Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/323830343a343964343a3a2f33322d3438203d3e203532363331.roa
File:                     323830343a343964343a3a2f33322d3438203d3e203532363331.roa (raw, json)
Hash identifier:          JlIFQnWTrhTsI3+QNrATEfVbkiicqzwdVXFdRNZ4dGA=
Subject key identifier:   65:BE:ED:42:E1:4A:61:01:FA:FE:E3:BB:9F:2D:39:AD:8C:F4:A8:E0
Certificate issuer:       /CN=B918B6CD4D0436C084D841220DA710E9EAC36315
Certificate serial:       573A7306C4D0A227578CE37F46B0A9E3793CC608
Authority key identifier: B9:18:B6:CD:4D:04:36:C0:84:D8:41:22:0D:A7:10:E9:EA:C3:63:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B918B6CD4D0436C084D841220DA710E9EAC36315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/323830343a343964343a3a2f33322d3438203d3e203532363331.roa
Signing time:             Wed 07 Oct 2026 13:50:40 +0000
ROA not before:           Wed 07 Oct 2026 13:45:40 +0000
ROA not after:            Wed 06 Oct 2027 13:50:40 +0000
asID:                     52631
IP address blocks:        2804:49d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/B918B6CD4D0436C084D841220DA710E9EAC36315.crl
                          rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/B918B6CD4D0436C084D841220DA710E9EAC36315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B918B6CD4D0436C084D841220DA710E9EAC36315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 03:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3a:73:06:c4:d0:a2:27:57:8c:e3:7f:46:b0:a9:e3:79:3c:c6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B918B6CD4D0436C084D841220DA710E9EAC36315
        Validity
            Not Before: Oct  7 13:45:40 2026 GMT
            Not After : Oct  6 13:50:40 2027 GMT
        Subject: CN=65BEED42E14A6101FAFEE3BB9F2D39AD8CF4A8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:da:b3:37:9a:e9:e9:53:b2:4f:47:e0:b6:7f:
                    14:d0:be:92:fe:37:a2:b4:5e:d0:61:a7:8d:55:45:
                    f4:ad:24:a7:2d:fb:53:e1:45:32:8e:d0:a2:e0:3b:
                    d1:9d:34:6f:34:d6:9b:b2:c2:3c:ca:49:e5:53:19:
                    0d:56:59:e2:19:a3:c9:b4:69:93:11:9c:a5:aa:b1:
                    90:eb:59:a8:a8:7e:96:66:e9:6e:c0:d0:a1:d3:ec:
                    4a:f9:c5:d7:ba:d3:86:1f:fb:10:c8:f5:07:e7:ae:
                    55:d4:72:99:a3:9b:3f:1a:2d:12:95:9b:6b:d3:36:
                    3c:6b:57:88:63:50:11:1b:1a:49:d6:1f:bc:6d:aa:
                    1b:15:28:00:61:88:5d:c6:01:a8:11:68:dc:a4:40:
                    f7:c7:d3:d6:01:7c:a7:89:ca:3a:51:fc:e7:df:c2:
                    c3:3b:ed:45:20:e3:21:b2:73:e9:b8:ea:bf:62:bc:
                    a9:f1:33:10:d4:be:5b:ea:db:95:b3:96:16:26:ec:
                    2e:59:f3:01:22:46:b7:14:3c:8c:a3:d0:a2:51:30:
                    07:6d:68:37:a5:16:e0:ca:02:ac:c6:82:bb:a1:ff:
                    4e:1a:f7:20:e9:28:19:aa:5d:1f:e3:7f:a6:8f:6a:
                    3b:21:07:14:4b:78:18:a0:be:01:93:1c:5d:7f:0d:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BE:ED:42:E1:4A:61:01:FA:FE:E3:BB:9F:2D:39:AD:8C:F4:A8:E0
            X509v3 Authority Key Identifier:
                keyid:B9:18:B6:CD:4D:04:36:C0:84:D8:41:22:0D:A7:10:E9:EA:C3:63:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/B918B6CD4D0436C084D841220DA710E9EAC36315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B918B6CD4D0436C084D841220DA710E9EAC36315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TtpGHWZoBtZ2JJ6qm9HkBGDjpjHuZkYMsm35AgQS1Gp/0/323830343a343964343a3a2f33322d3438203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:db:30:5f:0b:7b:43:a6:21:cf:51:56:7e:10:af:22:66:11:
         13:b7:3a:c8:f4:d8:96:8d:ed:df:04:16:8b:37:53:db:16:90:
         ea:5c:bc:a4:0b:41:25:01:f8:07:10:29:54:1a:74:f1:fc:2b:
         da:50:c8:32:b6:5c:6d:64:50:03:c5:e5:3c:b1:18:7d:2c:a3:
         e4:d2:40:09:41:db:4f:6a:3d:00:fc:ce:76:c1:7e:15:08:07:
         3b:2d:6c:c7:fb:a0:2e:01:16:6a:dc:89:8a:be:e2:91:30:aa:
         91:f8:95:80:39:8b:0b:65:19:69:fc:70:f7:5b:d0:88:7c:21:
         2a:d7:84:9f:dd:2d:c6:99:63:9e:7b:a2:42:f4:1e:f2:65:12:
         3a:ba:9b:c5:67:16:59:fd:77:6f:d4:9d:4d:1a:b9:d9:43:f1:
         d8:6c:ee:9e:d5:46:a2:fe:9a:cb:8b:b3:1f:cd:c7:2a:b4:15:
         70:3e:ef:00:0f:4a:97:9e:d5:ac:b4:2e:99:5c:5c:e5:82:44:
         74:52:96:48:2a:91:be:8a:58:15:3f:54:ba:69:5c:1d:5e:98:
         ec:c7:51:a2:64:68:90:b0:4f:38:a3:3e:af:3e:ae:f0:89:c2:
         8b:5b:f8:40:20:23:80:ea:6f:a9:45:58:f7:8b:2f:2a:bb:fa:
         d4:78:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:10:51 2026 by rpki-client