Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/323830343a386231303a343031303a3a2f34352d3435203d3e20323733373039.roa
File:                     323830343a386231303a343031303a3a2f34352d3435203d3e20323733373039.roa (raw, json)
Hash identifier:          v4ez9ZvX/sJLo8OvL2GmPL9mFNb5wKQpyG+MWqh+CAE=
Subject key identifier:   49:59:84:E7:56:F7:7A:29:EA:02:B6:0A:18:A8:26:A4:79:F7:FA:7D
Certificate issuer:       /CN=15ECBBC6CA09DABDA13646561F388D1E4024A25B
Certificate serial:       573FCCF1DF21908F1B776046AB5D1230D54E334C
Authority key identifier: 15:EC:BB:C6:CA:09:DA:BD:A1:36:46:56:1F:38:8D:1E:40:24:A2:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15ECBBC6CA09DABDA13646561F388D1E4024A25B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/323830343a386231303a343031303a3a2f34352d3435203d3e20323733373039.roa
Signing time:             Sun 06 Sep 2026 20:06:41 +0000
ROA not before:           Sun 06 Sep 2026 20:01:41 +0000
ROA not after:            Sun 05 Sep 2027 20:06:41 +0000
asID:                     273709
IP address blocks:        2804:8b10:4010::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/15ECBBC6CA09DABDA13646561F388D1E4024A25B.crl
                          rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/15ECBBC6CA09DABDA13646561F388D1E4024A25B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15ECBBC6CA09DABDA13646561F388D1E4024A25B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3f:cc:f1:df:21:90:8f:1b:77:60:46:ab:5d:12:30:d5:4e:33:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ECBBC6CA09DABDA13646561F388D1E4024A25B
        Validity
            Not Before: Sep  6 20:01:41 2026 GMT
            Not After : Sep  5 20:06:41 2027 GMT
        Subject: CN=495984E756F77A29EA02B60A18A826A479F7FA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fd:75:8b:f4:9b:d3:32:c9:35:31:cd:4c:a9:
                    0e:23:c4:80:3f:2d:cc:44:e3:dd:a9:6b:a7:cb:ce:
                    02:84:09:20:d1:72:1e:c6:ca:10:75:c7:bc:c9:c8:
                    c9:97:6d:e6:2c:a2:4f:b0:f4:2f:b7:22:b0:09:a5:
                    d4:8b:75:91:d0:9f:cc:93:20:8f:ec:85:e2:86:09:
                    ec:32:c7:57:09:a6:77:0f:81:64:ee:2c:3f:9e:a9:
                    28:26:9e:98:ab:70:70:6d:de:2f:a9:04:c6:76:33:
                    87:e9:83:97:8b:39:f5:1e:ba:74:57:54:37:5c:58:
                    3a:a6:65:d2:22:ff:7a:be:38:53:24:91:9f:14:01:
                    31:0b:29:4f:13:59:e2:68:cd:13:b8:0f:ab:ec:0d:
                    4f:b4:73:b5:84:43:a2:eb:89:55:72:9b:72:67:5d:
                    a0:53:ec:12:b5:2f:0d:53:ea:fb:92:7d:a3:16:40:
                    6d:10:63:4f:23:39:10:4d:2d:60:08:f7:82:b3:e0:
                    19:89:e3:0f:bc:5f:82:29:ae:d0:74:e0:ad:a7:93:
                    eb:9d:a0:3f:d3:b4:b4:60:33:fe:24:e4:56:0f:ca:
                    e1:a3:d3:63:f9:3a:4e:e5:75:c9:0e:d4:09:77:cf:
                    aa:cd:28:d7:5e:12:93:78:f7:b3:a3:38:07:c4:74:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:84:E7:56:F7:7A:29:EA:02:B6:0A:18:A8:26:A4:79:F7:FA:7D
            X509v3 Authority Key Identifier:
                keyid:15:EC:BB:C6:CA:09:DA:BD:A1:36:46:56:1F:38:8D:1E:40:24:A2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/15ECBBC6CA09DABDA13646561F388D1E4024A25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15ECBBC6CA09DABDA13646561F388D1E4024A25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/323830343a386231303a343031303a3a2f34352d3435203d3e20323733373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b10:4010::/45

    Signature Algorithm: sha256WithRSAEncryption
         1d:e7:ad:07:8b:e6:c9:58:6b:44:cf:97:91:25:f9:f3:e5:23:
         dc:84:ba:9b:a3:55:bd:2a:ce:24:0b:26:d0:0e:49:f5:fc:53:
         6d:9a:d6:c8:3d:2d:f6:0e:2e:a9:38:75:26:cd:29:b7:b1:26:
         3a:fd:46:6f:b7:52:d7:63:49:7e:b6:ce:e0:b0:83:a9:e0:90:
         97:71:ed:c1:d3:ab:d4:01:4a:de:5e:83:16:08:ec:4b:38:4e:
         33:cb:73:c3:17:83:4a:b4:99:59:84:d6:3c:2c:e3:ab:14:e9:
         f4:9d:37:dc:04:9a:a6:3d:f8:99:97:ce:8b:cb:ff:4b:9f:42:
         30:cb:e1:e6:6c:9f:a3:79:36:c2:9d:cc:69:ca:65:71:f7:5c:
         8b:b6:48:f8:02:7d:c3:26:a0:12:4f:b8:38:41:48:eb:e4:60:
         01:aa:35:21:55:89:f6:b9:99:06:b4:b0:96:77:69:d4:17:7f:
         53:2f:6c:a1:3b:42:9e:84:06:56:99:fa:bd:d9:c5:fd:31:61:
         73:54:ac:5f:fd:f1:65:fc:e8:f0:88:42:5f:97:1e:5b:92:8d:
         6c:31:1d:a7:51:20:b3:f0:ef:58:cf:bb:40:fb:b6:c8:e1:5d:
         dc:d5:ab:f5:cf:75:c8:6c:6d:84:cf:8c:de:e5:93:8c:9a:75:
         1b:df:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:21:03 2026 by rpki-client