Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/323830343a373466303a3a2f33322d3438203d3e20323731303133.roa
File:                     323830343a373466303a3a2f33322d3438203d3e20323731303133.roa (raw, json)
Hash identifier:          2rnVLIvE3zi3JxQq7MybmonFXqH5tkF67/XoWlcJOHs=
Subject key identifier:   3A:91:D3:CA:66:97:1D:FE:1A:EE:CB:06:E6:B8:62:46:D5:3E:98:20
Certificate issuer:       /CN=6AE14256892C56A512E61A5576E8BB4674AB83E4
Certificate serial:       6142B5E0527B61C66A0B6C2316ADEBC478A3828C
Authority key identifier: 6A:E1:42:56:89:2C:56:A5:12:E6:1A:55:76:E8:BB:46:74:AB:83:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE14256892C56A512E61A5576E8BB4674AB83E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/323830343a373466303a3a2f33322d3438203d3e20323731303133.roa
Signing time:             Thu 08 Oct 2026 13:30:42 +0000
ROA not before:           Thu 08 Oct 2026 13:25:42 +0000
ROA not after:            Thu 07 Oct 2027 13:30:42 +0000
asID:                     271013
IP address blocks:        2804:74f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/6AE14256892C56A512E61A5576E8BB4674AB83E4.crl
                          rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/6AE14256892C56A512E61A5576E8BB4674AB83E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE14256892C56A512E61A5576E8BB4674AB83E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 03:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:42:b5:e0:52:7b:61:c6:6a:0b:6c:23:16:ad:eb:c4:78:a3:82:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AE14256892C56A512E61A5576E8BB4674AB83E4
        Validity
            Not Before: Oct  8 13:25:42 2026 GMT
            Not After : Oct  7 13:30:42 2027 GMT
        Subject: CN=3A91D3CA66971DFE1AEECB06E6B86246D53E9820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:f1:2a:a4:33:30:0d:c8:ae:49:41:51:ca:
                    8d:8f:3e:87:99:df:c7:dd:49:f2:70:42:6b:2e:21:
                    66:c1:98:23:ef:f6:0b:24:b2:3d:37:db:de:49:0a:
                    0f:a7:72:44:49:22:13:7d:3c:25:58:da:1e:9f:95:
                    06:8d:da:fb:25:e0:ac:24:85:42:e5:0b:ae:64:53:
                    d4:f8:6c:54:78:fd:04:5d:50:1a:7f:36:a4:ec:db:
                    d7:26:fe:22:25:80:12:9e:da:b1:ab:49:8c:91:4b:
                    85:01:a2:67:e7:35:e3:5c:b7:c5:b6:a1:e9:77:08:
                    fd:70:fe:23:1c:3d:30:3e:0a:dd:eb:8c:a6:20:a2:
                    8f:93:6c:57:5d:5a:67:aa:34:c3:5b:69:48:fb:d7:
                    b4:8c:09:5c:8a:49:c9:f3:81:a6:9c:6a:0a:ce:aa:
                    16:2f:7a:52:a7:60:b0:83:36:dd:4e:d5:00:5d:e7:
                    41:36:d2:08:d2:82:2c:45:cb:35:e9:79:dc:0f:85:
                    2b:fd:37:93:ff:bd:c8:ee:f5:cd:dd:58:e3:6e:34:
                    0d:b5:6e:d5:e6:4c:78:dd:06:56:fe:d3:50:6d:af:
                    ca:cd:52:32:3a:12:15:ac:21:e6:d1:d9:7b:0c:bd:
                    f1:94:20:ea:a5:0f:b0:12:ea:c1:b9:a9:06:8a:05:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:91:D3:CA:66:97:1D:FE:1A:EE:CB:06:E6:B8:62:46:D5:3E:98:20
            X509v3 Authority Key Identifier:
                keyid:6A:E1:42:56:89:2C:56:A5:12:E6:1A:55:76:E8:BB:46:74:AB:83:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/6AE14256892C56A512E61A5576E8BB4674AB83E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE14256892C56A512E61A5576E8BB4674AB83E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/323830343a373466303a3a2f33322d3438203d3e20323731303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         e6:47:79:ec:b8:7e:76:15:88:2b:6b:5e:fd:ab:b2:3f:bd:8d:
         e8:6c:c9:a1:2c:53:a8:2f:a9:64:2a:d3:e3:a6:68:4d:c6:42:
         e3:0a:43:c0:d8:d2:fd:72:eb:11:a1:09:93:46:71:16:ee:d2:
         5a:eb:e5:61:10:68:d7:9c:59:a8:ee:28:1c:a4:e9:c8:19:91:
         38:e3:0a:62:5e:02:1d:0e:90:e1:1a:94:17:01:c9:97:15:df:
         e9:47:06:77:11:48:b6:d6:e8:97:0b:73:5b:49:d0:a6:87:8c:
         11:8f:39:e7:5e:df:01:a5:3b:be:1d:13:ac:5c:ef:3e:08:aa:
         28:ce:7b:2d:0a:4d:e3:8a:0f:fb:54:76:7a:39:20:29:47:6e:
         cb:e0:56:82:dc:99:f4:62:36:1b:50:58:a2:09:83:64:88:30:
         20:81:60:90:b4:83:0c:0a:7f:bb:db:db:f3:bf:d6:2d:57:07:
         35:0f:02:de:64:2a:c0:a2:14:79:30:b4:c0:9f:2b:08:77:13:
         56:62:c1:4c:5f:7f:e0:7b:20:fb:47:14:4b:a4:7d:5a:08:d8:
         f6:da:6e:23:3e:af:e0:a6:f3:d6:76:12:b5:88:8a:f5:e1:fa:
         ea:0e:da:1d:45:b8:db:84:e8:75:69:c1:c5:c9:99:3c:07:50:
         de:71:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:28:30 2026 by rpki-client