Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3438203d3e20323638303834.roa
File:                     323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (raw, json)
Hash identifier:          29Rj6/B3l6HbsNsu1uogSgIPkOV8cAcfG5IYR+douqk=
Subject key identifier:   73:94:69:29:88:6B:75:B8:A6:CD:2C:A5:49:55:78:1B:D3:0C:AC:9F
Certificate issuer:       /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial:       0FBF79E03509453C68709FF4FCB57BACD5468DF4
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3438203d3e20323638303834.roa
Signing time:             Thu 22 Oct 2026 20:24:57 +0000
ROA not before:           Thu 22 Oct 2026 20:19:57 +0000
ROA not after:            Thu 21 Oct 2027 20:24:57 +0000
asID:                     268084
IP address blocks:        2804:57c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
                          rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 06:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bf:79:e0:35:09:45:3c:68:70:9f:f4:fc:b5:7b:ac:d5:46:8d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
        Validity
            Not Before: Oct 22 20:19:57 2026 GMT
            Not After : Oct 21 20:24:57 2027 GMT
        Subject: CN=73946929886B75B8A6CD2CA54955781BD30CAC9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:da:21:c9:b3:b2:5f:58:03:be:2d:6b:46:
                    c8:72:1d:8a:6f:72:b2:50:21:86:8b:f8:e2:69:85:
                    1d:22:ab:bf:2e:81:c7:5c:3a:6b:5f:8f:bb:c5:f9:
                    77:f7:7c:65:ff:33:65:1f:09:f2:5d:3c:4c:d6:26:
                    15:c6:4a:4e:ff:f5:9f:6b:c3:b2:7a:b8:c1:db:2b:
                    cf:88:ab:d9:0a:2d:47:da:9f:49:fd:8c:1d:27:2c:
                    64:2e:de:56:5d:39:86:98:c6:4e:64:9d:14:73:52:
                    60:55:2e:54:5d:87:61:83:5c:f0:d2:ca:2b:00:de:
                    c0:dd:ec:fd:2a:b0:e2:38:b1:45:de:7a:42:45:51:
                    6c:39:a0:ee:fe:5a:a0:c6:3e:80:d4:57:06:95:ad:
                    5f:fa:51:cb:18:a5:c5:32:d6:61:47:ca:e7:8e:27:
                    fb:6d:e3:c2:72:65:30:7b:55:f5:11:79:eb:88:15:
                    4c:f0:78:f5:39:1e:59:79:24:f6:ea:d1:fe:ba:ec:
                    1e:de:00:36:49:15:35:85:95:e1:a9:32:7d:0e:31:
                    d2:ee:d7:15:98:39:32:9f:65:e1:c6:24:d7:ee:09:
                    6e:04:8c:70:ea:24:13:50:0a:2a:fb:89:28:b1:21:
                    2a:7b:b8:8c:a5:d0:17:fa:9c:ca:25:89:82:e8:f5:
                    00:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:94:69:29:88:6B:75:B8:A6:CD:2C:A5:49:55:78:1B:D3:0C:AC:9F
            X509v3 Authority Key Identifier:
                keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3438203d3e20323638303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:9b:c1:d8:61:a6:5d:15:60:30:7f:5c:47:af:83:aa:8c:37:
         8d:01:75:1c:2f:40:0d:87:b3:d3:89:74:ad:3a:20:2d:2f:ff:
         48:b3:88:ee:8c:b4:7a:95:58:00:6c:5c:1e:71:ed:27:b0:03:
         d1:29:be:de:85:e7:7e:2b:e8:32:7e:6b:74:67:37:47:c6:28:
         e5:36:9a:02:26:0e:18:01:1f:09:c0:3a:13:f0:17:e2:a2:98:
         c0:84:44:66:27:ec:8b:65:3a:82:63:3c:9a:b2:c8:9e:5a:f3:
         5d:0e:f6:79:e9:7d:c7:3f:1c:cc:60:72:46:6c:d2:9a:1c:eb:
         59:0f:de:5d:d0:31:a5:53:02:d8:9d:5d:d1:9f:ef:1f:47:86:
         c5:b9:02:0a:b8:fb:19:6a:78:cf:43:72:72:c7:45:6b:dd:a3:
         14:3e:c3:d3:66:91:2c:f0:9f:41:aa:16:95:70:1d:87:fb:0a:
         57:8b:ed:d4:99:dc:44:94:5e:88:c0:a6:1a:79:2c:14:6b:81:
         8f:c8:11:2b:4c:d2:09:f1:de:1f:ff:55:3f:05:e2:03:48:82:
         a9:93:e8:e7:dd:29:dc:7c:cc:4f:9b:e1:8e:62:61:32:16:58:
         ef:a6:17:a8:c5:de:59:4e:24:b4:99:e4:7e:c2:1d:db:04:ab:
         f1:bb:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:48:19 2026 by rpki-client