Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa
File:                     323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier:          GZOsgahP8PTPbhQiJTpZoP7lqgu/WiOFnN1SRDtRs00=
Subject key identifier:   4B:AD:E9:C4:4B:2F:63:98:02:33:38:5A:2D:B5:DF:B0:21:CF:0C:51
Certificate issuer:       /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Certificate serial:       71E18416B8268DF563D96A531F762B6B78DDA560
Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa
Signing time:             Tue 29 Sep 2026 12:00:00 +0000
ROA not before:           Tue 29 Sep 2026 11:55:00 +0000
ROA not after:            Tue 28 Sep 2027 12:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e1:84:16:b8:26:8d:f5:63:d9:6a:53:1f:76:2b:6b:78:dd:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
        Validity
            Not Before: Sep 29 11:55:00 2026 GMT
            Not After : Sep 28 12:00:00 2027 GMT
        Subject: CN=4BADE9C44B2F63980233385A2DB5DFB021CF0C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:13:ac:20:0c:fd:7e:66:26:a5:ac:86:91:
                    58:46:e0:e4:b6:a4:59:e8:be:b0:39:c9:7d:7c:f9:
                    44:22:9d:d0:8c:3c:54:1a:8a:6d:cb:eb:e4:31:5d:
                    b5:80:6a:6f:2b:6a:59:8a:4b:d7:d2:26:31:55:0a:
                    9b:51:1f:32:11:4d:5b:ba:a7:eb:d4:94:ed:ce:5f:
                    93:b1:b8:1b:f5:ae:4f:bc:df:34:43:88:98:a7:ee:
                    31:88:29:e1:90:30:08:b9:c1:0d:81:71:02:bf:79:
                    55:e0:15:a7:e3:ef:7b:1c:9e:33:bc:ed:3a:40:7c:
                    2e:c1:37:9e:c2:3f:44:17:79:f8:64:86:a0:ae:72:
                    35:4a:43:34:5f:54:11:93:02:e1:02:bf:68:e0:e1:
                    8b:03:fc:b0:37:55:73:88:c1:6c:9b:19:00:ff:7e:
                    4d:0b:a1:54:77:a0:b2:7b:51:ab:df:37:cd:63:c8:
                    b9:89:f2:4b:d4:2e:7b:db:53:8d:a0:25:32:4a:e7:
                    4e:26:90:34:bb:be:0f:36:52:d4:0f:54:72:fb:5a:
                    ee:10:20:ae:32:5d:cc:1d:c0:58:a1:05:a6:15:27:
                    74:c0:03:4b:47:db:33:a8:6a:06:17:e1:a2:a7:f2:
                    a5:c0:7c:91:b3:40:57:93:85:cb:61:4a:86:54:c5:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AD:E9:C4:4B:2F:63:98:02:33:38:5A:2D:B5:DF:B0:21:CF:0C:51
            X509v3 Authority Key Identifier:
                keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c4:c2:1b:a1:13:68:a0:42:19:ce:c8:6b:d0:13:42:12:84:ca:
         7e:e0:e4:58:b8:9d:c7:03:c3:6d:67:e1:e0:af:2f:de:e1:e1:
         cd:91:af:42:8f:fd:ae:6c:6b:b6:c8:b1:b7:04:37:d7:fb:af:
         86:f1:b2:2b:85:bd:e7:ce:7c:8a:d7:23:df:1c:c6:5e:e2:2e:
         68:ff:99:32:3c:05:7c:f6:50:44:36:91:50:57:b7:e7:d6:0d:
         5e:6b:27:98:6c:a1:a4:ea:c0:2c:7b:a2:e4:1a:87:21:a0:49:
         69:be:93:44:43:6a:47:8a:11:bd:53:67:b5:b1:26:12:d0:f1:
         84:59:55:46:a7:52:88:3b:51:95:9e:e1:25:e3:b5:1a:6c:a3:
         bd:64:22:16:e0:e3:5a:6f:47:b5:86:7f:53:ed:0d:74:be:30:
         38:e7:b9:ed:c2:e1:d8:f1:33:fe:b2:5b:ee:04:06:79:aa:59:
         11:44:1a:b2:99:3b:1a:ae:9a:f2:23:8e:b2:32:ca:71:a6:12:
         52:53:b8:e7:18:22:82:59:cb:d5:01:27:ae:7c:10:06:f8:9b:
         36:b2:e7:73:0a:31:8e:4f:0a:8e:24:bc:5a:3b:79:2b:3b:da:
         d9:10:93:78:b0:3b:d4:db:b3:d2:d4:82:d0:a1:a7:b2:cc:e6:
         16:3a:c6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:34:10 2026 by rpki-client