Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a643030303a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a643030303a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          1AccJNsb/kwdLY+pGbjWj+Y+bIjctzo8mgcChY4h5Y0=
Subject key identifier:   0B:DC:B8:D4:E2:8A:1D:EF:00:22:02:84:6F:59:A1:57:5D:29:97:06
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       441D4412A2A216A4C9B608D4B7245858C2079327
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a643030303a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 01 Oct 2026 12:16:32 +0000
ROA not before:           Thu 01 Oct 2026 12:11:32 +0000
ROA not after:            Thu 30 Sep 2027 12:16:32 +0000
asID:                     263357
IP address blocks:        2804:14e4:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1d:44:12:a2:a2:16:a4:c9:b6:08:d4:b7:24:58:58:c2:07:93:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct  1 12:11:32 2026 GMT
            Not After : Sep 30 12:16:32 2027 GMT
        Subject: CN=0BDCB8D4E28A1DEF002202846F59A1575D299706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:39:6e:6b:07:c9:ee:d2:70:92:80:d9:bd:
                    32:0d:76:3b:db:5f:36:5e:4e:3e:02:b2:73:8a:1b:
                    16:47:26:ef:49:6d:e8:b9:00:81:92:1b:d9:fa:63:
                    55:47:4e:76:b5:ce:65:5e:b2:a6:67:2c:76:30:8c:
                    55:5f:19:a6:b4:d3:02:95:70:73:90:4c:8f:66:2c:
                    21:48:ba:ca:f2:cc:27:6b:05:68:c6:cc:8c:19:b0:
                    80:e5:33:b2:f4:7b:48:73:69:79:7b:32:52:82:65:
                    63:47:9a:15:28:2c:07:0e:78:48:7c:69:27:3d:4a:
                    63:7e:c4:d5:0a:b7:34:15:f4:ad:b2:0e:c1:0d:ef:
                    b6:96:05:e1:cf:4f:17:d0:d2:07:aa:01:e2:85:a1:
                    2d:a3:2a:bd:db:bd:5a:54:ab:f0:5e:9f:3d:a1:2f:
                    fd:71:26:3c:bd:26:bd:87:71:32:b1:d4:95:46:7a:
                    2e:f7:14:c3:95:29:ef:5f:ed:34:95:99:75:cf:e9:
                    8f:06:3a:bd:dd:8d:60:58:54:8b:90:78:b7:e2:8d:
                    6e:93:58:a4:c0:43:72:e4:77:02:d4:ca:f9:08:60:
                    c4:f5:88:5e:ba:24:54:4d:9f:5b:71:76:87:73:f4:
                    e9:bc:23:b9:52:c9:42:da:e5:be:0a:b7:2b:70:35:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DC:B8:D4:E2:8A:1D:EF:00:22:02:84:6F:59:A1:57:5D:29:97:06
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a643030303a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:fe:ab:c0:59:21:8b:54:9f:52:40:3e:05:bc:f4:f4:f1:b8:
         34:e5:b0:67:26:51:c4:34:c4:aa:1b:4c:a6:84:b7:92:d2:2b:
         4d:f9:86:8f:7c:97:6e:07:c5:61:57:6f:f1:5f:fc:40:59:92:
         3f:b9:fc:26:c0:7b:99:b0:8a:05:c5:83:8b:e4:0d:bf:cd:8e:
         f0:25:eb:b2:c7:e3:fb:c8:32:51:91:65:03:7f:87:86:fd:c2:
         c4:0e:a7:80:60:92:b1:7e:76:6a:ad:3f:42:88:16:38:6d:07:
         4a:79:9e:f2:a6:5e:02:22:24:f9:16:89:a8:96:ca:87:5d:bb:
         98:98:69:6f:24:b0:d8:21:2e:d2:90:ec:b5:c6:64:bd:0b:38:
         db:5b:1c:69:eb:32:07:0f:c3:3d:64:2b:93:bf:0f:62:e9:a2:
         2f:6b:4b:42:16:45:1d:a4:9b:a3:a8:9e:b5:e8:2b:2b:d5:84:
         98:9a:40:8e:4a:1f:13:4f:7e:49:a9:6b:d5:21:6d:98:33:36:
         de:d8:6d:80:c2:df:bf:c4:ea:c7:1c:29:fe:b5:44:82:a4:0e:
         29:56:b3:a4:70:a3:89:a3:6c:5a:e2:53:de:f3:68:c1:37:40:
         1f:c1:85:42:d0:18:bd:5c:8a:3c:89:2a:ca:97:f1:be:0b:90:
         b7:ed:e9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:11:56 2026 by rpki-client