Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33332d3333203d3e20323639353032.roa
File:                     323830343a363539383a3a2f33332d3333203d3e20323639353032.roa (raw, json)
Hash identifier:          fbSkXofN1Jh312/Srm0+v8ZBwZSLqPWx416mW6gGAqo=
Subject key identifier:   4D:7E:80:92:04:E6:F8:0D:E7:86:72:EF:84:4C:65:57:C1:7B:7C:50
Certificate issuer:       /CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
Certificate serial:       07EE4DEE3FD453301ED8E2AC6E24DAF07C5A3A4B
Authority key identifier: B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33332d3333203d3e20323639353032.roa
Signing time:             Sun 04 Oct 2026 14:04:08 +0000
ROA not before:           Sun 04 Oct 2026 13:59:08 +0000
ROA not after:            Sun 03 Oct 2027 14:04:08 +0000
asID:                     269502
IP address blocks:        2804:6598::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 16:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ee:4d:ee:3f:d4:53:30:1e:d8:e2:ac:6e:24:da:f0:7c:5a:3a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
        Validity
            Not Before: Oct  4 13:59:08 2026 GMT
            Not After : Oct  3 14:04:08 2027 GMT
        Subject: CN=4D7E809204E6F80DE78672EF844C6557C17B7C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:40:eb:63:a3:f0:e2:e9:c4:7b:1b:19:29:
                    97:e7:f9:d4:fb:56:b0:5a:b7:37:91:d2:01:77:37:
                    f9:0b:1a:4f:d1:82:38:57:69:78:5f:16:44:8f:0f:
                    32:83:e3:a5:7f:a1:e9:e0:1c:e0:77:b3:e0:b8:24:
                    c9:2d:3a:78:25:f5:78:5c:e8:65:bb:10:7d:88:fe:
                    aa:3a:4b:84:f6:c1:c5:b0:23:99:52:d2:c4:3a:7b:
                    ea:8b:0d:6c:39:9d:38:08:24:ff:78:7d:91:41:5b:
                    4b:af:1e:3a:02:36:23:23:12:34:ec:5a:80:88:c2:
                    ac:66:0f:4d:fb:5d:5d:8d:fe:0f:13:50:b2:47:e0:
                    41:24:00:45:46:eb:3e:b5:75:20:eb:d4:a4:d8:7c:
                    b0:68:db:fd:e3:c2:f3:3d:3c:22:46:53:ea:8c:21:
                    8c:21:03:3a:43:02:46:b7:f4:a4:c0:05:0a:00:44:
                    25:61:c4:d5:7e:35:57:a7:b9:20:ee:6e:6b:6d:8e:
                    b3:2a:f3:de:94:f2:5d:38:e9:60:7c:b2:af:f6:85:
                    1d:b8:12:d8:ad:77:80:6c:8a:ae:37:d3:fa:bf:42:
                    b0:06:dc:ce:83:ad:1b:9a:d2:73:b2:ee:70:36:68:
                    ec:e9:89:d4:28:32:97:84:b3:a6:2d:14:10:65:ef:
                    74:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7E:80:92:04:E6:F8:0D:E7:86:72:EF:84:4C:65:57:C1:7B:7C:50
            X509v3 Authority Key Identifier:
                keyid:B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33332d3333203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:73:91:c9:19:2e:d6:b5:97:8c:48:32:0d:ce:cf:02:6c:ee:
         c1:f7:c4:c5:ff:5a:e8:07:12:d9:87:1f:e9:31:c5:20:a3:98:
         d7:b7:9d:46:ac:0c:d2:e8:38:ad:dc:6e:02:f9:f8:6c:55:36:
         36:d7:d1:e8:ba:65:69:5d:19:ed:8b:40:ce:5b:23:fc:fb:a2:
         12:20:5d:f8:91:cc:a8:d4:22:22:e5:2c:2f:d6:b4:6e:cf:b2:
         a4:5c:3e:3a:07:fe:00:f6:e7:9e:23:db:54:1c:8a:c1:45:56:
         94:24:28:0f:06:9b:0e:98:f8:cd:ec:68:c7:53:a5:09:f7:2f:
         ad:6d:0e:a2:7a:5b:39:72:e7:35:40:2f:6c:3c:26:ce:48:7a:
         aa:f8:59:6d:d1:38:51:64:51:5d:aa:e5:38:4a:ab:49:70:37:
         a1:78:e1:23:7b:1f:d4:e9:30:00:71:36:f5:2b:14:44:6f:a7:
         4a:5b:b5:47:e7:91:67:73:9a:ad:3b:8e:17:0d:1e:04:46:c0:
         17:42:b8:5a:3f:f7:f6:ff:3b:59:39:5c:6f:17:ed:e7:2d:89:
         2b:2f:21:a0:5f:0a:0e:e8:b0:f4:8b:59:e8:07:31:ac:5e:4c:
         42:78:24:20:2a:90:4f:cd:8a:29:b5:57:a9:c7:71:fc:55:c5:
         81:18:1b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:36:24 2026 by rpki-client