Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/323830343a363863383a3a2f33322d3438203d3e20323639373135.roa
File:                     323830343a363863383a3a2f33322d3438203d3e20323639373135.roa (raw, json)
Hash identifier:          Zp9IpgDLvQaIvnA7aL9eG/DM14W1BkWv0QQhxbVbRVY=
Subject key identifier:   1B:B4:36:A5:F7:B4:E7:3C:0B:C8:A8:F8:5D:F5:4C:3C:1F:D4:9D:C6
Certificate issuer:       /CN=522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5
Certificate serial:       234DCD3E275A0A41E655F88ACA6C2EF0B85621D4
Authority key identifier: 52:2B:B6:EA:E8:DB:57:CF:E8:0C:2B:5C:E4:1D:68:10:33:44:C3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/323830343a363863383a3a2f33322d3438203d3e20323639373135.roa
Signing time:             Mon 31 Aug 2026 16:45:23 +0000
ROA not before:           Mon 31 Aug 2026 16:40:23 +0000
ROA not after:            Mon 30 Aug 2027 16:45:23 +0000
asID:                     269715
IP address blocks:        2804:68c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.crl
                          rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 20:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4d:cd:3e:27:5a:0a:41:e6:55:f8:8a:ca:6c:2e:f0:b8:56:21:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5
        Validity
            Not Before: Aug 31 16:40:23 2026 GMT
            Not After : Aug 30 16:45:23 2027 GMT
        Subject: CN=1BB436A5F7B4E73C0BC8A8F85DF54C3C1FD49DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:19:c5:bf:37:be:20:dc:e9:1d:7e:6a:b0:
                    e8:01:7e:f5:ff:86:b4:da:00:2d:b4:86:59:ef:57:
                    cc:8c:45:91:e8:2e:c7:6c:e9:8d:d5:16:2a:10:f1:
                    0a:ad:af:51:15:c3:0a:f6:98:b6:e6:5f:b3:b8:15:
                    4c:7c:c8:1f:0d:4a:e8:eb:b8:51:4c:88:0a:ee:95:
                    11:23:c7:2d:06:1b:ae:21:bc:0a:41:fe:2a:b3:d3:
                    a6:62:a4:35:6b:c5:9a:09:aa:99:b6:72:8a:30:e6:
                    c9:ca:26:8a:f1:c1:ca:14:20:da:fe:06:a0:a7:c8:
                    0f:dc:d7:37:d3:d8:d3:8a:8c:62:49:02:fa:5e:68:
                    7a:33:03:51:3d:13:20:58:10:e5:c8:6a:a2:61:ed:
                    d1:5c:0e:36:09:1a:53:18:c2:43:92:7e:9f:32:56:
                    52:6a:55:8d:91:7d:1d:66:c3:ac:d0:bf:d1:67:66:
                    7a:8f:fd:48:4e:94:5e:23:17:d9:84:99:2d:4c:7a:
                    c7:06:83:27:b7:ba:1c:cb:d5:60:d0:46:4b:44:4d:
                    6a:e9:f0:ef:2a:61:e4:11:ab:99:33:ce:33:e9:5a:
                    f4:1e:4f:75:44:3a:0d:79:19:67:ac:9b:ea:28:b7:
                    ff:49:33:dd:ff:a5:f2:91:c4:76:03:23:2d:54:8b:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B4:36:A5:F7:B4:E7:3C:0B:C8:A8:F8:5D:F5:4C:3C:1F:D4:9D:C6
            X509v3 Authority Key Identifier:
                keyid:52:2B:B6:EA:E8:DB:57:CF:E8:0C:2B:5C:E4:1D:68:10:33:44:C3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/323830343a363863383a3a2f33322d3438203d3e20323639373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:21:c1:e8:69:ef:0f:a7:53:a3:9b:90:e9:7b:a6:25:66:12:
         0a:57:5f:17:94:14:be:24:76:e7:89:8b:de:04:e2:ac:b6:7e:
         79:47:80:a1:1a:ee:dc:70:a7:01:00:a5:c6:76:07:5f:7a:2c:
         f3:76:69:83:f1:57:09:42:d6:dd:6a:50:a8:8a:ba:54:f9:3f:
         2d:78:14:e7:42:d6:f7:fc:b0:3f:ae:9c:9a:3b:83:bc:1b:aa:
         95:1a:fa:86:3b:87:43:2d:d2:66:91:fc:c4:db:00:98:d8:70:
         52:6e:81:68:b9:bc:bb:6b:dc:0a:16:84:a4:90:f4:ed:c0:b4:
         6a:31:e5:a9:c3:35:90:f4:ad:0c:9e:90:cb:f5:3e:8b:f9:e9:
         20:e1:58:5c:c6:42:f0:66:94:dc:88:38:23:a5:ac:39:13:14:
         e2:a5:17:b0:eb:4b:dc:c3:d6:f7:2d:82:47:03:36:e6:fd:b0:
         7d:d9:72:97:94:d9:54:51:69:b0:f8:29:8d:91:35:34:bc:52:
         a6:64:07:7a:e7:14:d0:0c:7a:5f:a8:c3:24:e0:c0:6f:88:18:
         31:a3:cc:ee:7e:53:42:5b:b1:12:73:48:84:ee:27:53:c8:af:
         45:fa:93:93:23:57:a7:de:5a:3d:bb:e0:39:6c:18:58:df:5f:
         04:40:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:49:08 2026 by rpki-client