Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/323830343a356130633a3a2f33322d313238203d3e20323638373432.roa
File:                     323830343a356130633a3a2f33322d313238203d3e20323638373432.roa (raw, json)
Hash identifier:          JwfxP4ovNJGPfcTnRiVcGUViZzJ3yRvMeoo3ibveJAI=
Subject key identifier:   86:2E:63:83:42:B3:6D:38:09:D2:79:E6:51:D1:79:F4:47:04:47:FD
Certificate issuer:       /CN=6136537D42E8E862CEB8897ED845212938A0952B
Certificate serial:       0A981C08A9BF52E716DB4887E5F9DEADC3D73500
Authority key identifier: 61:36:53:7D:42:E8:E8:62:CE:B8:89:7E:D8:45:21:29:38:A0:95:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6136537D42E8E862CEB8897ED845212938A0952B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/323830343a356130633a3a2f33322d313238203d3e20323638373432.roa
Signing time:             Fri 28 Aug 2026 23:21:45 +0000
ROA not before:           Fri 28 Aug 2026 23:16:45 +0000
ROA not after:            Fri 27 Aug 2027 23:21:45 +0000
asID:                     268742
IP address blocks:        2804:5a0c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/6136537D42E8E862CEB8897ED845212938A0952B.crl
                          rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/6136537D42E8E862CEB8897ED845212938A0952B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6136537D42E8E862CEB8897ED845212938A0952B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 20:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:98:1c:08:a9:bf:52:e7:16:db:48:87:e5:f9:de:ad:c3:d7:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6136537D42E8E862CEB8897ED845212938A0952B
        Validity
            Not Before: Aug 28 23:16:45 2026 GMT
            Not After : Aug 27 23:21:45 2027 GMT
        Subject: CN=862E638342B36D3809D279E651D179F4470447FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:cd:ca:03:90:7e:49:95:5c:51:0b:cc:f3:
                    7f:cf:70:60:79:e4:a0:80:a8:ff:93:80:78:9b:7f:
                    06:d7:dd:c2:ea:5b:04:8b:73:29:7f:db:fa:05:3c:
                    96:4b:1d:f5:b1:3f:e3:25:a5:9e:b8:59:03:58:5d:
                    67:71:9c:45:6e:2c:97:07:16:e3:3a:ee:b7:64:85:
                    c5:40:3a:b6:b8:5e:b7:c7:09:82:d8:ad:8c:f9:b1:
                    3e:8b:5e:bf:58:16:8e:c6:5d:7a:f5:0e:8b:f2:c1:
                    2a:84:db:76:46:f0:b1:f8:8a:a3:25:e3:d0:4c:04:
                    4c:93:8a:e1:26:49:69:32:c4:69:1e:51:17:d6:1e:
                    74:28:7f:ca:85:de:9d:d9:a5:c0:2b:fc:cb:47:87:
                    ff:04:1c:4b:3f:9e:13:51:f6:bb:07:33:59:e4:6d:
                    e0:be:a5:98:64:b7:cf:de:4c:9c:e7:c9:37:03:c7:
                    6b:91:07:b6:13:f6:07:96:4d:bd:39:2f:5d:9c:fc:
                    6f:6d:11:39:ae:28:b2:38:a7:7f:f4:3e:3c:66:62:
                    e8:c0:1d:5b:f8:08:5f:a9:af:2a:8d:53:cb:c9:88:
                    dd:ec:b8:68:24:a8:4c:d9:dc:9b:53:3b:aa:cc:21:
                    00:0a:d4:c5:d8:55:09:61:8e:e6:15:df:44:44:be:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2E:63:83:42:B3:6D:38:09:D2:79:E6:51:D1:79:F4:47:04:47:FD
            X509v3 Authority Key Identifier:
                keyid:61:36:53:7D:42:E8:E8:62:CE:B8:89:7E:D8:45:21:29:38:A0:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/6136537D42E8E862CEB8897ED845212938A0952B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6136537D42E8E862CEB8897ED845212938A0952B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/0/323830343a356130633a3a2f33322d313238203d3e20323638373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:dd:63:4a:bb:0d:97:ee:d7:a9:0f:77:90:af:44:5e:1f:
         93:16:44:85:da:81:fa:84:a4:c6:cf:16:44:b9:83:5d:6e:d8:
         20:f4:85:9a:1e:08:46:9f:dc:b1:76:54:5a:73:d5:19:61:b7:
         f2:fd:c5:81:54:c8:19:90:ca:df:4d:48:81:b1:96:50:22:fb:
         72:84:7d:fc:46:d0:4f:41:98:d8:56:42:2f:02:52:40:92:58:
         d9:cc:18:d4:a9:c7:4d:38:21:34:dd:6c:22:96:d2:8d:52:c8:
         fe:95:e9:af:cf:73:29:5d:ad:12:0e:86:34:38:06:73:2c:90:
         40:e7:17:cd:a4:86:07:cd:30:64:2e:0d:1c:76:c3:b6:a0:58:
         87:4b:de:13:1a:0c:ec:04:78:97:67:d1:35:c8:9d:c0:fb:1c:
         b7:7c:fc:d9:9b:cc:63:a4:c5:a5:d9:79:35:56:f6:32:81:6d:
         3b:bb:49:43:48:f6:5b:ae:c7:1c:96:80:06:7d:df:93:87:2a:
         73:c4:b3:4a:68:81:4a:b7:ac:53:3d:25:19:5e:6f:10:fa:ba:
         47:7e:71:72:d2:b2:37:08:7f:3b:f9:6f:1a:6c:72:f2:4e:27:
         f5:6f:8a:76:7e:2c:51:bb:d8:b8:90:60:4f:80:d3:2e:67:d4:
         4f:51:82:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:01:20 2026 by rpki-client