Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a653130333a3a2f34382d3438203d3e20323633333439.roa
File:                     323830343a313463343a653130333a3a2f34382d3438203d3e20323633333439.roa (raw, json)
Hash identifier:          o9/6BDij8SEHSuYsbwhgiJPmZgJ+3bVhVTV16MExsOg=
Subject key identifier:   B1:17:33:3D:E4:24:47:5C:02:0E:64:BA:6E:BC:D3:BA:D7:FB:12:D5
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       5207ED6B468CE881C0B7BB8D4B749D1A6138A11E
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a653130333a3a2f34382d3438203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:14 +0000
ROA not before:           Wed 23 Sep 2026 01:00:14 +0000
ROA not after:            Wed 22 Sep 2027 01:05:14 +0000
asID:                     263349
IP address blocks:        2804:14c4:e103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:07:ed:6b:46:8c:e8:81:c0:b7:bb:8d:4b:74:9d:1a:61:38:a1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:14 2026 GMT
            Not After : Sep 22 01:05:14 2027 GMT
        Subject: CN=B117333DE424475C020E64BA6EBCD3BAD7FB12D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:14:38:71:86:c5:17:2d:77:9a:17:cc:91:
                    01:22:10:a5:a2:c8:06:77:ba:ba:1a:24:9f:30:9e:
                    4b:db:ae:b4:ed:1c:45:b1:69:83:e0:87:5e:df:91:
                    43:30:95:3d:5d:f4:85:b0:12:dd:08:73:77:f5:e7:
                    e9:8e:c8:98:44:fd:7f:0c:f1:b3:7e:a9:e5:7e:d1:
                    e9:cd:e9:cf:81:c7:e3:53:cd:72:34:ff:8f:59:64:
                    7e:b3:a2:ed:57:ff:95:ef:05:e4:23:b4:60:13:05:
                    55:13:3c:17:78:53:35:5d:c8:26:91:3c:f0:65:4f:
                    f6:16:c4:8b:63:6b:98:ab:c9:1a:ab:02:c8:d0:9d:
                    a2:29:74:f7:c5:45:a3:ac:cd:27:61:c4:4a:2f:be:
                    f0:e8:e9:5a:26:d1:90:de:47:f9:c2:fa:41:59:b8:
                    03:0b:99:93:e2:9f:49:63:af:9b:d8:e8:73:59:3f:
                    a6:4e:48:8f:d7:d1:47:f5:e9:28:50:92:89:b0:f0:
                    02:e5:bd:27:34:fd:bc:58:f2:ee:61:8e:09:8b:b1:
                    31:b8:b2:a6:77:18:5a:15:02:69:c2:db:2d:2e:ae:
                    c4:37:55:ed:24:04:83:91:76:dd:a8:5a:25:8f:eb:
                    00:68:4c:19:b2:95:8b:86:0e:ec:85:b1:fe:72:e2:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:17:33:3D:E4:24:47:5C:02:0E:64:BA:6E:BC:D3:BA:D7:FB:12:D5
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a653130333a3a2f34382d3438203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c4:e103::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:c2:d1:89:4f:7d:38:06:5e:f6:e6:c8:a5:9b:7c:ca:0a:
         46:f8:9d:6c:eb:6f:66:9e:36:6d:a2:6b:f3:59:15:d3:ab:5d:
         ab:be:a0:01:98:fc:a5:54:f0:1c:7e:8a:e7:f7:6f:6c:07:9b:
         eb:3f:37:74:89:67:cb:bc:fe:68:4a:3e:49:3d:29:fe:c3:f7:
         54:36:99:27:85:c5:23:e3:aa:dd:ed:b2:56:f5:49:8d:10:36:
         35:48:57:4f:ac:41:f6:9a:a8:f1:6f:55:94:49:00:55:38:38:
         dd:d1:e8:0f:a3:31:91:62:ca:c8:fa:60:92:42:51:ab:88:de:
         45:00:39:7b:e1:30:b0:4f:1c:66:1f:fa:50:8b:bb:91:36:6e:
         33:c4:f0:15:e3:e8:ea:df:e5:84:58:e8:8c:62:8a:44:16:5c:
         b7:a6:1f:b2:35:84:7f:e8:05:33:87:c5:4d:97:17:1c:77:b6:
         b4:c5:5d:18:49:b2:f9:c3:89:72:93:92:ec:a1:51:10:8f:08:
         d6:75:7e:96:de:36:97:f9:72:48:1e:49:a2:7b:ff:6a:29:f7:
         77:dd:0e:77:64:97:c1:c9:e3:68:49:6d:dd:e9:05:40:91:a7:
         c2:0b:80:00:0b:1e:4c:10:ed:81:f0:6e:87:dd:1b:d3:99:a5:
         32:44:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 22:05:45 2026 by rpki-client