Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f33322d3332203d3e203533303437.roa
File:                     323830343a3666303a3a2f33322d3332203d3e203533303437.roa (raw, json)
Hash identifier:          YMYyu3xEQ5K4fPz67a9DH9pcocRA/RNlnPEhC5tW9fU=
Subject key identifier:   3A:C6:F9:62:68:CB:3C:C4:57:F3:B5:0D:7D:2B:E5:FB:59:D1:6B:FC
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       079FD3CD198376CCD6E81526AF07428AEA68EFF2
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f33322d3332203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:45 +0000
ROA not before:           Thu 08 Oct 2026 13:34:45 +0000
ROA not after:            Thu 07 Oct 2027 13:39:45 +0000
asID:                     53047
IP address blocks:        2804:6f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9f:d3:cd:19:83:76:cc:d6:e8:15:26:af:07:42:8a:ea:68:ef:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:45 2026 GMT
            Not After : Oct  7 13:39:45 2027 GMT
        Subject: CN=3AC6F96268CB3CC457F3B50D7D2BE5FB59D16BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:be:18:03:bb:3a:7c:b5:6d:c2:e8:2a:e0:
                    1a:e7:d0:54:d5:36:93:7a:e8:8e:89:b3:2b:e8:34:
                    f8:08:0f:09:b7:5c:a5:12:fd:d0:59:9a:4a:2d:0d:
                    b6:2a:30:23:fc:7d:a7:df:13:12:38:1c:96:75:e7:
                    44:f6:9b:95:eb:1e:5e:09:0a:ad:77:ab:45:46:cb:
                    7d:95:5f:62:8c:e8:a0:f6:f1:3c:9f:14:21:0a:69:
                    27:94:ce:1b:cf:ae:d0:86:98:09:18:5f:a8:de:34:
                    ae:6f:22:0e:3e:de:6c:d1:56:ec:83:74:99:ee:cf:
                    1b:e2:12:10:d5:65:bc:44:cf:4f:97:49:ea:85:66:
                    87:d7:0f:91:97:d8:d9:65:ae:3f:bd:12:da:5c:32:
                    82:0b:c8:84:b2:f0:38:66:f0:fb:94:cc:d6:53:f1:
                    e9:7f:70:80:ea:ad:7e:14:8d:f8:5a:8e:fb:3b:9c:
                    b1:ec:9d:91:24:97:1e:e0:34:7a:c4:81:b7:fd:6d:
                    91:3b:14:47:18:fe:11:e3:8a:e2:7a:b1:fa:aa:12:
                    cd:d5:c5:19:eb:69:42:fe:44:e3:2d:1c:cf:1d:21:
                    d2:a8:3d:46:6a:25:78:c4:d9:3d:86:cc:93:f2:06:
                    fd:1c:fe:67:74:8b:9e:e3:03:bf:30:8f:46:7d:09:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:F9:62:68:CB:3C:C4:57:F3:B5:0D:7D:2B:E5:FB:59:D1:6B:FC
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f33322d3332203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:88:89:b0:2d:37:0c:66:c2:9a:43:58:d4:25:c7:f9:ee:33:
         c4:70:23:1c:49:16:71:5f:31:01:4f:ef:1b:df:0f:0c:1b:6f:
         d5:12:e4:80:58:58:8c:9f:e8:aa:d5:ed:fc:70:11:11:45:5d:
         69:c7:11:6e:11:e4:d5:cd:81:5a:bf:06:d7:c1:f3:c9:e4:49:
         91:91:22:15:cd:c9:eb:d3:28:86:67:57:85:f3:64:30:a9:ed:
         de:25:1c:ab:fb:af:01:94:6d:f9:16:55:bb:03:bb:b9:fb:39:
         87:aa:83:b7:3c:a0:e9:d4:cd:7d:61:42:5a:ba:7e:48:fa:3e:
         23:b4:e5:8c:f0:14:4b:83:65:d2:89:a8:9f:79:cb:c0:fb:79:
         5f:47:b5:4f:75:c0:a0:4c:14:e0:f7:bb:19:cb:64:ad:a8:4d:
         3b:4b:b8:65:df:b4:e7:ac:eb:83:26:9e:ec:99:32:38:09:71:
         f0:c3:a8:7f:da:77:bd:a7:51:6b:68:91:cc:32:70:34:12:bb:
         66:8c:2c:6e:40:b9:69:5c:18:dc:a6:ad:49:3f:a5:51:cb:58:
         35:e3:de:8a:5e:a7:ab:ad:90:9d:7a:77:b7:cb:36:0c:a0:d1:
         0c:f6:c6:6c:7a:0f:8e:5e:8f:c6:3c:1e:e2:9a:94:1b:b3:cf:
         ba:37:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:25:41 2026 by rpki-client