Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a663030303a3a2f33362d3336203d3e20323735383038.roa
File:                     323830343a393964383a663030303a3a2f33362d3336203d3e20323735383038.roa (raw, json)
Hash identifier:          SVS2wT+XGBWzh560EwX5STBKxzRYtB2wAGRxrrmpDvs=
Subject key identifier:   62:2F:D1:24:1E:3E:E7:6B:22:DC:C5:2A:C0:71:BF:57:AB:4E:8D:53
Certificate issuer:       /CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
Certificate serial:       1E7AE7A3DD2EE348EBA77785F5B70B8A620E6173
Authority key identifier: B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a663030303a3a2f33362d3336203d3e20323735383038.roa
Signing time:             Fri 02 Oct 2026 12:50:44 +0000
ROA not before:           Fri 02 Oct 2026 12:45:44 +0000
ROA not after:            Fri 01 Oct 2027 12:50:44 +0000
asID:                     275808
IP address blocks:        2804:99d8:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl
                          rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7a:e7:a3:dd:2e:e3:48:eb:a7:77:85:f5:b7:0b:8a:62:0e:61:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
        Validity
            Not Before: Oct  2 12:45:44 2026 GMT
            Not After : Oct  1 12:50:44 2027 GMT
        Subject: CN=622FD1241E3EE76B22DCC52AC071BF57AB4E8D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:70:8f:7b:67:33:5c:7b:ed:89:8e:96:c3:
                    83:37:c0:9b:f5:5f:fb:47:50:da:66:a6:b4:d4:cd:
                    4b:a9:67:26:28:0d:0c:26:db:a1:71:81:36:b1:c0:
                    1e:9a:f0:b0:54:0a:85:f8:9a:48:43:fd:8d:a6:46:
                    1b:46:11:12:05:af:ee:1e:3e:8e:2b:3b:c7:c8:cf:
                    52:d8:c0:01:9c:11:3e:6c:9e:47:4e:57:47:55:9c:
                    cf:9e:ad:ff:8e:54:32:11:a5:78:31:3d:7d:13:9d:
                    db:47:98:9e:a8:85:9d:9c:bf:7a:5d:72:51:9e:3f:
                    fa:a9:5c:36:68:20:32:2b:55:40:9f:85:27:6f:c0:
                    72:50:56:22:40:f5:ee:e5:bd:e6:1f:35:81:01:22:
                    51:9a:18:ab:53:98:28:b7:0c:7e:4a:ee:e0:dd:b6:
                    6a:d7:38:1b:7d:b4:42:6b:12:06:2a:ef:59:4d:d9:
                    c3:97:11:a4:59:39:55:61:d8:e7:89:b0:c6:e9:1f:
                    03:91:e9:1e:fb:86:17:8c:e3:76:47:a1:58:23:84:
                    50:c6:12:69:4b:01:e4:6d:88:71:bc:3a:0a:45:55:
                    c6:62:36:61:a8:c5:6d:0c:e7:25:88:b6:46:d4:07:
                    1b:ff:47:76:9e:97:2d:c0:88:fd:f9:60:7b:47:24:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2F:D1:24:1E:3E:E7:6B:22:DC:C5:2A:C0:71:BF:57:AB:4E:8D:53
            X509v3 Authority Key Identifier:
                keyid:B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a663030303a3a2f33362d3336203d3e20323735383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:99d8:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:d3:65:f7:60:06:ec:d7:74:be:11:cb:c7:33:41:06:6f:
         1c:9e:fd:a0:6a:07:6f:6c:05:4c:a2:da:21:99:64:26:2b:69:
         9f:9e:03:ec:3a:19:c0:23:be:68:4a:94:7c:7a:9a:e9:47:7e:
         6f:3a:87:2b:04:b5:de:e6:7f:a5:a3:ba:0a:b4:ed:78:a1:bf:
         2c:50:7a:2c:84:8e:f2:30:39:06:fb:fb:e0:b0:0a:7d:cf:ef:
         7d:9d:2d:fb:e1:5f:2b:cc:33:f1:d8:0d:5c:48:8c:36:a0:7f:
         76:3a:ed:07:b6:f2:47:7a:e6:22:79:c6:c6:99:b8:b5:f6:3e:
         ed:f0:75:10:27:3a:f0:df:f7:f7:ea:76:13:71:cd:c4:a2:33:
         56:c5:e4:32:ea:fc:f4:b8:12:46:f9:1f:2a:44:b1:d3:57:62:
         e8:a5:ad:5d:2f:40:a4:a5:dc:75:0a:c8:43:c0:03:3c:c0:00:
         a6:04:7b:ee:22:fc:04:0f:49:4c:97:f0:21:1f:2e:12:09:2b:
         c7:9a:58:f7:fe:0e:07:4a:6f:d1:2a:07:ce:9a:f3:2c:6c:17:
         00:ba:f6:4a:e0:21:7a:78:1c:c5:6f:aa:09:24:8b:ff:c3:a0:
         44:d2:9a:63:f3:96:2f:dc:ca:1b:1f:15:ab:2d:75:11:eb:10:
         fe:8c:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:36:34 2026 by rpki-client