Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a343030303a3a2f33342d3334203d3e20323632383735.roa
File:                     323830343a3939303a343030303a3a2f33342d3334203d3e20323632383735.roa (raw, json)
Hash identifier:          4S5CukRhyv3qmFo9M1rxeWvLKzISQi2VY0BJntg6zGY=
Subject key identifier:   87:B8:AB:A9:A8:CB:A1:42:83:11:4C:2D:34:55:D9:64:BE:05:93:39
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       6056D391808DFEF8E01CC1EEDA39DDC6ACE56F4B
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a343030303a3a2f33342d3334203d3e20323632383735.roa
Signing time:             Thu 05 Nov 2026 14:12:19 +0000
ROA not before:           Thu 05 Nov 2026 14:07:19 +0000
ROA not after:            Thu 04 Nov 2027 14:12:19 +0000
asID:                     262875
IP address blocks:        2804:990:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Nov 2026 16:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:56:d3:91:80:8d:fe:f8:e0:1c:c1:ee:da:39:dd:c6:ac:e5:6f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Nov  5 14:07:19 2026 GMT
            Not After : Nov  4 14:12:19 2027 GMT
        Subject: CN=87B8ABA9A8CBA14283114C2D3455D964BE059339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:c4:1f:e6:a3:58:8c:55:60:2f:eb:89:a6:
                    12:b8:41:68:6a:c0:60:5d:93:e6:d2:31:b7:34:7f:
                    9f:25:64:41:ea:ee:9e:df:f3:5c:f1:fa:7a:86:5f:
                    ac:d5:e2:64:64:50:c9:2e:af:53:cd:97:da:8f:d5:
                    68:11:45:b8:b5:ac:c7:da:7d:a5:88:db:0a:75:57:
                    ba:28:5f:c9:9b:8e:83:59:9e:82:80:6b:cc:da:fe:
                    71:93:f2:0b:dd:06:4f:20:b7:10:47:f8:4f:b2:78:
                    b2:31:bf:9f:2b:b0:a3:d8:46:0e:93:34:ea:30:1a:
                    ed:91:5f:8a:71:32:09:01:94:b9:35:bd:70:de:4c:
                    fa:69:7f:f9:5a:8a:28:d7:25:56:a3:ee:c6:68:d6:
                    68:71:58:28:09:8b:e8:9f:f6:82:a4:0e:f1:35:a7:
                    32:26:5b:a2:be:38:83:5f:c7:ec:cd:fd:40:78:30:
                    1a:80:3e:bb:a6:fa:32:17:9d:00:2c:71:77:4c:8c:
                    51:c3:47:ac:64:9f:e6:99:f7:2c:bf:fd:17:aa:81:
                    a8:df:e1:c0:b1:2d:b3:0b:73:45:30:b6:69:57:24:
                    8f:e8:c7:a6:8c:0b:41:01:6d:75:db:2c:29:71:b1:
                    59:a6:6e:27:2a:00:d2:bc:9a:48:fc:50:65:24:2e:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B8:AB:A9:A8:CB:A1:42:83:11:4C:2D:34:55:D9:64:BE:05:93:39
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a343030303a3a2f33342d3334203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:990:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:e0:43:e3:d6:98:21:be:14:ce:5d:b9:32:a8:a9:83:fc:
         48:9c:92:c0:2d:ff:65:c6:ef:af:36:62:d1:28:38:93:dd:2f:
         b3:53:4c:4c:71:9e:96:69:11:c3:0d:c0:fa:1c:aa:6a:09:97:
         54:e1:52:4d:47:5d:1a:c6:1b:02:2e:0c:d9:59:60:cf:37:9b:
         de:6a:cd:73:63:0f:da:40:49:27:3e:51:70:52:2e:96:33:4d:
         96:06:79:bb:ac:c8:5f:c2:50:22:fa:9f:17:36:1c:20:44:f3:
         0a:2c:5f:9f:ad:a2:82:ed:f2:23:cd:07:61:db:0b:8a:8b:85:
         5d:e9:9c:87:0a:61:b1:0a:b6:8f:89:05:bf:30:11:52:1e:03:
         62:ec:e4:7c:2f:95:9a:a5:31:4e:31:56:d7:89:b3:7d:6c:fd:
         58:a6:3d:40:45:4f:45:37:e9:3c:a1:af:55:ff:1a:9e:d4:a3:
         4a:01:c5:1a:7d:e7:a7:dd:28:a1:39:86:e4:4c:a4:97:b6:a5:
         33:7d:bc:66:fb:cc:5d:e3:49:2b:02:5d:4c:fb:1f:67:da:c5:
         7e:49:c8:60:92:08:d2:06:88:7f:6a:10:2e:54:d8:ae:86:10:
         38:fa:8b:b0:b1:81:53:01:e1:4c:ca:71:38:94:a1:52:32:63:
         24:bc:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:55:59 2026 by rpki-client