Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3a2f33332d3333203d3e20323639363536.roa
File:                     323830343a363765303a3a2f33332d3333203d3e20323639363536.roa (raw, json)
Hash identifier:          Siv54qy9m6+6qclmxnbglzSZ2SrdWoPa/F2j8J5gFg4=
Subject key identifier:   3E:7F:2D:EF:2D:B8:F0:9E:69:99:95:B7:63:1A:E1:02:A7:D4:80:3D
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       6F8A94573548AA08E4197F3C9F46176801CEB4E2
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3a2f33332d3333203d3e20323639363536.roa
Signing time:             Thu 08 Oct 2026 19:02:32 +0000
ROA not before:           Thu 08 Oct 2026 18:57:32 +0000
ROA not after:            Thu 07 Oct 2027 19:02:32 +0000
asID:                     269656
IP address blocks:        2804:67e0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 00:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8a:94:57:35:48:aa:08:e4:19:7f:3c:9f:46:17:68:01:ce:b4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Oct  8 18:57:32 2026 GMT
            Not After : Oct  7 19:02:32 2027 GMT
        Subject: CN=3E7F2DEF2DB8F09E699995B7631AE102A7D4803D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:6e:da:27:23:ca:c2:e0:0d:b4:27:62:29:
                    df:28:7f:01:56:8c:37:b9:41:2b:74:93:5b:03:b2:
                    a5:2a:25:ed:66:62:30:13:e3:b1:a5:6a:23:ea:98:
                    09:32:b2:33:28:9c:7c:14:ea:f7:5e:35:14:37:d7:
                    72:73:fd:bc:dd:ef:76:04:28:05:67:2b:cd:c4:e4:
                    93:89:f7:45:9c:b5:82:cd:07:cb:7b:cb:94:d7:71:
                    de:88:99:8e:6b:30:4e:07:85:5f:45:74:2a:99:47:
                    52:7c:93:07:d9:09:d6:15:69:99:4b:14:88:2c:8e:
                    c7:19:19:98:dc:f4:fa:2e:87:26:91:54:a0:54:07:
                    1c:d8:af:6d:b2:a8:db:1e:33:19:cd:56:c6:1f:16:
                    d4:64:a4:32:6e:ee:d3:e4:4c:74:e1:37:cf:71:e0:
                    51:35:7f:b4:9e:92:49:88:39:57:a8:84:bd:02:a7:
                    49:de:90:e4:1d:a8:db:5a:a3:62:de:75:4d:c3:67:
                    bd:83:70:55:01:e2:0a:2f:ea:1d:32:ad:94:a8:72:
                    09:47:b1:77:69:24:53:0e:79:17:c1:b2:3b:54:95:
                    58:17:ee:5f:73:d4:9b:4b:b8:3b:1f:5a:23:b2:5c:
                    5a:dd:c3:b8:1e:f6:89:8b:70:9b:60:3a:5a:f2:49:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7F:2D:EF:2D:B8:F0:9E:69:99:95:B7:63:1A:E1:02:A7:D4:80:3D
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3a2f33332d3333203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         35:54:32:41:cd:6e:82:bd:48:1a:99:ff:26:50:7c:41:85:05:
         92:f2:a4:19:41:3e:72:6d:47:b1:a2:e3:01:e3:b7:da:94:c0:
         f6:49:6a:8f:2c:21:9c:04:f5:83:3d:2d:84:78:10:f9:7a:1c:
         de:00:37:ab:2b:e8:74:54:52:56:3d:c6:70:ea:1c:27:7a:18:
         af:d5:37:66:3e:30:dd:4c:1b:dc:ab:aa:de:61:dd:60:8c:bc:
         21:c2:66:2f:db:14:90:14:f0:23:2f:e2:be:4f:e1:55:b3:c6:
         03:31:fe:76:94:1c:94:25:a4:a1:3f:81:0a:ef:d9:7d:f3:38:
         dd:ec:3a:3c:18:64:d8:96:23:07:46:12:e5:02:35:c5:1e:e3:
         b4:04:51:ab:03:10:1e:25:85:4f:c6:88:f4:90:36:46:c7:54:
         3d:14:84:05:9f:ba:8a:96:9c:df:7a:8b:5b:a5:c2:50:8c:cd:
         b6:e7:d3:21:bc:6f:ce:b9:00:3e:00:a6:40:f4:08:58:55:3b:
         44:dc:50:b9:aa:78:05:29:8f:c9:4e:ae:cb:4d:1d:98:1d:a6:
         b2:5f:3d:c5:8a:10:9c:fe:f9:58:08:32:e4:a4:e4:a6:4d:24:
         79:78:36:4f:ed:71:43:72:45:15:23:72:79:21:55:ee:ce:70:
         9b:56:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 10:11:54 2026 by rpki-client