Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
File:                     323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier:          g4EekBnIgUd2kHdQkG9RrEUT3cyKDeIl5n4xw5Hj8RI=
Subject key identifier:   FB:5D:DC:42:05:25:A1:68:0C:BC:40:EE:98:93:32:9A:F9:11:7C:DA
Certificate issuer:       /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Certificate serial:       2FC4C2886787FCD6BD1D421261745E5A9AC81842
Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
Signing time:             Tue 29 Sep 2026 12:00:00 +0000
ROA not before:           Tue 29 Sep 2026 11:55:00 +0000
ROA not after:            Tue 28 Sep 2027 12:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c4:c2:88:67:87:fc:d6:bd:1d:42:12:61:74:5e:5a:9a:c8:18:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
        Validity
            Not Before: Sep 29 11:55:00 2026 GMT
            Not After : Sep 28 12:00:00 2027 GMT
        Subject: CN=FB5DDC420525A1680CBC40EE9893329AF9117CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:bc:87:93:0a:38:c6:7f:47:fa:63:ed:30:
                    1e:38:e8:30:52:64:16:dc:d9:68:17:80:ec:2d:78:
                    91:eb:cb:18:69:f2:b6:32:36:1d:2f:57:19:2a:be:
                    56:21:4b:ab:fa:72:c9:c0:68:51:a7:5b:db:db:87:
                    60:7f:d5:93:3d:0a:1e:2b:d2:74:04:5a:68:93:c9:
                    a0:13:0b:ac:e0:82:97:de:ec:ce:ab:23:6c:7b:46:
                    b0:ac:12:56:75:ab:46:e4:9a:e9:c7:57:24:72:18:
                    b8:9e:77:50:8d:65:ef:ab:3b:60:14:c6:c0:0c:5f:
                    1b:cf:79:40:d1:17:f3:63:74:4f:b9:ba:fc:6e:b0:
                    b2:14:30:7d:43:c5:3a:1b:8b:4a:9b:d7:0d:55:48:
                    a2:2e:3a:75:ec:34:a1:80:d7:c6:d1:fc:d2:dc:45:
                    cb:ab:ce:05:49:b8:04:aa:cf:fa:28:bd:67:5a:a2:
                    8f:9e:81:8d:a8:29:cd:7f:71:b2:8e:2a:60:71:1e:
                    d0:b0:89:a0:8d:77:9e:b1:ff:68:e1:51:a6:12:fc:
                    57:71:21:a6:bf:16:8b:85:29:18:50:40:43:7b:72:
                    4d:25:b7:a8:23:72:c7:1c:ad:a9:e5:33:31:d4:a3:
                    fd:4e:d7:64:69:f0:e1:38:45:22:02:cf:08:70:b7:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5D:DC:42:05:25:A1:68:0C:BC:40:EE:98:93:32:9A:F9:11:7C:DA
            X509v3 Authority Key Identifier:
                keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:56:d9:12:1a:d3:d4:f1:fd:e3:9c:e0:95:c8:c3:12:2a:
         0f:12:84:65:bf:97:83:ae:be:72:41:48:61:44:de:52:ce:72:
         38:54:8d:a7:a4:e6:43:8d:f7:bc:06:4d:8d:3d:4f:ce:6d:f5:
         d8:67:45:af:24:d5:44:65:ab:08:e1:a1:d7:74:e3:73:ff:c7:
         d0:d6:1f:03:dd:a2:b7:79:b4:f1:b4:31:dc:ea:01:3c:2a:c9:
         71:72:2c:81:73:9e:43:bc:35:6e:47:a8:52:40:11:38:69:f7:
         34:13:b2:1f:cb:38:a3:6b:76:96:a3:c8:af:ac:5e:8b:1f:d6:
         d0:81:e9:8f:3c:75:6d:cf:3e:7d:1f:a8:d9:8b:55:c6:29:a0:
         31:97:18:d2:43:1a:a6:37:b4:1e:ee:07:6c:8f:a7:66:ce:b6:
         6e:fe:ba:b9:82:18:52:39:3f:d6:a7:82:28:4f:ea:9d:cd:cb:
         25:3e:63:00:f2:b1:6e:2a:cc:68:55:51:6e:1d:8c:10:a0:fc:
         f3:d1:00:72:1c:3a:a8:bd:fe:7f:92:d1:2d:a6:c8:ab:e1:ff:
         ca:fc:3b:57:d4:2d:e5:65:b7:93:8f:cf:8d:91:fe:af:30:41:
         18:e9:83:c9:6a:b1:63:cc:32:a7:14:19:d1:ad:4f:95:29:55:
         be:b4:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:33:21 2026 by rpki-client