Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a3a2f33332d3333203d3e20323639363635.roa
File:                     323830343a363830343a3a2f33332d3333203d3e20323639363635.roa (raw, json)
Hash identifier:          X59gAjGS4wzDTph22hrdQNkqMBAAxZihiM5gOh7hF9s=
Subject key identifier:   C8:6F:BF:E4:8A:03:C4:44:C6:B9:E4:71:A9:01:5E:34:41:0D:23:7D
Certificate issuer:       /CN=054909F1A4E8496D227A81ECF4A9154F1D934057
Certificate serial:       66E35721CD6C1F28D8D0DD2E7F6596B49460450B
Authority key identifier: 05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a3a2f33332d3333203d3e20323639363635.roa
Signing time:             Thu 17 Sep 2026 18:37:33 +0000
ROA not before:           Thu 17 Sep 2026 18:32:33 +0000
ROA not after:            Thu 16 Sep 2027 18:37:33 +0000
asID:                     269665
IP address blocks:        2804:6804::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl
                          rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e3:57:21:cd:6c:1f:28:d8:d0:dd:2e:7f:65:96:b4:94:60:45:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054909F1A4E8496D227A81ECF4A9154F1D934057
        Validity
            Not Before: Sep 17 18:32:33 2026 GMT
            Not After : Sep 16 18:37:33 2027 GMT
        Subject: CN=C86FBFE48A03C444C6B9E471A9015E34410D237D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:0c:de:e8:ca:42:00:d2:9d:f1:0a:02:9c:
                    d2:90:0f:66:73:4c:4b:af:0b:59:1f:eb:46:c7:b3:
                    dc:6d:55:d0:4c:d6:77:bf:dc:b0:97:f6:e3:de:e4:
                    47:17:cd:71:f7:c8:05:a8:6a:18:c4:35:95:cb:0d:
                    da:6c:4f:7f:09:4f:7e:b9:e7:94:b4:fd:b4:38:a6:
                    b9:cb:22:6b:a4:81:ae:12:75:64:52:f4:50:4a:5c:
                    a2:4f:60:67:07:38:a8:0c:98:ed:b6:8b:ac:ec:b0:
                    b1:de:4f:69:0d:af:37:1a:c2:7c:65:81:78:f1:ed:
                    24:74:df:ef:50:2a:ec:3b:8a:7d:f9:e7:5f:37:a2:
                    f0:dc:44:40:2a:a0:d3:f8:69:69:b0:fb:f1:a3:cc:
                    bf:61:3d:54:eb:cf:8c:04:0d:5b:60:19:51:8d:ec:
                    db:c9:78:5a:f9:0c:b4:ef:d0:4d:7a:29:1b:a3:08:
                    56:26:9c:02:b2:76:ab:f9:36:e0:73:bd:ea:26:71:
                    ad:b5:9b:6d:55:ab:fd:dc:e5:6a:2d:a2:6a:9f:b8:
                    9b:e7:f0:8b:68:32:a3:89:26:74:35:6e:df:49:ac:
                    c6:da:db:f5:c6:b3:fe:2c:52:93:32:b8:aa:c5:4d:
                    f5:fb:32:9d:db:d2:06:41:71:b3:26:10:5d:9b:1a:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6F:BF:E4:8A:03:C4:44:C6:B9:E4:71:A9:01:5E:34:41:0D:23:7D
            X509v3 Authority Key Identifier:
                keyid:05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a3a2f33332d3333203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6804::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:b5:20:c2:6b:06:73:2f:5b:06:64:44:7c:be:7e:8b:14:42:
         e0:3f:a9:16:b9:87:50:07:a5:a6:9d:20:3d:a6:b8:f2:48:bd:
         91:3c:d2:01:6d:ca:b0:59:68:02:4f:62:6c:31:58:41:c3:5c:
         88:9e:91:e9:79:c7:93:e0:58:82:d7:f0:f5:0e:4f:ce:ff:fe:
         bf:6e:22:29:c2:f5:e4:77:06:cb:1c:bd:4f:b6:fc:0c:2f:a0:
         78:17:05:c8:f9:41:27:ef:40:fa:a0:c9:15:2d:14:08:e2:a0:
         99:86:19:20:00:88:1d:35:f7:0d:5a:11:be:13:09:1b:bc:75:
         b6:30:c2:6a:79:de:08:87:cb:71:9f:0a:29:f2:04:62:c2:4b:
         bd:41:30:80:44:aa:ec:28:5a:ea:57:6c:fa:c7:a3:05:71:8f:
         f8:02:d4:15:b9:c4:cc:9e:92:82:77:03:98:a9:43:67:e9:55:
         8d:75:1c:9f:67:c9:48:d8:7c:90:28:79:eb:e9:91:83:65:11:
         99:8e:0a:56:c7:bc:64:4d:1f:0d:60:1d:7c:8b:75:64:11:5f:
         4a:ad:66:a3:8c:83:78:3e:e5:e5:2c:a4:5f:95:ed:6d:46:dd:
         c6:94:07:67:a3:7d:7e:2b:79:a5:bf:88:e4:a8:0e:de:84:47:
         aa:14:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:36:43 2026 by rpki-client