0f:0a:11:f4:92:f5:7c:
                    4d:8b:b3:68:d7:4c:3a:03:ca:94:50:9d:b2:e7:c8:
                    33:05:f6:d4:b1:bf:06:00:8a:0e:9e:71:e1:76:5b:
                    21:d0:f8:e2:19:46:f8:62:30:8a:8b:9c:88:d3:b2:
                    fa:93:de:25:75:58:d1:39:7e:68:ee:3f:6e:0b:0a:
                    2b:a8:47:19:e8:42:38:4e:2a:59:ff:ee:30:ae:ba:
                    58:11:f2:d3:42:2e:28:7a:cd:4a:77:34:80:90:0b:
                    72:7f:71:c3:29:5b:ec:d5:cf:03:d8:77:d2:87:52:
                    3d:dc:61:12:a8:76:42:54:a4:6a:c2:ba:bc:5a:89:
                    a2:c0:d6:29:4d:0f:df:1f:2a:92:b6:4a:9c:44:1c:
                    44:6c:5e:00:e2:7d:09:ff:3b:52:9d:c0:5e:83:cb:
                    79:e1:03:97:88:8c:bc:6c:5d:65:1a:05:2c:c8:f4:
                    a3:18:af:fb:6b:fc:39:1d:e9:3c:db:70:61:44:81:
                    11:61:4f:89:7d:d7:2f:c0:ed:68:b3:cc:25:d9:87:
                    2c:ec:01:ff:95:ee:3d:88:6b:af:2d:26:f3:29:90:
                    dd:42:d3:a4:ff:b0:92:30:25:8a:7b:e6:73:20:a7:
                    f9:3c:a8:a3:9a:b9:3a:6b:c3:3e:5f:2e:d9:b4:bd:
                    33:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:8A:B0:30:14:1E:AB:5D:5C:EB:7A:C0:2F:9D:29:6C:B7:0C:89
            X509v3 Authority Key Identifier:
                keyid:5F:BB:D4:6F:46:AA:D3:32:67:36:4B:45:7D:BF:26:52:5E:44:69:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8::/33

    Signature Algorithm: sha256WithRSAEncryption
         9c:28:6b:b1:43:99:5e:f9:54:c8:13:a2:5a:6a:e4:ba:f1:24:
         17:34:85:04:18:05:65:bc:b0:52:30:0e:bf:97:1b:a2:af:6d:
         34:e2:65:12:2f:32:65:11:1b:66:a4:cc:e9:fd:7a:f1:54:5f:
         f2:da:04:94:c4:33:88:a1:76:d4:c9:52:61:0f:1c:11:32:81:
         73:51:97:87:61:d6:9e:7b:27:36:f9:35:ce:44:78:b9:57:5c:
         36:3e:cf:71:6e:61:eb:5c:90:f1:ae:25:73:0d:c4:af:6b:1f:
         a7:dd:84:cd:4c:c5:90:31:36:e0:ea:a6:41:5e:1e:19:ce:19:
         db:04:e7:c8:75:5c:43:34:33:ee:af:b3:d0:ec:e4:63:48:a7:
         78:62:c8:6c:5f:86:a9:b0:f2:1a:a4:bb:78:39:27:2c:ab:39:
         3f:12:0c:c1:f8:b3:12:68:41:d1:13:e6:da:e0:cc:ec:5c:8a:
         54:89:f0:1c:88:90:2c:45:c1:68:c1:22:53:22:bc:46:86:e0:
         f4:94:03:e2:2e:12:1d:7f:65:9b:9a:67:47:37:ff:28:74:58:
         d3:d4:df:62:43:b6:97:3d:c4:38:e5:d1:04:4b:21:47:22:49:
         88:63:a8:3b:8a:0d:61:41:cd:2d:1b:14:9b:aa:ec:3e:12:15:
         a2:cf:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:59:19 2026 by rpki-client