Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a343030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a343030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          WpflGEfIZB0/LVc2gv7ln/x6KbAFA3DGcvIi9ahWFa0=
Subject key identifier:   CC:EB:12:01:48:81:9C:2F:37:15:3E:1E:49:71:70:35:16:9B:EF:8A
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       3BCEB89A4856DE076163DC44A024631BD79F3143
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a343030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 01 Oct 2026 12:16:27 +0000
ROA not before:           Thu 01 Oct 2026 12:11:27 +0000
ROA not after:            Thu 30 Sep 2027 12:16:27 +0000
asID:                     263357
IP address blocks:        2804:14e4:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ce:b8:9a:48:56:de:07:61:63:dc:44:a0:24:63:1b:d7:9f:31:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct  1 12:11:27 2026 GMT
            Not After : Sep 30 12:16:27 2027 GMT
        Subject: CN=CCEB120148819C2F37153E1E49717035169BEF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:8e:5b:4c:71:66:51:8a:b6:b6:d0:4b:d9:
                    cf:74:d4:d5:64:1b:fb:4d:8d:e3:d5:18:20:60:d2:
                    b0:36:00:3c:a2:52:c2:bc:fe:41:38:94:ed:3d:91:
                    b7:4e:f1:15:fc:0d:b0:b5:a0:81:f9:26:4e:5d:70:
                    36:78:0e:2c:69:0d:d9:67:52:49:a7:95:e1:25:8d:
                    58:28:39:ca:5e:e0:b7:79:e8:c2:80:24:90:8b:1d:
                    35:2c:53:4a:ea:28:36:ef:1a:05:89:d0:66:a8:4c:
                    17:fe:ff:31:a4:0e:ec:ea:6a:7a:fa:58:50:81:1b:
                    ab:93:f7:b9:7a:30:eb:57:bb:0f:bf:91:a6:2e:c3:
                    ce:a7:09:a2:8d:51:08:70:f9:b3:f7:af:e7:dc:7c:
                    13:cd:07:ec:c2:44:ef:82:bb:3c:c6:aa:89:fc:da:
                    4b:23:98:29:67:4b:e1:4c:de:a8:0b:a4:60:d9:a4:
                    ea:68:55:a0:a5:50:69:87:eb:84:5f:eb:d7:e3:b4:
                    8a:e7:c0:3e:ff:44:06:e1:1b:c0:44:d6:fc:1d:7a:
                    90:1c:3c:4d:bf:9b:38:f2:df:0a:37:b4:c8:32:00:
                    1a:cc:5d:a0:4e:bb:54:1b:0b:b3:eb:43:59:bb:e4:
                    d2:2d:bc:50:24:e1:c4:40:d5:9e:fb:eb:80:e1:06:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EB:12:01:48:81:9C:2F:37:15:3E:1E:49:71:70:35:16:9B:EF:8A
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a343030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:33:2c:49:b6:5e:10:4d:3f:eb:8a:d0:a1:7d:ef:73:77:c0:
         10:34:b1:97:5a:5a:d1:c9:d3:3b:ab:8a:df:32:3a:a4:ab:64:
         22:50:5c:87:cd:d8:76:29:a9:0d:51:13:dd:e7:59:a6:77:fd:
         47:86:7b:42:ad:96:0b:a7:84:ef:15:42:cd:63:dc:92:7f:13:
         17:d2:ca:9b:18:28:93:28:6b:2a:ec:72:63:7d:9d:af:30:e7:
         75:28:32:9b:af:79:77:c0:72:a1:61:ac:b8:a2:a3:5a:46:06:
         bc:2d:d8:ff:f4:78:c7:7a:d9:d2:54:46:c4:81:eb:d1:fc:3a:
         8e:2e:2f:16:fb:c7:29:ec:de:57:5b:13:25:37:e0:c9:ae:8e:
         c9:1d:62:ee:79:0a:65:16:02:0d:c6:49:3a:2f:22:1b:6e:a1:
         e9:49:c9:53:78:aa:b9:bf:3e:70:48:c5:92:4e:56:ec:02:b9:
         ce:95:25:67:6b:57:6c:fe:6d:9f:93:ac:94:f6:40:32:7e:08:
         de:25:6e:67:69:9e:46:9f:89:7e:e7:ae:19:6a:58:84:8d:14:
         d0:72:88:55:4c:e2:85:6a:a5:50:bb:48:6a:1d:2e:06:9d:09:
         71:56:b5:ea:9e:3e:66:da:c1:57:d9:1c:56:65:d8:cb:31:d5:
         bd:72:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:12:07 2026 by rpki-client