Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/323830343a316564303a323030303a3a2f34302d3430203d3e20323632323836.roa
File:                     323830343a316564303a323030303a3a2f34302d3430203d3e20323632323836.roa (raw, json)
Hash identifier:          jrq3dc62FZ80i0gCxrl558KNndw0tzevAFT9zRTZ4Vs=
Subject key identifier:   F1:3F:61:6E:D7:30:F9:27:A4:24:42:29:1A:64:62:E5:81:9E:3F:1A
Certificate issuer:       /CN=AD471BD663C1E455A719ED3EA655E4E736DF4C67
Certificate serial:       5690505DEFE0E818570B70C64C3A5D92872B0DA9
Authority key identifier: AD:47:1B:D6:63:C1:E4:55:A7:19:ED:3E:A6:55:E4:E7:36:DF:4C:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/323830343a316564303a323030303a3a2f34302d3430203d3e20323632323836.roa
Signing time:             Tue 06 Oct 2026 13:13:51 +0000
ROA not before:           Tue 06 Oct 2026 13:08:51 +0000
ROA not after:            Tue 05 Oct 2027 13:13:51 +0000
asID:                     262286
IP address blocks:        2804:1ed0:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.crl
                          rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:90:50:5d:ef:e0:e8:18:57:0b:70:c6:4c:3a:5d:92:87:2b:0d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD471BD663C1E455A719ED3EA655E4E736DF4C67
        Validity
            Not Before: Oct  6 13:08:51 2026 GMT
            Not After : Oct  5 13:13:51 2027 GMT
        Subject: CN=F13F616ED730F927A42442291A6462E5819E3F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6f:ba:da:b5:c9:9b:f5:1d:cb:52:df:7a:03:
                    5d:92:2b:99:a0:49:23:b5:5c:96:3d:eb:19:61:91:
                    81:59:18:f1:7a:fe:c8:b6:f4:1b:cb:78:8d:81:88:
                    ff:d2:ca:41:4d:1f:d3:59:9c:0e:4a:ba:45:3d:33:
                    ff:8a:6c:bc:96:0f:14:df:01:8d:69:0f:80:c1:0e:
                    66:cf:a6:40:ff:0b:1a:fd:f9:f5:38:96:ec:67:49:
                    04:f2:e9:a4:b4:b1:f2:7f:ea:87:50:f3:6d:55:45:
                    b4:0f:da:d0:b1:35:a0:c4:5a:ad:7a:ce:92:9d:12:
                    3e:b8:9a:88:02:76:bb:8b:41:4c:c2:11:56:37:9d:
                    54:9f:cf:34:3b:d0:d5:62:33:ea:00:43:71:ff:12:
                    58:b3:2f:56:6a:56:47:19:6e:bf:fe:60:84:7c:b7:
                    34:77:ca:a9:7b:f1:0c:1e:90:28:c1:9f:9b:be:4f:
                    37:78:8f:7a:f4:06:65:41:ba:0c:4a:9b:53:6d:35:
                    f9:e4:8b:5d:5c:05:d4:12:60:1e:2f:ad:31:32:87:
                    c3:51:a0:4f:14:d3:5f:e8:7c:74:69:eb:a1:ea:97:
                    6d:1a:54:87:13:10:a5:38:0f:8b:92:b1:e9:be:11:
                    6e:5d:ff:9a:d6:24:76:eb:04:7f:da:20:a8:49:62:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3F:61:6E:D7:30:F9:27:A4:24:42:29:1A:64:62:E5:81:9E:3F:1A
            X509v3 Authority Key Identifier:
                keyid:AD:47:1B:D6:63:C1:E4:55:A7:19:ED:3E:A6:55:E4:E7:36:DF:4C:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/323830343a316564303a323030303a3a2f34302d3430203d3e20323632323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ed0:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:26:9a:0b:d7:b2:29:d1:89:fd:27:cc:d3:82:13:47:83:
         67:7f:57:fa:48:f8:5c:8a:a1:5f:b4:ee:dc:18:6d:99:01:e0:
         6c:2c:24:1a:7d:91:7f:5b:d2:f4:30:c9:d1:68:12:87:13:90:
         d4:d5:8a:67:f5:38:68:12:06:e4:55:06:15:0e:84:a2:4f:e9:
         2e:a6:7d:0d:75:34:18:14:fc:1f:ac:67:78:22:8f:89:de:94:
         96:62:3c:f6:fd:6b:50:70:71:ba:2f:67:b1:b7:ab:e0:d3:48:
         99:a6:f7:3e:05:46:50:67:23:45:aa:4d:76:bc:cf:69:35:fb:
         3a:16:47:36:34:ee:aa:f9:6e:d1:a3:f9:e8:1d:36:d0:85:9f:
         a5:54:16:a4:28:15:7c:1d:4d:95:d1:dd:48:b1:2d:95:db:7d:
         31:d9:d0:e3:c6:99:84:9f:ad:7a:fb:e1:4f:5c:10:9b:ed:f3:
         37:08:47:51:f3:d5:34:f8:9c:55:26:79:85:03:31:19:91:c2:
         79:85:60:f9:9c:2c:5e:2d:aa:31:e6:e8:8c:0e:17:47:34:d5:
         3c:14:7e:37:56:7b:f6:59:f8:30:88:74:f0:29:e7:5a:e5:75:
         1a:e5:01:2c:ba:8c:b1:2b:47:12:17:5e:c8:2d:23:7f:b6:cf:
         2e:e5:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:25:19 2026 by rpki-client