Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/323830343a346262383a3a2f33332d3333203d3e20323637333236.roa
File:                     323830343a346262383a3a2f33332d3333203d3e20323637333236.roa (raw, json)
Hash identifier:          WLHL7Cb6Jy4nRHRXnEvPEEYTTgid6z6Bn7CVIEmqoSg=
Subject key identifier:   0A:2F:92:2D:EE:18:61:DD:84:22:50:4C:D1:FA:BC:F5:6A:B9:C8:4D
Certificate issuer:       /CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
Certificate serial:       68A2E977B076B76D13CB2F96F0FF22710FCEE7C8
Authority key identifier: BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/323830343a346262383a3a2f33332d3333203d3e20323637333236.roa
Signing time:             Wed 30 Sep 2026 18:14:17 +0000
ROA not before:           Wed 30 Sep 2026 18:09:17 +0000
ROA not after:            Wed 29 Sep 2027 18:14:17 +0000
asID:                     267326
IP address blocks:        2804:4bb8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl
                          rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a2:e9:77:b0:76:b7:6d:13:cb:2f:96:f0:ff:22:71:0f:ce:e7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
        Validity
            Not Before: Sep 30 18:09:17 2026 GMT
            Not After : Sep 29 18:14:17 2027 GMT
        Subject: CN=0A2F922DEE1861DD8422504CD1FABCF56AB9C84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:43:b6:43:6d:c4:a8:ef:bf:6b:20:59:a6:
                    45:2e:3b:1d:b7:1e:2f:cd:33:b8:3e:36:76:fd:b1:
                    91:a7:59:14:0a:6b:b3:26:1b:73:e7:98:92:00:fa:
                    68:27:85:20:f2:56:c1:2c:7b:fd:3c:e8:aa:89:36:
                    c3:8c:dd:9e:4f:4b:b5:cd:75:9a:2e:54:e1:7e:44:
                    c7:aa:b7:ea:fb:45:ce:45:e2:7c:e1:d0:5f:41:db:
                    ee:6c:33:b5:38:77:89:09:a8:21:4e:e7:5a:58:fb:
                    69:57:fe:6c:7f:a1:5e:ee:63:1b:36:f7:32:33:67:
                    85:7d:ad:40:55:01:fd:d1:29:ab:22:ec:93:00:6b:
                    8a:3d:68:6c:2c:66:3c:07:99:bb:67:62:27:dd:c9:
                    b7:17:de:d0:0b:7b:c9:1b:7e:9a:13:e2:5d:54:d9:
                    45:e7:3a:b7:76:a4:df:84:57:91:14:21:b2:82:30:
                    0d:2b:8f:bf:8e:46:2f:be:e1:5d:e9:dd:49:e3:6d:
                    29:6f:65:33:dc:10:27:52:d3:ad:49:1c:a2:23:cf:
                    0b:8c:32:43:0c:f0:74:e4:42:df:bd:bd:d9:a3:4a:
                    bb:f6:ac:c8:19:f3:b5:19:fb:d5:b9:ca:ab:1d:2e:
                    33:6d:d7:3e:74:25:74:27:e8:20:71:cb:e7:ec:2e:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2F:92:2D:EE:18:61:DD:84:22:50:4C:D1:FA:BC:F5:6A:B9:C8:4D
            X509v3 Authority Key Identifier:
                keyid:BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/323830343a346262383a3a2f33332d3333203d3e20323637333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb8::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:9c:2c:3c:69:71:f0:e6:82:3c:05:8c:b9:87:48:bb:c3:72:
         f3:df:7d:14:bf:55:ec:72:ee:5d:94:cc:0e:c9:37:db:a6:4e:
         44:79:ad:92:06:91:2b:46:a6:8f:01:d1:b3:5b:17:16:95:28:
         f9:31:e6:3b:20:aa:bf:f1:56:3f:b2:c6:4b:71:08:71:ad:1f:
         13:d8:1d:97:1a:9e:13:6f:19:cd:5e:fe:72:48:13:74:b9:91:
         0b:84:7c:44:e4:b3:54:ad:91:99:92:fa:d9:26:08:5d:2d:ee:
         11:18:fa:62:42:b7:2d:2a:d1:52:c0:65:da:6f:9d:be:2e:23:
         c7:8d:55:e5:7e:e7:2f:9b:47:af:1a:71:9e:22:a5:9c:25:cd:
         fe:9d:08:c4:27:65:93:a5:02:15:41:9f:c7:7c:9b:63:85:d2:
         ac:78:30:98:51:09:a9:74:8b:36:b5:ac:d3:b6:9d:07:33:af:
         bb:a9:b7:5d:ce:d1:e6:44:6c:43:c5:0a:5c:9f:d0:da:41:b4:
         e8:e4:fc:7e:cf:78:ed:81:bf:cc:8f:34:70:26:fc:56:3b:05:
         f1:66:65:02:12:86:ae:5a:11:e8:31:f1:fe:9e:8b:60:ec:5d:
         e0:c4:fa:78:9b:67:35:2e:65:f4:55:52:df:97:46:9c:4a:4a:
         6f:b3:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:06:56 2026 by rpki-client