Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa
File:                     323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (raw, json)
Hash identifier:          uodQ4vKNqXVwf8rifevxi71R6pQpF2HFi1GAfxm7NB4=
Subject key identifier:   B0:53:6A:C8:6F:F1:FD:85:8D:77:2D:39:BC:38:24:9A:15:A1:18:5A
Certificate issuer:       /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Certificate serial:       2C940FFEF02610BB23F9E1F4375084624FE744B8
Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa
Signing time:             Tue 29 Sep 2026 12:00:00 +0000
ROA not before:           Tue 29 Sep 2026 11:55:00 +0000
ROA not after:            Tue 28 Sep 2027 12:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54:fe00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 15:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:94:0f:fe:f0:26:10:bb:23:f9:e1:f4:37:50:84:62:4f:e7:44:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
        Validity
            Not Before: Sep 29 11:55:00 2026 GMT
            Not After : Sep 28 12:00:00 2027 GMT
        Subject: CN=B0536AC86FF1FD858D772D39BC38249A15A1185A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:62:f8:e2:b7:2e:72:1b:e7:3e:84:08:ab:
                    9c:42:47:82:16:b3:ec:a4:37:c9:44:9e:26:81:29:
                    39:8e:a2:42:30:c4:02:c9:cc:87:6f:d9:cd:bb:1d:
                    4e:6a:c1:02:95:d8:dc:87:b8:9e:6a:fd:ca:d0:b5:
                    a5:f1:b7:f4:5c:8d:51:11:c7:fb:39:1c:3a:17:bb:
                    f7:6b:28:21:75:73:ba:dd:47:45:fa:10:97:a9:4c:
                    7f:de:7f:74:17:91:6d:a9:87:dd:6f:0b:33:a9:12:
                    25:69:7b:40:15:3f:f4:1c:0e:b5:3d:5f:42:43:3b:
                    8a:e1:08:21:24:57:c3:72:d4:b2:75:97:b2:83:e7:
                    1e:67:1c:e6:70:2d:e5:48:fc:64:4c:55:2a:ee:99:
                    5d:8c:80:52:25:f5:63:fb:24:a9:22:c1:8e:24:90:
                    19:c1:59:6e:23:d8:6f:78:2b:75:e0:27:25:09:f0:
                    52:10:54:91:c7:38:31:30:90:6a:95:d5:d4:7e:a3:
                    1c:2e:4f:91:e2:e7:82:31:5b:fe:2f:4d:58:24:e2:
                    f8:32:eb:b3:75:f9:99:88:c8:09:de:3c:19:7a:a5:
                    19:03:94:cf:17:67:00:11:28:a1:eb:85:41:e3:e7:
                    b8:8a:67:fc:6d:7b:37:40:fe:b6:4b:2b:6e:e5:59:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:6A:C8:6F:F1:FD:85:8D:77:2D:39:BC:38:24:9A:15:A1:18:5A
            X509v3 Authority Key Identifier:
                keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:02:56:b9:9c:65:a0:d9:bc:9f:12:b3:b4:45:31:6f:62:ce:
         99:ac:84:f9:fc:92:21:69:8c:78:94:86:86:0a:05:1d:91:9b:
         9c:03:0f:6f:4c:e9:d8:07:1d:55:32:1c:00:28:96:d4:ca:03:
         e1:fb:90:c8:77:6d:eb:53:dc:d0:43:94:ba:ad:b2:71:02:3b:
         02:7c:f3:dd:6f:e0:41:d2:4d:2b:0d:60:d2:12:4e:35:e2:c1:
         e0:c0:97:4c:21:14:ca:20:b8:71:e2:a4:09:17:29:79:76:09:
         e7:ca:57:e5:ab:3b:5f:87:49:34:2e:5b:48:03:66:87:26:4f:
         a9:0e:f3:0a:97:4b:74:14:3d:15:21:58:16:f6:c8:bb:74:ad:
         56:61:1d:6e:ec:82:87:58:53:c4:46:42:02:74:a6:99:e1:dd:
         bb:7e:31:48:6d:e3:3f:e2:4e:e7:1b:4b:9d:08:25:a5:18:20:
         bf:41:5f:38:ed:ce:f8:7e:b7:e3:33:25:95:34:04:1d:34:e2:
         14:71:f0:74:64:91:21:c4:1a:47:47:6b:cd:cc:c3:d9:e8:d8:
         05:18:01:74:5a:c6:0d:d6:a0:69:1f:c5:2e:26:67:32:a7:4a:
         6e:0b:27:0c:78:0e:5e:9f:c5:1f:f7:f7:95:5d:7f:0f:2d:dc:
         49:91:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:47:03 2026 by rpki-client