Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a643030303a3a2f33372d3337203d3e20323639363536.roa
File:                     323830343a363765303a643030303a3a2f33372d3337203d3e20323639363536.roa (raw, json)
Hash identifier:          ILkb93a1zjSW4QJJL6p4z85H4J9zV8xYaCGQ+Eh63Zc=
Subject key identifier:   2A:05:37:DD:9D:2C:AA:27:8E:02:22:22:6F:1B:30:26:65:65:22:54
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       50588A22F1E1592DCCD9BBA7BCA88026A160C187
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a643030303a3a2f33372d3337203d3e20323639363536.roa
Signing time:             Thu 08 Oct 2026 19:02:31 +0000
ROA not before:           Thu 08 Oct 2026 18:57:31 +0000
ROA not after:            Thu 07 Oct 2027 19:02:31 +0000
asID:                     269656
IP address blocks:        2804:67e0:d000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 15:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:8a:22:f1:e1:59:2d:cc:d9:bb:a7:bc:a8:80:26:a1:60:c1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Oct  8 18:57:31 2026 GMT
            Not After : Oct  7 19:02:31 2027 GMT
        Subject: CN=2A0537DD9D2CAA278E0222226F1B302665652254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:a8:a0:9f:74:6d:1f:f6:46:6a:ee:2c:15:
                    4e:81:b9:6f:3e:74:7a:25:2d:ea:8f:78:f6:c5:5b:
                    77:d1:c9:7e:6a:62:95:b2:03:b9:7b:b2:0f:5e:70:
                    47:ed:2f:dc:92:58:62:83:d2:fb:3a:d0:bb:e4:1b:
                    52:f4:77:b2:e2:51:53:44:bc:3c:d6:89:40:e9:8c:
                    65:32:c1:0d:b4:d3:89:fe:59:92:c3:4b:b7:b4:8e:
                    a4:1b:01:95:ee:f6:37:24:57:5c:fc:0c:76:51:b0:
                    cd:23:26:02:3e:69:4e:1c:d4:73:b6:e9:98:cc:07:
                    d7:62:77:46:ff:02:a8:90:d5:3b:83:2f:dc:a2:f1:
                    f7:d8:90:e9:4c:f9:a8:01:08:5e:72:41:5a:86:e5:
                    61:ea:d5:bb:21:17:08:d4:84:51:6d:d3:d1:00:f0:
                    af:d0:e4:50:58:bf:33:95:58:38:60:71:32:ab:4a:
                    f1:75:b2:44:ca:93:d2:ce:42:b9:b7:fb:44:ff:27:
                    03:4e:78:de:51:8c:7d:a7:d5:8a:5e:0e:ac:28:08:
                    c2:21:df:49:6b:68:b2:c5:8c:62:e5:a9:eb:60:e2:
                    50:f0:cb:5a:15:51:17:1b:ba:ce:93:8b:f6:75:ac:
                    1f:e7:58:a4:0e:9d:f3:13:ed:a4:5c:8f:29:bd:aa:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:37:DD:9D:2C:AA:27:8E:02:22:22:6F:1B:30:26:65:65:22:54
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a643030303a3a2f33372d3337203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0:d000::/37

    Signature Algorithm: sha256WithRSAEncryption
         0d:3e:8d:a5:cc:9a:1f:65:86:80:b3:60:4c:89:14:b5:ef:72:
         01:68:bd:54:f6:cb:cb:a9:db:fe:ff:7d:f2:b0:11:01:99:6a:
         a8:ad:55:6c:a4:a4:72:51:d3:ba:97:c6:f4:c5:c9:32:be:28:
         ed:82:24:6c:84:89:43:3e:12:52:d4:85:af:79:8b:e0:66:0a:
         02:c6:5b:40:51:71:82:b7:2c:a1:39:da:ab:bd:86:81:86:36:
         ad:6a:c1:2a:7a:cc:ad:f4:6e:1b:24:e4:e7:e3:4e:f8:6a:9b:
         d8:6b:91:5b:4f:b3:ee:20:9e:fc:a1:9d:46:9e:ea:dd:0c:16:
         60:9a:60:bb:c2:43:56:5a:ee:a8:89:e6:1c:47:3d:9d:97:f9:
         e1:e0:c0:0f:5e:0c:10:bf:19:1e:31:00:3b:bc:43:12:df:b3:
         0a:ca:c4:25:5a:3a:5d:8d:2a:df:5a:8e:e1:04:ee:a5:8e:0f:
         b0:4a:dc:da:5f:e8:e0:02:ed:ed:25:ab:c7:67:a5:56:d5:5b:
         bf:16:90:9c:61:29:fe:6f:e1:e0:ca:d1:9b:f0:6b:25:c8:80:
         ce:bb:6e:68:7f:b5:c6:4b:b5:c5:5e:65:89:06:80:07:4b:6a:
         c1:fa:11:e0:df:28:f3:86:f6:9a:a2:9d:06:5f:21:b0:e9:60:
         1f:0c:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:51:43 2026 by rpki-client