Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a3838303a3a2f34382d3438203d3e203238353731.roa
File:                     323030313a313264303a3838303a3a2f34382d3438203d3e203238353731.roa (raw, json)
Hash identifier:          IjHRIfGTTHrkb8dwrGSFh+xfr2V+Mu8CpQ/UbE4wD2Y=
Subject key identifier:   DB:6C:72:59:ED:FF:40:5D:B3:10:5F:FC:9C:B9:4E:37:9A:38:72:6C
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       50B153E597F930DDFAAB700C8E88F24B1A7A974F
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a3838303a3a2f34382d3438203d3e203238353731.roa
Signing time:             Sun 13 Sep 2026 17:57:50 +0000
ROA not before:           Sun 13 Sep 2026 17:52:50 +0000
ROA not after:            Sun 12 Sep 2027 17:57:50 +0000
asID:                     28571
IP address blocks:        2001:12d0:880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Nov 2026 15:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b1:53:e5:97:f9:30:dd:fa:ab:70:0c:8e:88:f2:4b:1a:7a:97:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: Sep 13 17:52:50 2026 GMT
            Not After : Sep 12 17:57:50 2027 GMT
        Subject: CN=DB6C7259EDFF405DB3105FFC9CB94E379A38726C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:56:e8:0b:2d:3a:3e:cd:ae:94:91:60:e4:
                    3f:3a:a3:65:fe:31:c5:bc:0b:3e:ea:81:81:65:64:
                    53:02:b8:14:1a:fa:22:10:16:80:35:16:50:95:b2:
                    4f:95:ec:1e:69:f6:01:a9:ec:bc:e2:b0:11:10:d0:
                    fc:41:13:20:ec:43:4c:cb:a5:2b:2e:4c:05:f1:1a:
                    97:84:7c:a2:e0:67:96:12:b0:8c:34:87:73:9b:cd:
                    b1:6d:cf:16:fc:6c:fd:6c:a2:42:4e:3c:d6:5b:40:
                    20:55:95:a7:f2:c6:66:90:09:02:c6:75:58:ff:1f:
                    a5:2f:41:66:c3:1c:f0:28:73:33:84:8c:da:c0:0b:
                    6f:78:b1:c6:4f:49:68:0e:a3:d7:bf:0f:b6:4b:fe:
                    66:00:97:74:cc:6b:1f:53:39:35:10:d4:83:27:f9:
                    1a:c3:96:13:5a:da:d8:15:82:df:80:ef:ec:f3:8a:
                    4f:71:bf:45:ea:8b:fa:56:94:18:dc:df:06:6c:44:
                    1c:8e:02:2f:c3:cd:a2:9e:6b:9c:5b:32:9c:83:71:
                    30:da:94:24:64:d0:3e:34:67:73:8b:2f:a4:9a:0b:
                    f7:db:b6:b6:87:4b:4e:56:73:89:f5:c2:73:3b:9d:
                    83:ef:19:8e:17:b5:22:be:1c:a0:87:cb:bd:76:64:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6C:72:59:ED:FF:40:5D:B3:10:5F:FC:9C:B9:4E:37:9A:38:72:6C
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a3838303a3a2f34382d3438203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12d0:880::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:9e:0e:7f:bf:37:60:c5:82:09:f0:77:05:45:b8:2d:15:
         b4:df:d2:54:65:de:a7:13:4c:70:7f:1a:70:67:d7:f9:c1:1c:
         38:87:ee:43:44:17:f8:c6:35:a8:f7:0f:e7:d5:62:7e:0a:d8:
         24:c1:40:65:26:59:75:dd:1d:a0:10:e7:0a:49:3c:b2:ed:7f:
         c6:94:a0:dd:1f:a8:e8:18:9c:d8:fd:7b:5a:04:db:7a:09:55:
         19:6d:e7:7c:e7:c5:d2:52:ea:19:3d:73:08:39:8e:ac:24:f5:
         c3:a6:62:21:9f:87:c8:53:6c:79:33:13:de:85:4f:cd:e2:06:
         bb:f5:f8:47:d6:ea:1c:2d:32:58:4e:03:90:52:b4:2b:3b:a0:
         6a:dd:92:2e:08:0f:ec:7e:04:a1:56:23:4e:92:81:a8:81:02:
         80:19:43:be:57:74:6c:7c:51:f6:08:8b:5a:c5:b4:6f:48:37:
         c5:2a:6a:c8:da:52:26:cb:51:ab:18:41:1a:df:5d:ba:90:ce:
         0e:94:0b:07:2a:aa:ec:20:54:f7:d3:81:2d:53:cb:28:f3:07:
         f5:75:2e:ef:9d:2a:55:61:4a:4a:a5:61:da:91:23:15:2e:b3:
         02:0f:6f:46:b1:ab:c3:3b:f6:62:36:10:93:26:e7:ee:cd:19:
         df:95:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:56:07 2026 by rpki-client