Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/323830343a386130343a3a2f33322d313238203d3e203532353934.roa
File:                     323830343a386130343a3a2f33322d313238203d3e203532353934.roa (raw, json)
Hash identifier:          JP5OKFnznxfOmHjPkD4jVYaS87Zmz1yQJkICITeNazU=
Subject key identifier:   62:8D:47:92:65:E2:8F:6B:E6:06:61:46:AA:CD:86:3A:D5:D6:F3:FF
Certificate issuer:       /CN=FE76108F9CB83D32DFF33F922A12DAB294D6F7C5
Certificate serial:       0B6133D769FB0F089DDAEC6049974029B0FE6A13
Authority key identifier: FE:76:10:8F:9C:B8:3D:32:DF:F3:3F:92:2A:12:DA:B2:94:D6:F7:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE76108F9CB83D32DFF33F922A12DAB294D6F7C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/323830343a386130343a3a2f33322d313238203d3e203532353934.roa
Signing time:             Fri 09 Oct 2026 20:40:23 +0000
ROA not before:           Fri 09 Oct 2026 20:35:23 +0000
ROA not after:            Fri 08 Oct 2027 20:40:23 +0000
asID:                     52594
IP address blocks:        2804:8a04::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/FE76108F9CB83D32DFF33F922A12DAB294D6F7C5.crl
                          rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/FE76108F9CB83D32DFF33F922A12DAB294D6F7C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE76108F9CB83D32DFF33F922A12DAB294D6F7C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 03:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:61:33:d7:69:fb:0f:08:9d:da:ec:60:49:97:40:29:b0:fe:6a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE76108F9CB83D32DFF33F922A12DAB294D6F7C5
        Validity
            Not Before: Oct  9 20:35:23 2026 GMT
            Not After : Oct  8 20:40:23 2027 GMT
        Subject: CN=628D479265E28F6BE6066146AACD863AD5D6F3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:88:95:78:fb:bb:5e:55:a7:23:a8:71:5f:
                    91:4c:d2:3f:4d:c3:f1:dc:8b:19:29:a5:dc:b8:2c:
                    0d:ca:2c:fa:04:df:1b:9e:44:8b:a9:95:31:9a:8a:
                    43:4d:e9:87:14:db:b5:10:c4:ef:0e:d7:ae:e7:6e:
                    6b:7d:4e:0a:dd:6e:6d:57:d6:d7:dc:50:f7:26:78:
                    43:87:b6:cc:b3:3c:bf:5a:01:81:85:84:71:e9:eb:
                    2f:99:7a:8b:5e:57:b2:c0:49:ef:d9:d5:3b:61:5a:
                    d3:c7:cc:64:10:85:fc:61:00:8d:bf:1d:37:6a:04:
                    01:20:52:ca:a2:fd:3c:9a:e0:75:22:8d:ba:8f:43:
                    08:7a:3c:d1:37:b5:d9:69:22:4c:1c:0b:85:af:22:
                    30:6c:32:a0:95:9d:26:47:13:33:dc:66:5a:28:dd:
                    a3:ea:6c:93:9b:6c:e8:f1:9d:f9:c0:24:0a:8c:cb:
                    88:7b:63:c7:80:a2:ef:23:28:39:bc:e5:41:00:72:
                    65:72:9a:e3:2f:0a:49:01:18:e9:a1:bf:e7:40:99:
                    67:7e:a4:3f:09:58:2a:91:a7:b2:e9:ca:83:60:a9:
                    f2:f5:01:31:08:88:4f:b2:83:e9:5d:a3:40:46:d9:
                    af:80:6e:25:22:32:21:97:3e:cd:ca:8e:4a:cc:90:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8D:47:92:65:E2:8F:6B:E6:06:61:46:AA:CD:86:3A:D5:D6:F3:FF
            X509v3 Authority Key Identifier:
                keyid:FE:76:10:8F:9C:B8:3D:32:DF:F3:3F:92:2A:12:DA:B2:94:D6:F7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/FE76108F9CB83D32DFF33F922A12DAB294D6F7C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE76108F9CB83D32DFF33F922A12DAB294D6F7C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/323830343a386130343a3a2f33322d313238203d3e203532353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a04::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:d5:19:ea:5f:6f:0d:2a:75:75:71:6e:85:d8:c9:66:58:23:
         d5:a7:6f:b3:fc:00:7c:1a:a9:de:4d:64:f9:9b:db:8b:11:77:
         7d:90:e7:92:b3:f7:a8:e5:35:5e:d6:b1:5a:8a:29:d4:57:5b:
         26:7e:f6:23:26:cd:ed:be:de:f6:53:eb:db:b7:c4:2c:c7:19:
         e2:7a:f8:a6:5b:4a:60:60:01:b2:79:e2:58:06:82:b9:95:d6:
         53:3e:14:97:15:0f:72:82:f5:c1:39:9f:ef:11:00:88:c8:58:
         92:d1:a6:72:0c:20:23:61:2e:6c:73:6e:4c:48:ec:c4:ae:f1:
         63:a8:e7:69:f1:a1:83:d6:99:b0:2f:bf:c3:fc:ca:d5:f9:5d:
         54:d3:43:1d:59:32:e2:8a:7a:54:a8:88:0a:f9:0c:7a:e3:8e:
         05:d4:78:ec:26:71:1a:98:ec:6d:4a:db:ea:26:d3:ed:28:09:
         5f:6d:a3:e4:86:cf:19:7b:6e:b2:33:23:a8:62:d7:3c:22:29:
         b3:a5:ef:41:01:ef:ab:d7:f4:14:f8:01:77:5d:3c:77:35:11:
         13:0a:29:a7:0b:32:26:8b:e8:12:a9:0e:47:24:57:ed:4a:ba:
         91:e9:a8:7b:76:f4:8f:ff:d3:4a:8e:26:40:d8:16:63:4e:e3:
         e4:7f:b1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:58:32 2026 by rpki-client