Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a633030303a3a2f33362d3336203d3e20323735383038.roa
File:                     323830343a393964383a633030303a3a2f33362d3336203d3e20323735383038.roa (raw, json)
Hash identifier:          BM8pBtuaVhd+WajyJp+QkwREVU1GPOVsSxqUnaPLJ48=
Subject key identifier:   33:F9:86:6F:29:96:EF:8D:85:16:65:9E:89:4D:B8:39:DD:06:1C:18
Certificate issuer:       /CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
Certificate serial:       2BD9FC4AB75EA2B668712BC252564D67CD495A8B
Authority key identifier: B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a633030303a3a2f33362d3336203d3e20323735383038.roa
Signing time:             Fri 02 Oct 2026 12:49:59 +0000
ROA not before:           Fri 02 Oct 2026 12:44:59 +0000
ROA not after:            Fri 01 Oct 2027 12:49:59 +0000
asID:                     275808
IP address blocks:        2804:99d8:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl
                          rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 07:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d9:fc:4a:b7:5e:a2:b6:68:71:2b:c2:52:56:4d:67:cd:49:5a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
        Validity
            Not Before: Oct  2 12:44:59 2026 GMT
            Not After : Oct  1 12:49:59 2027 GMT
        Subject: CN=33F9866F2996EF8D8516659E894DB839DD061C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:2f:28:b5:b8:dd:11:aa:5a:49:7e:43:21:
                    c9:af:64:3c:77:70:a2:5f:04:c5:1b:40:58:28:f2:
                    f7:59:f4:16:75:ea:14:45:3f:43:3a:e4:bc:89:2f:
                    59:41:a7:f8:f6:6c:03:b1:fd:a6:62:1b:92:1b:04:
                    5e:98:81:93:60:c8:8c:ab:6c:49:e2:1c:ab:3a:cf:
                    d9:0e:25:21:b2:3d:0b:0d:e7:f2:58:6d:84:ed:1f:
                    02:2f:ee:1c:95:e8:92:1f:23:39:c2:78:c2:f8:f6:
                    78:9a:65:31:9d:2e:eb:d6:24:8d:ab:58:7b:08:1e:
                    9e:46:b3:48:19:00:3c:f8:84:3a:ef:80:1f:e5:ed:
                    46:be:91:80:29:d3:07:e3:4a:4d:62:d9:11:50:8b:
                    b2:39:e0:a5:f0:b5:42:30:94:5e:8f:4f:96:10:69:
                    2a:33:ad:f3:d9:48:71:0c:3d:f0:4a:9f:7f:7b:fb:
                    0f:43:e8:a1:9f:b8:e2:3b:b3:01:f2:d9:f5:92:12:
                    d5:9f:ce:ff:49:17:47:a6:f7:73:dc:e0:af:11:d3:
                    2e:fd:ec:4a:2d:ad:5a:78:c6:85:a3:95:21:7b:bd:
                    3a:18:c2:b5:3d:a4:24:04:a4:19:9e:1b:36:07:bf:
                    8d:6d:a4:e4:6b:f0:a8:5e:11:89:3c:cb:e3:18:cf:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F9:86:6F:29:96:EF:8D:85:16:65:9E:89:4D:B8:39:DD:06:1C:18
            X509v3 Authority Key Identifier:
                keyid:B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a633030303a3a2f33362d3336203d3e20323735383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:99d8:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:31:b0:22:e1:d6:f0:52:fa:2c:6b:14:06:f5:dd:77:11:
         27:4f:56:25:8e:08:88:9a:ab:b0:09:63:5a:6f:f2:e2:40:5d:
         2e:59:6c:86:95:68:de:a8:b2:7e:9c:34:92:e1:d1:27:b4:e0:
         99:0c:6a:d1:a3:10:ed:bb:2f:5f:e3:c6:4b:3f:56:0a:ae:ae:
         cd:c2:2d:83:66:2e:ee:99:2c:a8:76:a7:64:e4:af:a5:20:cf:
         57:ae:2f:87:30:48:a6:a6:ff:af:4d:53:6a:c2:b0:03:f3:6b:
         9c:d1:7c:1a:89:2a:a3:36:d2:93:b9:2b:e6:5d:86:41:f1:e1:
         ed:1e:c4:27:a1:6f:36:93:b9:17:1e:11:cd:a9:09:87:8f:62:
         21:02:41:52:5d:4c:51:85:40:9b:80:34:88:2b:ca:19:3f:86:
         60:c3:d6:9b:e5:6d:47:27:3f:dc:1d:5b:42:01:56:18:e2:04:
         05:e5:dc:19:c6:47:87:b3:72:a3:f5:f4:23:78:4d:08:3f:66:
         58:af:aa:d9:cc:46:1c:29:41:65:50:ba:75:35:8f:04:3b:f0:
         55:6d:cb:36:af:6b:54:9d:ee:d6:1e:39:78:67:a7:75:ec:23:
         ec:c3:d4:4b:a1:58:a2:9c:4e:7e:0c:f1:71:2c:0b:cb:79:d2:
         80:1a:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:34:56 2026 by rpki-client