Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33342d3334203d3e20323731353632.roa
File:                     323830343a376437343a3a2f33342d3334203d3e20323731353632.roa (raw, json)
Hash identifier:          oQCG663aVAm1Xeq9la+KKKQScM+sM30vatm3Pz0sIlY=
Subject key identifier:   31:1E:E3:34:18:46:52:4B:52:7D:6C:9C:38:9F:9E:3E:D5:79:63:8C
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       1811DB69B036FE8E48D341931F170195D961630A
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33342d3334203d3e20323731353632.roa
Signing time:             Wed 14 Oct 2026 00:17:16 +0000
ROA not before:           Wed 14 Oct 2026 00:12:16 +0000
ROA not after:            Wed 13 Oct 2027 00:17:16 +0000
asID:                     271562
IP address blocks:        2804:7d74::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 06:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:11:db:69:b0:36:fe:8e:48:d3:41:93:1f:17:01:95:d9:61:63:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Oct 14 00:12:16 2026 GMT
            Not After : Oct 13 00:17:16 2027 GMT
        Subject: CN=311EE3341846524B527D6C9C389F9E3ED579638C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:26:33:a7:1d:d6:11:18:7a:54:40:cd:71:
                    63:ed:68:c5:35:a6:e8:dd:7a:5b:db:8a:be:da:26:
                    68:a2:8f:07:e8:57:15:76:05:da:f2:8f:1e:22:a2:
                    0e:6c:d8:b3:d9:84:66:1e:ce:af:61:04:6d:fb:e6:
                    d6:f4:60:55:c6:2e:5d:9c:b5:61:ea:b0:4e:a6:33:
                    7d:c1:1a:27:61:c1:fc:26:ca:e3:01:33:22:0d:0c:
                    e9:86:9c:1c:e3:88:f2:cf:12:d6:df:4d:47:3d:28:
                    75:65:e2:40:b5:e8:7a:d1:6a:1a:d2:24:74:39:9e:
                    c1:b2:47:b9:37:5c:e3:99:ee:94:76:39:f3:66:75:
                    35:86:ef:58:6d:d5:d6:a4:c3:1e:c4:0f:6d:9f:c1:
                    5f:18:b3:61:2a:e1:df:5c:af:cd:70:1d:b4:fc:06:
                    da:35:00:ac:94:b0:c7:53:a5:c9:2f:01:23:cd:b1:
                    51:79:26:73:e5:eb:ac:f2:3b:8d:ce:0d:a8:05:22:
                    ed:3a:a2:38:0a:15:13:ac:fe:b3:06:10:6c:35:7a:
                    19:45:48:2b:32:ed:13:61:09:84:a0:36:0b:45:71:
                    0d:af:7e:4f:54:70:ee:4f:57:9b:8d:f7:d9:a2:32:
                    73:aa:23:f8:6d:54:d4:56:bb:aa:16:17:aa:96:7d:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1E:E3:34:18:46:52:4B:52:7D:6C:9C:38:9F:9E:3E:D5:79:63:8C
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33342d3334203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d74::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:26:db:28:6c:df:c6:a3:ab:d8:b6:fd:a2:df:44:a1:cd:7f:
         ea:17:74:a2:ba:54:dd:0d:9c:b5:91:d7:fa:dc:4c:2b:61:c8:
         b8:dc:72:25:8c:56:6f:31:c9:56:19:b3:42:f2:10:82:cd:b2:
         33:68:1f:9b:f0:2b:9f:db:cc:9e:a6:3a:e6:ac:34:06:11:48:
         d0:df:63:6f:64:e6:75:31:4d:95:8a:13:84:c8:17:3d:da:9c:
         7e:ed:c2:50:5f:6b:92:dd:ad:a8:ce:2c:7f:6b:6c:79:b1:6a:
         d8:48:58:20:3c:c9:ea:5b:b1:72:87:c6:2b:3b:1c:a1:f5:dc:
         e7:e3:c6:50:12:f8:e0:c2:6c:b7:72:30:b4:62:06:f0:f7:99:
         45:57:a7:11:ff:31:96:2a:c9:6d:29:ec:5f:fb:59:80:8b:53:
         50:86:6c:27:bc:c4:69:e7:81:a8:e4:d4:72:35:81:32:9f:fa:
         24:1b:e9:a4:a0:d1:8e:2c:4d:1d:5b:0c:3c:77:a3:c2:83:13:
         ec:87:f9:7b:16:bf:fd:6c:47:00:4d:5a:dd:9e:07:ce:83:48:
         12:38:48:f9:78:38:58:ac:23:0e:59:9e:a6:3e:e1:c7:a8:b8:
         f4:d9:d3:d8:fc:e4:24:ac:e6:3d:67:78:f7:8d:b2:d7:42:cd:
         bd:ec:b6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:11:29 2026 by rpki-client