Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323639323230.roa
File:                     323830343a363133343a3a2f33322d313238203d3e20323639323230.roa (raw, json)
Hash identifier:          HjY4RBNJPhpfC43LGE7LYTpXc7KWCHkDi8RTTf89aRk=
Subject key identifier:   46:FB:6F:F4:A3:11:99:83:77:9E:6A:A8:94:B7:DE:95:91:47:FB:F1
Certificate issuer:       /CN=D6E315D505A9FD327F8C5FCFB284F96BDF315E8F
Certificate serial:       5A0436E0DE535F522E25C666EC697427474CD6AB
Authority key identifier: D6:E3:15:D5:05:A9:FD:32:7F:8C:5F:CF:B2:84:F9:6B:DF:31:5E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323639323230.roa
Signing time:             Tue 25 Aug 2026 22:25:47 +0000
ROA not before:           Tue 25 Aug 2026 22:20:47 +0000
ROA not after:            Tue 24 Aug 2027 22:25:47 +0000
asID:                     269220
IP address blocks:        2804:6134::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.crl
                          rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:04:36:e0:de:53:5f:52:2e:25:c6:66:ec:69:74:27:47:4c:d6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E315D505A9FD327F8C5FCFB284F96BDF315E8F
        Validity
            Not Before: Aug 25 22:20:47 2026 GMT
            Not After : Aug 24 22:25:47 2027 GMT
        Subject: CN=46FB6FF4A3119983779E6AA894B7DE959147FBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:d3:de:c5:51:8b:81:37:e9:48:48:c4:ea:
                    7c:41:ca:7f:ff:27:30:d9:25:29:98:91:a3:98:d2:
                    75:35:93:52:3c:99:ee:39:56:b2:ba:32:97:d6:72:
                    ef:f4:3d:36:f8:4d:d9:e3:5c:49:51:43:9f:3e:c0:
                    18:67:76:2d:37:9c:5d:2d:d7:3f:bd:a2:41:78:f4:
                    28:b0:69:e7:d1:cd:97:5e:d4:a0:3b:80:0a:73:3a:
                    87:58:56:e2:44:73:29:03:10:ff:7b:69:82:f8:a1:
                    e9:14:4e:ed:45:28:41:0f:f8:f7:0f:60:51:8b:a1:
                    7f:84:d1:00:8a:40:26:d9:77:a0:13:02:e4:55:a9:
                    16:ed:77:ec:7a:50:f6:77:16:1d:87:d8:c4:22:31:
                    86:00:22:0b:87:b8:c0:40:b4:58:c5:e2:30:bc:7f:
                    80:4f:b1:f1:60:e3:b3:f7:3c:ad:7f:3e:e5:f9:d8:
                    2d:85:ab:a2:54:91:39:c2:3b:ac:00:aa:1f:0a:d3:
                    b8:9c:33:45:78:c3:ba:c7:28:73:a4:e6:a7:01:d2:
                    47:42:e0:f2:4c:80:2a:2d:f9:a5:9c:df:78:6e:e9:
                    09:60:4a:6f:6a:6a:47:d5:dc:fc:dc:6f:b7:20:53:
                    a5:9b:2a:10:80:13:29:61:86:bc:27:ca:5b:83:ae:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FB:6F:F4:A3:11:99:83:77:9E:6A:A8:94:B7:DE:95:91:47:FB:F1
            X509v3 Authority Key Identifier:
                keyid:D6:E3:15:D5:05:A9:FD:32:7F:8C:5F:CF:B2:84:F9:6B:DF:31:5E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6134::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:be:8b:f7:f3:2a:32:3a:34:27:58:5a:00:7c:f9:e5:01:
         3a:fb:2e:15:5c:d3:e2:64:db:ea:92:a4:87:b6:39:de:77:f0:
         c2:bb:9e:85:76:6c:85:d4:5c:01:be:75:13:c8:5f:3d:d8:81:
         9d:d6:40:b9:9b:88:32:f2:36:4b:8f:03:9f:73:92:5a:20:3b:
         23:37:b7:e9:20:64:fe:86:b4:a1:ee:a7:4d:57:f9:d6:26:9b:
         33:47:c6:3b:0a:e6:78:d1:14:40:de:c5:4c:7a:7b:05:48:eb:
         f5:37:a7:ff:51:94:8a:36:7d:52:69:90:bf:7c:7c:bc:97:6f:
         ab:e4:9c:48:7d:76:5a:da:8b:42:a3:37:3e:e9:a0:fb:fb:d4:
         d6:d6:1c:22:af:a4:d9:d5:98:16:06:0c:7a:d0:ec:3b:95:ce:
         6c:52:0d:68:4a:15:08:5d:f1:91:a5:f5:7f:91:c4:0b:2b:60:
         7f:c1:b8:ac:52:d9:66:4f:d9:17:01:93:16:db:4c:80:84:4f:
         42:1c:55:ca:e1:da:e2:87:81:e6:16:46:f8:b8:3d:8f:69:87:
         0e:07:98:f5:71:8b:10:da:72:f3:e7:a9:6b:56:14:12:33:86:
         3d:1b:8d:ca:6e:11:3b:9a:3d:df:2d:a9:87:55:a7:70:6d:46:
         27:22:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:52:35 2026 by rpki-client