Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a3a2f33322d313238203d3e20323730323636.roa
File:                     323830343a363936303a3a2f33322d313238203d3e20323730323636.roa (raw, json)
Hash identifier:          oKCcnniKs6gCeawDZPPaktRPodE4pQds7DClWzKCrIw=
Subject key identifier:   8B:C5:D0:74:39:1A:31:6E:DF:37:7E:30:C6:77:E2:0A:F3:AF:CE:17
Certificate issuer:       /CN=197136F6BD889B45E4F08726BAC2D9676A7F67B5
Certificate serial:       7621F5E90F724CA657CD22F674D5220795676939
Authority key identifier: 19:71:36:F6:BD:88:9B:45:E4:F0:87:26:BA:C2:D9:67:6A:7F:67:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197136F6BD889B45E4F08726BAC2D9676A7F67B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a3a2f33322d313238203d3e20323730323636.roa
Signing time:             Fri 25 Sep 2026 19:07:40 +0000
ROA not before:           Fri 25 Sep 2026 19:02:40 +0000
ROA not after:            Fri 24 Sep 2027 19:07:40 +0000
asID:                     270266
IP address blocks:        2804:6960::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/197136F6BD889B45E4F08726BAC2D9676A7F67B5.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/197136F6BD889B45E4F08726BAC2D9676A7F67B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197136F6BD889B45E4F08726BAC2D9676A7F67B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 15:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:21:f5:e9:0f:72:4c:a6:57:cd:22:f6:74:d5:22:07:95:67:69:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197136F6BD889B45E4F08726BAC2D9676A7F67B5
        Validity
            Not Before: Sep 25 19:02:40 2026 GMT
            Not After : Sep 24 19:07:40 2027 GMT
        Subject: CN=8BC5D074391A316EDF377E30C677E20AF3AFCE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:59:a1:b0:0c:90:a0:0b:55:73:32:c1:94:
                    05:dd:52:0e:a6:a1:1c:d5:9b:3d:dc:d3:17:92:34:
                    cc:0b:96:67:6c:c2:51:99:ce:4a:f3:b2:d9:89:79:
                    33:96:92:b6:0f:a2:20:83:78:6e:bf:6e:52:c0:c1:
                    f6:6b:dd:f0:d3:c7:f7:a7:8c:7e:cd:40:d2:7e:6b:
                    1d:40:53:11:32:48:a7:6f:51:e7:b4:69:b7:1a:02:
                    4c:4b:af:55:a1:0f:d3:38:a1:b6:b6:e0:f9:0d:35:
                    4b:fb:e6:75:8b:41:64:ff:7a:bd:c0:0f:e9:2e:68:
                    48:5c:14:31:0d:4f:4d:d3:7f:98:17:a9:db:57:25:
                    d6:3e:fc:04:6c:56:62:bd:09:2b:ee:f3:9c:cb:0e:
                    c9:48:b7:98:ed:9c:40:b2:da:10:7a:d1:6a:d9:50:
                    80:6b:08:46:b9:d8:67:ca:82:08:13:63:0f:e6:bb:
                    12:a6:a9:cd:8d:f9:12:0b:bb:84:21:5c:f5:a6:95:
                    82:e9:34:95:76:ba:c2:2a:89:93:7e:69:f3:59:9b:
                    b6:16:88:a7:74:41:fe:96:a8:3e:13:d7:17:3e:be:
                    24:1d:2d:1c:c1:aa:df:70:85:4f:02:60:08:06:c5:
                    32:8d:78:f8:35:89:73:97:5f:2f:ba:7c:00:a5:be:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C5:D0:74:39:1A:31:6E:DF:37:7E:30:C6:77:E2:0A:F3:AF:CE:17
            X509v3 Authority Key Identifier:
                keyid:19:71:36:F6:BD:88:9B:45:E4:F0:87:26:BA:C2:D9:67:6A:7F:67:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/197136F6BD889B45E4F08726BAC2D9676A7F67B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197136F6BD889B45E4F08726BAC2D9676A7F67B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a3a2f33322d313238203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:68:f0:d8:c2:b5:58:22:6d:64:f3:33:63:b0:f4:02:0f:d7:
         1f:d3:7e:81:c2:2a:93:f8:e5:09:25:f4:0c:20:0a:60:e9:eb:
         82:1e:ae:3b:88:5a:1e:2d:49:94:60:34:04:39:f1:f1:c6:4c:
         44:bd:a7:00:15:ad:ed:3c:92:7d:fe:32:dd:73:32:2a:8f:5c:
         62:13:df:53:ee:8c:24:78:0e:d7:37:df:97:4a:f2:f6:2b:83:
         7d:b1:15:f6:9d:36:20:5b:5b:ba:e4:ab:5b:df:0e:8d:15:f3:
         18:58:18:ea:c3:76:ec:28:eb:ef:5a:84:f9:dd:3b:59:b6:9f:
         2d:64:a2:71:22:ff:ad:c5:76:72:0e:7a:03:05:4c:40:11:00:
         03:fe:57:17:a6:a1:01:cd:d0:84:f3:1a:f4:85:4a:ff:b6:19:
         79:87:26:c1:2c:09:11:b4:6e:6b:a0:03:a3:74:78:10:b0:a3:
         29:79:06:5a:fc:67:93:5b:3e:34:40:c0:76:de:3e:07:1f:9c:
         44:5c:70:6f:ae:13:7d:58:5a:40:72:1a:45:00:b3:54:e6:1f:
         58:af:b8:e4:45:c4:88:87:7b:ac:70:ae:84:37:e0:01:4e:f6:
         d0:11:46:f4:fd:06:48:e6:59:ca:0f:0a:58:55:ca:ff:01:9a:
         bf:ba:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:49:42 2026 by rpki-client