Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33332d3333203d3e20323733353634.roa
File:                     323830343a393061303a3a2f33332d3333203d3e20323733353634.roa (raw, json)
Hash identifier:          mMHUJlmTjtpAmKfdAOBk/rxJU2WAid4A/HyxUUcQWI4=
Subject key identifier:   9B:31:18:3B:0A:0F:06:FC:01:C0:1E:4F:CF:64:48:36:5A:99:3D:BF
Certificate issuer:       /CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Certificate serial:       4441712679BDD56EAFCC576353FD693E2EBE6B45
Authority key identifier: B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33332d3333203d3e20323733353634.roa
Signing time:             Wed 30 Sep 2026 22:36:42 +0000
ROA not before:           Wed 30 Sep 2026 22:31:42 +0000
ROA not after:            Wed 29 Sep 2027 22:36:42 +0000
asID:                     273564
IP address blocks:        2804:90a0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
                          rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 06:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:41:71:26:79:bd:d5:6e:af:cc:57:63:53:fd:69:3e:2e:be:6b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
        Validity
            Not Before: Sep 30 22:31:42 2026 GMT
            Not After : Sep 29 22:36:42 2027 GMT
        Subject: CN=9B31183B0A0F06FC01C01E4FCF6448365A993DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:7d:b3:46:fb:e9:31:95:8f:d5:3b:71:be:
                    a7:2e:6a:4a:ec:55:18:5a:5c:ab:41:4e:ae:70:b8:
                    4b:ff:f8:f6:97:ab:a0:b0:3a:e3:02:65:bf:51:49:
                    72:26:a4:f9:c0:eb:7f:a8:ab:fb:18:2c:35:83:ea:
                    d6:0b:04:b8:4e:04:20:38:08:0f:63:84:af:91:26:
                    3f:05:62:97:e4:94:bb:50:36:e2:75:5d:83:9b:08:
                    73:62:90:ad:b8:b6:4c:b3:c2:48:f2:8b:4c:d2:ad:
                    82:f7:a9:a5:d2:99:be:20:04:aa:ad:8b:d2:3a:1e:
                    3e:63:ae:10:79:ae:df:7b:1a:3c:00:90:e7:72:24:
                    2b:d8:3c:a3:4f:dc:74:95:15:e9:3a:a9:49:d1:c0:
                    8f:0c:d9:71:bb:0f:78:2b:ba:f8:38:5d:0e:d4:0b:
                    6d:65:1a:3e:dc:30:0b:92:a1:0a:c1:d7:8c:c3:2a:
                    7d:dd:dd:cc:f4:a7:2f:de:9d:47:78:f4:7e:5d:0b:
                    ed:c7:35:a5:41:d3:70:b4:ce:46:d3:ff:56:03:8a:
                    ac:63:85:5b:e0:ea:5a:e1:65:0f:90:92:51:b0:fe:
                    d2:8f:fb:ca:c4:3d:5c:3a:ae:9c:2b:0b:dc:3d:4a:
                    8a:6d:03:a5:11:59:92:ff:4e:84:a6:c9:88:d8:fd:
                    fd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:31:18:3B:0A:0F:06:FC:01:C0:1E:4F:CF:64:48:36:5A:99:3D:BF
            X509v3 Authority Key Identifier:
                keyid:B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a3a2f33332d3333203d3e20323733353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:44:c2:f8:64:29:f4:91:0e:c5:76:c8:0e:72:56:32:cf:
         32:d8:8e:ad:27:e8:06:21:43:58:eb:08:f1:a0:49:3c:24:95:
         4f:33:f3:e4:4e:87:35:26:7c:09:dc:2d:a5:c1:37:88:cb:b6:
         53:41:cc:53:90:d3:21:91:b6:4e:01:60:dc:b6:30:66:0b:4e:
         26:7c:35:21:db:ad:f5:1b:aa:5f:e4:5b:20:da:c5:f9:f7:ed:
         7c:c5:03:7f:2e:fd:9a:7d:98:9e:40:aa:50:c8:ef:15:5b:30:
         99:53:81:3f:51:49:b0:be:99:d9:40:34:37:02:1c:1d:33:12:
         f1:95:45:14:5c:85:74:69:75:cb:70:e2:a4:9e:59:ac:29:32:
         26:ee:a8:b3:84:98:56:ee:f7:e2:cb:bc:db:76:2d:b6:9f:d3:
         e8:4e:dc:22:8c:58:a1:84:fb:3a:d7:11:b4:32:d7:8a:78:76:
         65:0b:8e:a5:8f:7a:02:11:7f:ba:fc:a4:29:f8:39:91:10:2e:
         91:7f:f8:e6:dc:33:db:70:e5:35:76:d5:a5:50:7d:b3:13:39:
         0f:4a:35:2f:1d:17:d6:56:2d:38:7f:c7:65:b4:46:a4:f3:3e:
         9f:31:8c:f5:0f:10:cc:75:7e:4d:d6:b0:ba:94:7b:c2:e4:9f:
         b8:47:10:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:24:38 2026 by rpki-client