Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa
File:                     323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa (raw, json)
Hash identifier:          egxgib7t8TiXXwHv7r+KMCu8VwobUl6dJyerRUMQEXQ=
Subject key identifier:   FB:E0:B2:06:F2:55:EE:10:FD:9A:02:A6:D3:BA:10:43:DF:5C:ED:99
Certificate issuer:       /CN=079670A0FD31480E710CC2F0D821F426E373FE20
Certificate serial:       0B86E4418DAF750D358B0FD030A55AB4A92B8941
Authority key identifier: 07:96:70:A0:FD:31:48:0E:71:0C:C2:F0:D8:21:F4:26:E3:73:FE:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/079670A0FD31480E710CC2F0D821F426E373FE20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa
Signing time:             Mon 26 Oct 2026 20:27:53 +0000
ROA not before:           Mon 26 Oct 2026 20:22:53 +0000
ROA not after:            Mon 25 Oct 2027 20:27:53 +0000
asID:                     271548
IP address blocks:        2804:7d3c:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/079670A0FD31480E710CC2F0D821F426E373FE20.crl
                          rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/079670A0FD31480E710CC2F0D821F426E373FE20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/079670A0FD31480E710CC2F0D821F426E373FE20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 10:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:86:e4:41:8d:af:75:0d:35:8b:0f:d0:30:a5:5a:b4:a9:2b:89:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079670A0FD31480E710CC2F0D821F426E373FE20
        Validity
            Not Before: Oct 26 20:22:53 2026 GMT
            Not After : Oct 25 20:27:53 2027 GMT
        Subject: CN=FBE0B206F255EE10FD9A02A6D3BA1043DF5CED99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:69:da:fc:9b:f6:bd:4f:0d:13:a5:6e:83:
                    88:59:c0:4d:b0:46:55:b3:61:69:2e:b1:1a:6f:db:
                    f8:6a:92:70:eb:cc:1a:f4:d5:92:7a:db:04:d2:1d:
                    be:35:1f:32:ab:db:c4:8b:38:70:68:ac:1d:03:db:
                    c2:56:47:92:a5:e4:93:5e:e4:23:ac:43:32:46:87:
                    7c:27:05:b1:eb:35:cd:da:b3:9b:a5:75:eb:34:91:
                    db:bb:1b:25:53:f5:bf:91:07:88:b7:7e:1c:2e:6a:
                    cc:13:da:df:ae:87:70:a1:e9:92:6c:62:c9:d0:1e:
                    b9:6d:73:5b:d7:dd:71:e6:ea:88:e7:db:6e:35:c5:
                    a6:67:c9:1f:e6:c4:b1:bf:fc:66:8a:ba:a8:4f:47:
                    ee:fa:ec:7b:2a:05:e6:91:86:f7:0e:7d:0b:77:3d:
                    42:7d:6e:29:02:51:fb:01:a2:ba:db:c2:3b:42:61:
                    d0:3b:61:01:c0:10:a0:64:00:ff:3d:b1:b2:85:c7:
                    cb:10:65:bf:3a:be:1e:4b:3a:ce:d9:99:a1:aa:9b:
                    f2:fc:43:3f:08:87:57:61:9b:8f:6c:cd:77:41:b7:
                    09:92:cf:6e:fe:f1:5e:30:17:af:a6:c4:8d:e7:b0:
                    e3:8d:ce:b6:5e:31:57:05:50:98:0a:63:9f:9d:96:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E0:B2:06:F2:55:EE:10:FD:9A:02:A6:D3:BA:10:43:DF:5C:ED:99
            X509v3 Authority Key Identifier:
                keyid:07:96:70:A0:FD:31:48:0E:71:0C:C2:F0:D8:21:F4:26:E3:73:FE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/079670A0FD31480E710CC2F0D821F426E373FE20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/079670A0FD31480E710CC2F0D821F426E373FE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d3c:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:12:20:7a:f4:68:a5:6e:e1:c7:99:6c:49:6c:23:b9:4c:
         45:75:1b:1d:20:28:11:31:c7:0d:c2:8e:25:1d:9d:fd:bc:ca:
         09:a1:6a:d8:fd:33:0b:aa:3a:ad:cd:00:ce:ac:c4:71:7d:e8:
         05:cb:d7:85:09:ec:18:61:5c:af:d5:4b:47:02:25:5c:b8:82:
         2b:15:97:2d:47:68:5e:ee:d5:48:d0:58:35:15:7f:66:a6:55:
         5a:68:d8:92:58:7e:c3:cc:83:a5:cd:64:e7:14:7a:59:b0:a1:
         1b:f0:d0:ef:fe:b7:28:8e:12:87:87:8f:ac:d0:d9:f2:f6:f0:
         26:73:dc:2e:7f:b6:95:a5:dc:34:b9:ab:b9:b8:99:98:c8:d8:
         a0:08:95:f0:20:25:aa:53:5b:85:ae:15:f9:4c:ad:19:76:50:
         6a:ce:b0:4c:bf:9b:2d:39:98:e4:84:30:48:20:e1:df:11:3a:
         7c:16:bf:78:63:49:30:37:c1:ba:7a:fd:ed:d5:e3:c4:e2:27:
         a4:f6:d8:26:00:77:b9:7b:8f:4b:cd:f0:84:b4:e5:70:30:cf:
         df:d4:83:d2:21:e8:93:b9:c1:f5:9c:8c:57:b5:53:ad:80:3c:
         4a:12:ec:dc:0d:40:3b:5f:ae:58:88:b1:09:b7:57:e0:70:85:
         23:ee:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:30:38 2026 by rpki-client