Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/323830343a316564303a3a2f33322d3332203d3e20323632323836.roa
File:                     323830343a316564303a3a2f33322d3332203d3e20323632323836.roa (raw, json)
Hash identifier:          gRXDiTX1SwrnVlKLX2Y9cmqQmmRsUaV/mPhz98qdnoM=
Subject key identifier:   ED:F9:AA:28:84:01:B5:89:6A:22:3F:5B:B0:97:E3:01:D0:29:29:B7
Certificate issuer:       /CN=AD471BD663C1E455A719ED3EA655E4E736DF4C67
Certificate serial:       0B98B15FAD69EDBC39290E1C6798A7B3D8630EE3
Authority key identifier: AD:47:1B:D6:63:C1:E4:55:A7:19:ED:3E:A6:55:E4:E7:36:DF:4C:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/323830343a316564303a3a2f33322d3332203d3e20323632323836.roa
Signing time:             Tue 06 Oct 2026 13:13:54 +0000
ROA not before:           Tue 06 Oct 2026 13:08:54 +0000
ROA not after:            Tue 05 Oct 2027 13:13:54 +0000
asID:                     262286
IP address blocks:        2804:1ed0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.crl
                          rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 22:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:98:b1:5f:ad:69:ed:bc:39:29:0e:1c:67:98:a7:b3:d8:63:0e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD471BD663C1E455A719ED3EA655E4E736DF4C67
        Validity
            Not Before: Oct  6 13:08:54 2026 GMT
            Not After : Oct  5 13:13:54 2027 GMT
        Subject: CN=EDF9AA288401B5896A223F5BB097E301D02929B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:b0:27:3c:cd:c7:70:3d:a5:0b:f9:82:e0:
                    03:2d:be:02:ca:ad:c9:23:4f:36:fd:3b:d6:c8:db:
                    43:9b:7b:18:c3:d5:7b:93:ec:7b:b9:7a:56:cc:87:
                    ca:0e:bb:08:cb:f8:db:f0:aa:85:e6:d8:fa:cf:ee:
                    84:c9:53:c7:45:0e:49:65:5b:09:a2:53:e4:1e:5a:
                    43:3c:ca:24:21:ab:02:59:f3:75:9f:f8:8f:f0:b3:
                    56:7f:70:df:61:b8:0e:aa:9e:dd:a0:8a:54:6f:db:
                    86:a5:13:4d:6a:23:65:e9:23:29:ac:3f:4a:ef:f9:
                    39:b3:9b:a4:b7:56:93:4e:ec:5f:5d:1c:06:c8:76:
                    8e:fb:b4:bd:3d:36:df:d7:f0:db:39:6e:de:87:c1:
                    64:1f:24:d3:a8:e1:08:da:3b:b8:60:eb:a0:fb:ee:
                    8f:3a:b2:03:3f:9b:6b:08:af:ca:08:ac:96:42:97:
                    d3:58:93:18:b9:18:4e:07:d5:e6:76:4f:e6:52:b4:
                    00:68:32:ea:64:6b:ed:2b:a2:ef:10:39:31:44:58:
                    46:03:ee:91:b2:e2:ca:e2:c6:6e:a5:86:0a:54:d9:
                    34:1c:1c:6d:df:aa:26:f8:cc:e9:12:5c:ef:0a:0d:
                    22:d8:59:53:44:f3:5f:f2:96:25:4f:49:e3:8a:2b:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F9:AA:28:84:01:B5:89:6A:22:3F:5B:B0:97:E3:01:D0:29:29:B7
            X509v3 Authority Key Identifier:
                keyid:AD:47:1B:D6:63:C1:E4:55:A7:19:ED:3E:A6:55:E4:E7:36:DF:4C:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/323830343a316564303a3a2f33322d3332203d3e20323632323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:20:4e:d4:6f:27:7f:29:32:99:11:be:ad:d6:f0:98:12:
         bc:ad:db:ea:95:72:a1:2e:bf:e4:e3:c1:92:46:22:78:da:53:
         eb:72:3e:77:7d:cd:42:65:66:11:0a:f1:8d:1c:fb:2c:8b:0d:
         51:aa:9e:11:40:98:ee:12:5b:bf:13:90:5e:87:72:14:2e:06:
         ba:46:30:07:d4:21:dd:32:ee:38:48:8f:d9:cb:e4:14:0e:45:
         5d:98:3b:d8:bd:ca:49:4d:a0:99:b6:0b:ea:2d:e6:75:c8:0a:
         a4:f3:be:45:4f:43:cf:f1:75:c2:bd:26:b7:1c:94:ff:ea:e6:
         d6:26:4c:67:3a:9a:9e:0c:d1:bf:69:f9:b1:9d:16:cd:26:b5:
         83:7b:ff:dd:2a:91:e6:40:36:4a:98:7b:44:c5:81:27:07:15:
         7c:7c:73:a7:ac:4c:75:c9:b1:29:e6:49:3d:2c:c0:84:b9:c2:
         30:0f:2f:47:1a:69:46:ab:62:15:31:ba:f6:28:15:53:d9:95:
         9a:1c:47:74:90:75:b6:d1:d1:9c:5d:c4:60:c1:75:ec:d5:4e:
         6d:22:f3:4e:39:fb:e0:b8:3b:0b:a1:25:5b:a1:99:ee:35:04:
         3b:13:19:49:9b:0d:f5:19:fd:62:94:79:81:4a:41:dc:bd:85:
         97:b7:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:54:11 2026 by rpki-client