Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3438203d3e20323635303631.roa
File:                     323830343a333233303a3a2f33322d3438203d3e20323635303631.roa (raw, json)
Hash identifier:          0LkLFmiWmemxiDkM+bRjinuk44TZklttmkdx5YVNFDE=
Subject key identifier:   66:B0:A2:8A:9F:D2:A2:0E:13:03:DF:0D:1E:65:F7:1D:AD:77:02:10
Certificate issuer:       /CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
Certificate serial:       4852A5E49FA037AEED733809DC52DA63E8AD304F
Authority key identifier: FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3438203d3e20323635303631.roa
Signing time:             Mon 14 Sep 2026 11:59:21 +0000
ROA not before:           Mon 14 Sep 2026 11:54:21 +0000
ROA not after:            Mon 13 Sep 2027 11:59:21 +0000
asID:                     265061
IP address blocks:        2804:3230::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl
                          rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:52:a5:e4:9f:a0:37:ae:ed:73:38:09:dc:52:da:63:e8:ad:30:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
        Validity
            Not Before: Sep 14 11:54:21 2026 GMT
            Not After : Sep 13 11:59:21 2027 GMT
        Subject: CN=66B0A28A9FD2A20E1303DF0D1E65F71DAD770210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:58:83:e7:8b:2d:b4:5e:9f:69:6d:2f:1c:
                    7b:83:74:1f:dc:13:31:4f:2f:76:1a:0d:51:6f:c3:
                    de:39:eb:ca:14:16:ed:7d:76:80:a1:7e:28:6b:f3:
                    26:16:53:d1:ff:25:a8:8f:20:bd:86:5c:6a:0c:e1:
                    06:71:b2:c2:4e:33:93:0b:11:b3:d0:67:c1:f2:0d:
                    37:12:ee:aa:1d:dd:c3:a6:e8:36:8a:81:a0:7c:49:
                    2a:1e:99:f1:7d:d9:31:17:2b:76:42:b4:25:27:50:
                    1f:1f:8c:c9:4d:16:d8:72:ad:83:09:2b:53:25:c1:
                    94:a7:fb:d7:0d:ae:0d:8d:fe:2a:51:a8:e9:0c:8f:
                    13:6d:c8:1c:bd:6f:5c:c2:9e:bb:b3:1f:35:25:52:
                    44:58:91:20:d2:98:75:58:e5:53:22:6c:2b:2f:4e:
                    3c:cc:32:23:14:dc:cf:c4:49:10:90:f6:87:e8:e4:
                    02:51:87:1e:93:8c:a5:ef:69:66:dc:c0:62:ef:60:
                    13:58:af:be:99:8e:90:89:96:a1:b2:a8:69:b5:94:
                    6a:2c:9f:b4:d7:af:80:bb:29:49:91:4d:5c:a9:24:
                    98:bb:85:ce:bb:8d:74:aa:ad:19:e1:50:9b:b2:8e:
                    96:49:e0:28:41:58:d5:af:5c:3b:b6:2e:73:97:9a:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B0:A2:8A:9F:D2:A2:0E:13:03:DF:0D:1E:65:F7:1D:AD:77:02:10
            X509v3 Authority Key Identifier:
                keyid:FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3438203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3230::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:0b:8e:13:7e:58:3e:0f:92:5c:4f:7d:57:22:42:03:4f:ac:
         f4:e9:5d:6e:aa:1f:c5:0f:31:3c:f1:72:91:b6:60:4e:93:60:
         2e:79:4f:14:6c:c9:a9:f6:db:fb:0e:90:7c:98:15:2c:dd:a7:
         e5:0d:1b:8e:26:c7:aa:f9:88:5f:c3:c2:37:e9:fa:06:bf:0a:
         dd:a7:b1:2f:60:6e:fc:00:6c:4d:17:42:57:13:05:03:99:ab:
         7c:5c:bd:6a:ce:aa:0d:77:49:78:69:05:9b:90:e5:55:89:2a:
         83:9e:1b:04:29:71:be:1f:7c:88:ee:9c:d4:29:75:5d:12:8c:
         66:8b:ed:d4:18:59:b6:5f:af:47:57:87:62:f9:ff:30:8e:5f:
         d4:c4:ad:3d:d6:d7:c1:a6:ec:47:85:b7:01:e5:54:d6:b2:1a:
         f2:eb:ca:9c:75:24:20:bf:8a:6c:bf:79:42:84:ca:c8:67:a6:
         19:e0:f5:47:a4:85:1f:ec:c2:f9:18:45:fb:64:59:b2:07:cb:
         90:33:4c:ce:7e:1a:85:c3:75:2f:7c:2d:01:49:27:da:5a:d3:
         73:91:68:c0:f8:7d:3b:e2:9d:45:a5:92:e9:4e:bc:b4:c3:08:
         a6:b9:09:87:9c:3b:6f:66:aa:cc:1f:1d:71:72:b9:54:89:51:
         b5:6b:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:46:19 2026 by rpki-client