Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/323830343a353163383a3a2f33322d3336203d3e20323638343737.roa
File:                     323830343a353163383a3a2f33322d3336203d3e20323638343737.roa (raw, json)
Hash identifier:          ZYd6EtI4v/GUyLKdJYdRkerY+MHK8w3yNzMLXgllu98=
Subject key identifier:   E9:E9:89:1C:67:56:7D:BB:8B:99:B5:1F:97:00:20:64:D7:30:67:F3
Certificate issuer:       /CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62
Certificate serial:       1091F2B85C707F112A7623843608641E02E805A6
Authority key identifier: 21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/323830343a353163383a3a2f33322d3336203d3e20323638343737.roa
Signing time:             Fri 23 Oct 2026 14:23:04 +0000
ROA not before:           Fri 23 Oct 2026 14:18:04 +0000
ROA not after:            Fri 22 Oct 2027 14:23:04 +0000
asID:                     268477
IP address blocks:        2804:51c8::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl
                          rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:91:f2:b8:5c:70:7f:11:2a:76:23:84:36:08:64:1e:02:e8:05:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62
        Validity
            Not Before: Oct 23 14:18:04 2026 GMT
            Not After : Oct 22 14:23:04 2027 GMT
        Subject: CN=E9E9891C67567DBB8B99B51F97002064D73067F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:cf:aa:c0:ef:ac:4d:44:11:09:f1:35:d6:
                    38:38:f3:6d:28:d8:63:dd:a7:ec:57:db:2b:0c:b8:
                    e5:4e:58:e7:ef:d4:39:28:d2:4d:a4:75:c0:4f:f5:
                    68:fe:de:bf:af:7c:01:a1:a5:e4:e1:61:39:5c:63:
                    43:8b:1d:1b:67:3a:81:ff:db:44:a0:cc:2d:8a:b7:
                    1b:cf:e5:4f:d9:73:a0:7f:15:c6:d4:cd:64:fc:3e:
                    1c:ca:b2:03:a1:e2:56:8a:f6:de:e7:3a:ec:34:20:
                    21:e0:4f:9e:a2:7e:91:2f:03:fb:47:93:75:5b:be:
                    55:63:c8:49:ae:a7:56:7c:13:a2:59:ef:08:cf:b8:
                    ff:d1:bf:1a:ea:c2:09:09:e4:8c:d6:04:df:d3:19:
                    f4:42:22:bc:96:a2:e3:3d:65:ba:6d:29:28:4d:f6:
                    9e:61:da:92:a1:21:2a:79:fd:46:0e:1f:ce:a8:e0:
                    f7:73:63:d4:46:d1:05:0d:0c:4e:bd:dd:8d:f9:86:
                    73:f4:a8:11:e5:2e:5f:79:ea:36:96:75:69:72:6d:
                    e1:35:49:01:b7:04:eb:61:8b:59:88:9f:2e:5a:6f:
                    cb:a2:82:2d:ca:13:3f:66:7a:b5:1f:3e:0c:3b:6a:
                    3c:dc:2b:90:b0:ac:55:1b:3c:99:0a:fb:1a:92:51:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E9:89:1C:67:56:7D:BB:8B:99:B5:1F:97:00:20:64:D7:30:67:F3
            X509v3 Authority Key Identifier:
                keyid:21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/323830343a353163383a3a2f33322d3336203d3e20323638343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:ec:7d:01:1d:c8:61:58:82:bd:c7:a8:96:bd:f1:8a:11:4f:
         7c:cf:a7:f4:75:ab:cd:38:b3:7a:eb:5a:20:ca:22:87:35:68:
         b9:70:62:fa:7c:16:90:6e:cf:38:fb:0d:1a:81:3e:b2:e7:ab:
         21:39:ed:c1:3a:53:c9:ce:3c:c3:b9:45:a4:e9:84:30:ab:8c:
         7f:31:d4:31:dc:46:33:79:ab:32:6b:53:25:5f:82:be:58:68:
         13:7e:ea:d7:70:46:11:7e:94:36:09:36:eb:4f:8c:11:d2:bf:
         5c:e8:c7:15:ec:e0:42:6e:bd:19:27:61:e7:c0:6e:38:e4:f5:
         79:5b:dc:e3:5a:6c:4b:7a:6e:bd:73:45:43:36:2a:dc:ec:f5:
         5e:56:51:88:a8:2c:e4:20:46:d3:ef:73:32:bc:42:5f:e8:03:
         6e:33:2a:1a:c1:e5:d1:ba:c1:6e:ec:a0:34:cb:49:de:0c:4c:
         5d:a2:25:de:00:03:3d:23:d9:09:a3:24:b9:20:d8:c0:4d:e8:
         ef:02:7f:d5:a3:07:76:46:5b:3a:9e:4e:94:00:b4:72:48:2b:
         66:4d:7e:45:0f:c9:f3:30:a5:18:c8:25:2b:e7:fe:43:6b:b0:
         51:3b:d6:db:85:21:4e:ee:f2:ad:1b:07:f0:dd:e3:92:4a:2e:
         00:65:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:57:26 2026 by rpki-client