Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a363030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a363030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          b71w/8Y8HWaBPrwNNaKir+Q7tmU5dkxx6PpDMYMmAV4=
Subject key identifier:   C1:46:7A:66:05:97:C1:AD:E1:35:58:71:E4:9F:6A:AC:B5:08:7D:9C
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       4C4F21DBB39909491CA7D789E878734832433B66
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a363030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 17 Sep 2026 17:00:35 +0000
ROA not before:           Thu 17 Sep 2026 16:55:35 +0000
ROA not after:            Thu 16 Sep 2027 17:00:35 +0000
asID:                     262585
IP address blocks:        2804:8f70:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 20:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4f:21:db:b3:99:09:49:1c:a7:d7:89:e8:78:73:48:32:43:3b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Sep 17 16:55:35 2026 GMT
            Not After : Sep 16 17:00:35 2027 GMT
        Subject: CN=C1467A660597C1ADE1355871E49F6AACB5087D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:cd:f2:ee:45:a5:e5:5b:61:bf:a4:9b:3b:
                    82:8e:45:86:34:2c:f5:b8:61:bc:12:e7:dc:67:47:
                    f2:72:9e:29:43:7f:2a:6a:fb:b6:5a:ce:0d:df:11:
                    e4:67:a9:82:d1:9c:b2:8a:4b:cf:19:6b:81:f9:53:
                    96:20:6a:c8:a0:5f:3b:94:e6:d5:d3:3c:c9:61:b0:
                    08:b5:f8:0a:bd:b9:70:1a:c5:f6:e7:a9:05:50:db:
                    91:7c:4a:6f:94:75:fe:dd:ff:82:cd:47:54:12:5f:
                    28:d4:5b:6f:db:74:7b:32:81:8c:02:0d:9d:ef:83:
                    6a:19:2a:62:eb:c2:43:da:90:07:c0:02:1c:bd:7e:
                    4f:cd:67:b4:5b:b4:66:48:3e:95:5e:4d:8c:e0:78:
                    87:69:e0:af:8b:9f:72:2f:82:67:3b:b3:f2:b5:aa:
                    61:2f:a9:bc:de:68:59:2b:58:93:59:fe:58:a5:10:
                    e5:8e:cb:6f:5c:c1:8e:0e:0a:e3:b8:b5:3e:fb:5c:
                    1f:d3:8e:ee:c7:e8:19:aa:05:66:84:a8:ae:db:d5:
                    94:22:2a:b1:3a:66:f0:72:b0:a5:c7:96:08:7e:d9:
                    84:ec:57:cf:95:cc:7d:ee:48:0a:61:b4:0d:8a:68:
                    d7:d0:54:ce:80:b9:95:1a:bf:56:e5:4d:42:27:82:
                    4b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:46:7A:66:05:97:C1:AD:E1:35:58:71:E4:9F:6A:AC:B5:08:7D:9C
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a363030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:64:7e:d3:d4:4e:b8:66:6e:4a:fa:f4:e0:8b:22:87:3c:47:
         e9:ac:55:e1:1c:60:b6:9f:a4:05:1f:98:f4:a6:e4:8f:58:88:
         ac:44:a2:b7:2d:95:d8:76:61:c6:b5:56:9e:0f:7d:27:16:84:
         d8:44:6d:49:b8:d3:93:82:5c:dc:a4:be:4a:f2:56:b7:77:97:
         71:3e:7e:0d:61:f7:63:e3:4d:30:eb:95:0e:8d:4e:c8:c6:1f:
         16:06:7d:6c:5d:3e:8a:03:1e:61:a3:cf:8c:f1:44:2e:b5:ce:
         98:5c:b9:9e:ad:0a:8a:32:2b:b8:f5:f1:dc:b9:03:3e:65:45:
         43:c4:32:b6:a5:29:1b:b6:d6:9e:49:01:91:ff:87:7c:30:05:
         32:7d:ff:df:77:2c:5e:61:43:44:73:ec:50:e9:e3:0d:47:47:
         ba:b6:c2:fb:ed:b4:89:0d:fe:cf:7d:14:f4:a5:52:56:fd:f8:
         ad:85:28:88:50:d5:71:9b:23:5c:a0:7b:5d:9b:db:1a:69:4d:
         4d:d1:90:fc:ca:14:85:82:8f:2c:26:55:37:1a:1d:a5:f3:00:
         c6:8c:94:23:5d:6a:6e:ca:3a:4f:62:ce:e1:68:00:24:92:a6:
         0d:02:7e:23:8b:fe:ab:7c:5c:22:39:08:66:08:7e:3b:f2:7a:
         e2:ce:6f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:47:10 2026 by rpki-client