Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/323830343a363735383a3a2f33322d313238203d3e20323639363232.roa
File:                     323830343a363735383a3a2f33322d313238203d3e20323639363232.roa (raw, json)
Hash identifier:          m/XOXWbyxAbDJ9RPhWyaREWrtMNOme56/NCv6QOcgBI=
Subject key identifier:   F9:D7:37:C6:1A:F8:39:DE:FE:81:28:87:CB:A1:5A:0D:08:1E:1E:87
Certificate issuer:       /CN=53C092812661ADDEB8F46FEE239AB18C9F9DE631
Certificate serial:       16E918F5B7200C5C93D40CF4E06F1E03C46D88EB
Authority key identifier: 53:C0:92:81:26:61:AD:DE:B8:F4:6F:EE:23:9A:B1:8C:9F:9D:E6:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C092812661ADDEB8F46FEE239AB18C9F9DE631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/323830343a363735383a3a2f33322d313238203d3e20323639363232.roa
Signing time:             Thu 27 Aug 2026 20:51:47 +0000
ROA not before:           Thu 27 Aug 2026 20:46:47 +0000
ROA not after:            Thu 26 Aug 2027 20:51:47 +0000
asID:                     269622
IP address blocks:        2804:6758::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/53C092812661ADDEB8F46FEE239AB18C9F9DE631.crl
                          rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/53C092812661ADDEB8F46FEE239AB18C9F9DE631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C092812661ADDEB8F46FEE239AB18C9F9DE631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:18:f5:b7:20:0c:5c:93:d4:0c:f4:e0:6f:1e:03:c4:6d:88:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C092812661ADDEB8F46FEE239AB18C9F9DE631
        Validity
            Not Before: Aug 27 20:46:47 2026 GMT
            Not After : Aug 26 20:51:47 2027 GMT
        Subject: CN=F9D737C61AF839DEFE812887CBA15A0D081E1E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:98:11:19:17:87:35:85:d1:cc:ff:7c:27:
                    e8:84:99:4c:18:94:cc:62:af:d6:64:82:8a:6e:15:
                    1f:8c:02:1d:e2:f0:66:08:62:b0:05:fe:37:c4:a8:
                    29:c4:82:65:a3:33:1c:27:53:48:9c:5a:6b:8a:a4:
                    8f:e1:ca:2c:e4:0b:1f:5b:1b:c1:00:e2:eb:49:d6:
                    5a:7d:f5:f0:2d:40:37:2e:78:5f:79:67:34:d1:8b:
                    04:ea:6c:d9:57:4f:d2:97:ab:4b:db:6a:f2:1f:a1:
                    21:f7:0a:2a:85:28:05:d4:4c:59:58:6a:c2:fc:4c:
                    e0:fb:2d:de:7e:bd:73:7c:d3:08:db:43:3f:2d:8c:
                    ad:bb:03:ef:65:3d:30:45:dc:55:39:8a:ca:d9:bd:
                    07:34:13:c7:cd:69:bc:09:5d:cb:44:26:73:d3:da:
                    62:ba:3f:3a:7f:69:d0:f1:63:cc:e6:52:88:8f:6e:
                    43:0d:77:fc:8d:35:26:98:a5:9e:b1:ca:f3:10:54:
                    f4:f5:61:dd:03:96:df:68:5c:17:5c:25:2d:38:15:
                    ab:ce:60:52:ff:50:ba:69:1d:fc:87:71:83:03:c1:
                    cf:2b:c5:78:d6:71:b2:8e:8e:7e:44:90:8e:2d:59:
                    53:85:94:62:96:33:0f:6e:6d:2d:ac:da:6b:b9:ed:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D7:37:C6:1A:F8:39:DE:FE:81:28:87:CB:A1:5A:0D:08:1E:1E:87
            X509v3 Authority Key Identifier:
                keyid:53:C0:92:81:26:61:AD:DE:B8:F4:6F:EE:23:9A:B1:8C:9F:9D:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/53C092812661ADDEB8F46FEE239AB18C9F9DE631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C092812661ADDEB8F46FEE239AB18C9F9DE631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/323830343a363735383a3a2f33322d313238203d3e20323639363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6758::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:79:5e:a4:b3:2f:fd:99:b6:34:ff:64:a7:74:b5:16:85:84:
         2d:ec:a9:4b:c9:1b:2c:eb:96:7f:e7:c4:76:95:1d:b6:c1:d2:
         70:76:54:28:16:65:af:be:df:c5:ce:c7:af:14:a9:65:c3:66:
         59:49:89:4a:f1:cb:8d:8e:a7:47:b0:da:fc:18:9c:03:49:0b:
         8e:35:67:13:55:8b:07:19:24:cf:be:a2:03:52:da:1e:b8:5c:
         d7:c1:56:f6:c3:20:92:35:01:a2:2d:9a:27:a1:67:53:87:7b:
         3a:32:02:59:86:12:fb:7d:3a:3c:d2:1e:7d:d9:e6:12:11:a2:
         1c:e2:82:e0:4c:68:78:a8:00:7b:f6:0e:b0:f7:4a:d6:25:1d:
         f3:df:38:a8:98:9d:97:43:b2:27:0d:62:ec:3c:7e:66:f3:36:
         3f:79:82:6b:2e:37:6e:b4:f7:91:ca:ea:52:2d:90:0e:7b:fc:
         d3:95:99:9c:9e:d0:19:82:c7:e3:5d:21:76:89:01:a8:15:34:
         9f:6e:9d:3c:42:12:fe:2e:e5:98:7f:31:19:95:59:88:cb:d0:
         ba:9b:df:3e:95:a5:e2:fd:95:34:0e:c2:30:17:36:73:5f:54:
         51:9c:33:4e:73:42:b9:93:cf:ed:d9:72:79:fe:8e:45:b6:78:
         c3:82:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:15:29 2026 by rpki-client