Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a383039303a3a2f34382d3438203d3e203631393030.roa
File:                     323830343a313261303a383039303a3a2f34382d3438203d3e203631393030.roa (raw, json)
Hash identifier:          72K+YY0vZUGvlFbHQ+VzDJQB1jfr6HuKKX5G13It6aU=
Subject key identifier:   9C:AD:EF:35:E7:B3:27:02:C7:42:A4:79:BE:5A:36:2D:50:5E:97:9A
Certificate issuer:       /CN=5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5
Certificate serial:       50F23AB4112292A5469FCCAD967119CC4B935B6A
Authority key identifier: 5D:DD:C0:E6:E0:1F:32:79:E7:95:CF:35:CD:48:AC:94:DD:42:E7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a383039303a3a2f34382d3438203d3e203631393030.roa
Signing time:             Tue 06 Oct 2026 23:13:59 +0000
ROA not before:           Tue 06 Oct 2026 23:08:59 +0000
ROA not after:            Tue 05 Oct 2027 23:13:59 +0000
asID:                     61900
IP address blocks:        2804:12a0:8090::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f2:3a:b4:11:22:92:a5:46:9f:cc:ad:96:71:19:cc:4b:93:5b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5
        Validity
            Not Before: Oct  6 23:08:59 2026 GMT
            Not After : Oct  5 23:13:59 2027 GMT
        Subject: CN=9CADEF35E7B32702C742A479BE5A362D505E979A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:f3:5e:9f:0b:a4:0e:be:d4:70:b7:b1:30:
                    88:75:98:b5:16:ad:ba:06:e0:80:20:08:c4:e6:81:
                    4d:7a:b2:fc:e9:1b:2e:53:6c:55:f4:33:f6:11:88:
                    c2:39:5b:4f:de:1e:64:ba:4c:d2:7e:cb:10:4a:8c:
                    ff:b3:c7:19:6a:66:9b:0d:ab:6a:b3:d3:d5:25:b2:
                    c4:a1:2a:ff:ea:4f:18:17:51:da:1c:58:9f:f2:8a:
                    fb:5e:6d:53:b5:ac:b9:2d:8c:32:90:12:e7:59:d3:
                    15:7c:7b:bf:8f:25:d9:61:86:8b:b8:f2:58:e5:d0:
                    c1:77:59:68:3e:27:1f:20:20:c5:a0:58:bf:c5:09:
                    ff:68:f7:ba:f3:c8:e8:57:2e:f4:06:94:98:0b:0c:
                    dc:09:18:90:d6:e7:f1:4c:15:a2:08:b0:a1:d4:5b:
                    b3:e7:05:e1:55:8c:64:dc:93:1a:b5:52:31:3b:01:
                    a8:2e:bd:f7:c9:39:71:15:4a:01:99:2e:8f:09:50:
                    bf:34:27:a8:38:bd:22:9c:57:0e:e9:9a:8f:2f:d1:
                    88:3e:98:d8:42:ca:7c:95:5a:5c:ea:5e:10:83:e0:
                    30:40:8c:18:bc:de:89:50:bc:ff:09:de:80:cb:7c:
                    a2:b6:82:56:11:0c:de:80:5c:88:e4:0a:f2:ff:35:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AD:EF:35:E7:B3:27:02:C7:42:A4:79:BE:5A:36:2D:50:5E:97:9A
            X509v3 Authority Key Identifier:
                keyid:5D:DD:C0:E6:E0:1F:32:79:E7:95:CF:35:CD:48:AC:94:DD:42:E7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a383039303a3a2f34382d3438203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12a0:8090::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:61:d1:a7:7e:ee:3a:b9:f4:10:fb:84:b8:e2:cb:92:ba:a0:
         92:e2:48:c9:35:2f:b0:f1:bf:2c:94:bb:ab:75:aa:06:4a:41:
         2d:92:76:39:c1:81:c7:ef:c1:91:35:c6:de:d8:ef:25:ff:6d:
         e2:4f:31:54:c4:6b:3d:84:02:2c:21:4a:ac:45:0d:6f:e3:84:
         5f:8c:5a:ca:08:38:3d:97:9a:d8:ca:c4:33:02:8a:b2:b1:b5:
         12:db:fb:1c:46:a2:75:bc:db:aa:9e:14:63:44:b2:38:ee:a0:
         d6:38:85:eb:21:59:24:e8:b7:85:53:aa:a4:2f:60:cf:dc:68:
         23:78:8a:63:60:53:9c:38:4a:17:b9:6f:7e:6d:2d:44:a7:5c:
         92:1a:36:1e:12:c6:80:c0:26:c1:45:f9:ef:ce:20:ff:b3:8b:
         7f:70:ce:6f:0e:6a:34:d5:72:6d:a0:9c:4c:2a:36:c9:7c:46:
         91:6b:80:20:2b:90:dc:96:2a:82:aa:f9:4a:05:6d:34:5b:09:
         21:a7:2f:d3:df:5c:ea:62:cb:9e:d9:04:47:0d:35:a0:19:e3:
         11:9a:44:8d:cf:af:47:af:91:7e:a3:f5:9f:3c:23:62:dd:b8:
         e6:8c:bc:56:fd:1b:70:1d:36:3b:c3:54:a3:41:92:a9:0d:fd:
         f4:bd:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:25:32 2026 by rpki-client