Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CuHYyu8U1LNiDLQ2yf7RXovM7afa6nTGdNEG7xYVPnJ6/0/323830343a326263633a3a2f33322d3438203d3e20323635313736.roa
File:                     323830343a326263633a3a2f33322d3438203d3e20323635313736.roa (raw, json)
Hash identifier:          sK7M/v/lxYPfSHLdezvRWMQGYSRDgQeYoday9rshSxE=
Subject key identifier:   AA:0F:D1:80:03:C0:F9:34:C5:4C:A2:12:B1:29:A3:C6:DC:20:39:B4
Certificate issuer:       /CN=3568C0ECD5813A44FB2F14763011B2F2A2E33359
Certificate serial:       7BE70769973207E99392FA610FA3C1E5E31132D8
Authority key identifier: 35:68:C0:EC:D5:81:3A:44:FB:2F:14:76:30:11:B2:F2:A2:E3:33:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3568C0ECD5813A44FB2F14763011B2F2A2E33359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuHYyu8U1LNiDLQ2yf7RXovM7afa6nTGdNEG7xYVPnJ6/0/323830343a326263633a3a2f33322d3438203d3e20323635313736.roa
Signing time:             Mon 05 Oct 2026 21:14:11 +0000
ROA not before:           Mon 05 Oct 2026 21:09:11 +0000
ROA not after:            Mon 04 Oct 2027 21:14:11 +0000
asID:                     265176
IP address blocks:        2804:2bcc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuHYyu8U1LNiDLQ2yf7RXovM7afa6nTGdNEG7xYVPnJ6/0/3568C0ECD5813A44FB2F14763011B2F2A2E33359.crl
                          rsync://rpki-repo.registro.br/repo/CuHYyu8U1LNiDLQ2yf7RXovM7afa6nTGdNEG7xYVPnJ6/0/3568C0ECD5813A44FB2F14763011B2F2A2E33359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3568C0ECD5813A44FB2F14763011B2F2A2E33359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e7:07:69:97:32:07:e9:93:92:fa:61:0f:a3:c1:e5:e3:11:32:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3568C0ECD5813A44FB2F14763011B2F2A2E33359
        Validity
            Not Before: Oct  5 21:09:11 2026 GMT
            Not After : Oct  4 21:14:11 2027 GMT
        Subject: CN=AA0FD18003C0F934C54CA212B129A3C6DC2039B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6e:b6:03:f5:41:c1:d5:a6:07:1c:c8:0d:16:
                    2c:cc:83:a9:f5:05:f3:85:ba:1e:38:4e:68:4a:ba:
                    17:27:10:c7:c5:51:f8:de:52:0f:ca:51:17:ab:26:
                    d9:3a:b1:24:f8:bc:10:a3:78:3d:91:f7:05:40:b3:
                    d0:5d:b4:96:04:38:b7:79:b1:06:88:b1:7a:17:40:
                    cd:0f:41:f8:84:05:5e:b8:b4:04:11:0f:ed:34:a8:
                    c1:ac:c4:52:99:5c:40:0d:4b:0b:0a:9d:8b:98:bf:
                    f2:a0:fc:73:bd:d0:d4:f2:00:e1:e1:58:47:15:09:
                    a5:14:37:01:d5:a9:7c:26:1b:4a:eb:d0:f1:a8:54:
                    3b:b9:31:df:66:6d:c4:40:e6:2c:7b:c8:71:f0:2d:
                    ed:5b:17:3a:a7:8f:3f:3e:2d:14:a0:10:8b:0a:31:
                    e7:d1:ab:a7:0a:6e:85:89:cc:5b:5e:10:8e:85:3e:
                    cc:9e:e5:12:a2:42:3f:cb:84:15:e8:88:97:77:f1:
                    4c:9a:4b:a7:1a:2a:07:30:19:06:22:f1:69:a3:b3:
                    d2:d2:3a:57:93:f6:fc:38:de:44:08:00:53:95:15:
                    e6:05:18:f4:73:0c:54:63:a5:95:cf:9d:a0:76:10:
                    f2:91:98:61:16:8d:5c:61:4d:5d:94:be:19:c2:17:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:D1:80:03:C0:F9:34:C5:4C:A2:12:B1:29:A3:C6:DC:20:39:B4
            X509v3 Authority Key Identifier:
                keyid:35:68:C0:EC:D5:81:3A:44:FB:2F:14:76:30:11:B2:F2:A2:E3:33:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuHYyu8U1LNiDLQ2yf7RXovM7afa6nTGdNEG7xYVPnJ6/0/3568C0ECD5813A44FB2F14763011B2F2A2E33359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3568C0ECD5813A44FB2F14763011B2F2A2E33359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuHYyu8U1LNiDLQ2yf7RXovM7afa6nTGdNEG7xYVPnJ6/0/323830343a326263633a3a2f33322d3438203d3e20323635313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:56:76:1a:42:31:05:2c:25:cb:d4:b3:7f:de:66:7a:74:3d:
         d7:24:a2:ef:37:3c:89:a1:fd:ff:70:ba:7d:0a:c0:10:14:f2:
         bd:c7:77:bb:28:81:3d:bb:c2:6c:61:1e:fc:5f:b1:0d:9c:31:
         ce:43:f4:05:89:e1:30:f5:61:07:2c:a3:27:e7:b6:e7:b0:22:
         23:4e:e1:2e:00:b1:10:81:22:91:a8:bd:cd:6d:9f:f6:da:ec:
         21:b8:ef:fe:de:b6:9d:dc:ca:8a:c1:e1:04:e0:2c:34:b7:32:
         b0:b3:66:7d:06:68:6e:3c:76:bb:05:ab:e2:84:dc:81:0c:0e:
         76:97:1b:43:01:0e:af:a5:2b:9a:9b:fb:29:51:11:75:45:a2:
         49:a2:c1:11:76:2a:60:5f:b0:b3:01:af:df:18:7e:4e:7b:10:
         1d:7c:a9:77:f0:6b:43:4b:4e:1e:7c:24:96:a2:91:92:37:33:
         63:d5:2f:0f:7a:2c:98:78:ee:61:0f:d1:8d:2b:14:fc:57:c8:
         c0:d4:af:3f:bc:90:ec:60:a3:c1:8a:a1:2c:ad:20:b1:59:47:
         b5:94:c0:a5:88:3e:55:65:0d:4e:06:02:c5:d4:cc:6c:7e:29:
         51:03:65:a0:e1:56:26:8d:50:2e:25:01:7a:16:1d:58:13:32:
         26:79:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:36:53 2026 by rpki-client