Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/323030313a313264383a3a2f33322d3332203d3e2031323531.roa
File:                     323030313a313264383a3a2f33322d3332203d3e2031323531.roa (raw, json)
Hash identifier:          /bIWMfm8PDB8dujlx+4V4EN+EEeScFoREEwc8zk09kg=
Subject key identifier:   10:3A:D1:29:B9:26:DD:E4:55:70:B8:17:F7:8D:DB:69:AD:CA:9F:4B
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       6EBDFE83E5E90D58A8002CA51B57065B208F731D
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/323030313a313264383a3a2f33322d3332203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:08 +0000
ROA not before:           Mon 14 Sep 2026 13:48:08 +0000
ROA not after:            Mon 13 Sep 2027 13:53:08 +0000
asID:                     1251
IP address blocks:        2001:12d8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 07:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bd:fe:83:e5:e9:0d:58:a8:00:2c:a5:1b:57:06:5b:20:8f:73:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:08 2026 GMT
            Not After : Sep 13 13:53:08 2027 GMT
        Subject: CN=103AD129B926DDE45570B817F78DDB69ADCA9F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:f9:e0:73:46:a7:d3:29:4d:2d:19:7e:83:
                    80:82:ea:fc:a0:13:ed:78:e1:52:8b:68:8c:28:cb:
                    e7:ee:4f:a9:5b:28:bb:dc:45:e3:cb:64:6a:36:98:
                    15:f0:7c:96:f1:ff:52:97:a6:36:30:b6:22:f3:af:
                    6f:95:52:c0:59:2b:9c:00:8d:54:0b:4a:ce:42:e0:
                    48:60:5b:34:df:d1:cb:fb:d8:53:fb:9e:3f:9a:91:
                    0b:e3:99:e5:7c:71:80:44:ed:49:c3:31:86:f9:66:
                    28:54:fa:1e:5c:37:26:a1:64:b2:04:ad:29:d9:9b:
                    ef:3e:7c:28:c0:80:7a:c8:68:86:c6:0f:89:6d:b4:
                    ad:5b:fc:76:55:3f:c3:8f:2d:df:82:58:bb:11:73:
                    16:ed:23:4c:31:73:1e:c6:5b:e3:f9:d1:a7:40:50:
                    17:78:7a:ee:90:9a:64:1c:ab:90:8b:61:d0:60:e5:
                    8c:13:be:49:12:c1:09:d3:fa:8f:96:9c:ea:e0:c3:
                    f4:b6:09:49:bf:0d:02:0d:90:c5:ee:46:80:57:96:
                    77:50:a8:db:ee:8f:29:c7:12:26:69:18:c7:54:12:
                    bc:cc:97:86:5d:a0:54:fd:83:1c:fc:4d:bf:b6:cb:
                    20:3c:76:8c:2b:7e:67:6b:3a:d4:4c:ef:46:5a:86:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3A:D1:29:B9:26:DD:E4:55:70:B8:17:F7:8D:DB:69:AD:CA:9F:4B
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/323030313a313264383a3a2f33322d3332203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:bc:5f:5c:c1:24:a2:47:ea:94:87:20:df:d9:3d:56:ac:
         26:26:19:88:05:4c:9c:23:2a:be:aa:91:77:36:2d:d3:2c:b8:
         bc:2f:10:df:5f:3a:04:a8:eb:1d:c8:73:42:88:d8:d5:f2:a9:
         4e:e0:59:b8:32:81:eb:67:21:c7:23:c1:54:a9:da:a7:a1:59:
         84:b5:f2:f4:69:30:3a:a6:64:d4:41:59:65:93:c1:4d:d2:c0:
         90:2e:3e:9b:97:62:ec:ef:a4:82:10:03:bb:86:a9:4f:fe:9d:
         23:78:a4:c4:d6:12:07:bd:b8:ef:2f:f6:63:3a:43:83:ea:8e:
         0f:de:7a:49:0a:60:4a:60:61:cd:ae:3e:ec:57:78:5b:fe:5d:
         2a:d7:34:9a:b6:e9:f4:9b:7f:0e:21:3f:e8:c5:ff:8e:d7:8b:
         fb:e4:3a:ff:9d:cf:df:47:a5:1d:c0:0f:d4:3a:2d:67:ef:19:
         08:2a:d1:6f:d9:6d:54:99:d9:06:1e:61:a5:d4:03:e1:c4:2d:
         22:a9:04:87:22:b4:30:60:68:50:95:55:60:83:31:e2:d0:d3:
         73:c5:20:35:ed:67:c3:ef:5d:66:3b:25:94:1f:2e:7d:18:64:
         96:da:5a:93:40:86:22:4a:84:8b:e5:f7:19:70:20:39:19:f1:
         4c:6e:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:12:59 2026 by rpki-client