Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/323830343a313238303a3a2f33322d3332203d3e20323633343830.roa
File:                     323830343a313238303a3a2f33322d3332203d3e20323633343830.roa (raw, json)
Hash identifier:          A13tnsma7Mt9+baOWF4w+a7+ztokGeapdHD0AMvx5os=
Subject key identifier:   91:4E:2B:26:8C:92:FC:7F:10:07:97:1D:88:F9:45:B4:7E:FC:88:AE
Certificate issuer:       /CN=8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3
Certificate serial:       156BE81D6ECEC77994819018808068019FF0DE81
Authority key identifier: 84:79:CC:1B:EA:BB:7C:B5:EC:34:DF:DF:CB:0E:4F:73:AF:71:B0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/323830343a313238303a3a2f33322d3332203d3e20323633343830.roa
Signing time:             Thu 01 Oct 2026 21:26:44 +0000
ROA not before:           Thu 01 Oct 2026 21:21:44 +0000
ROA not after:            Thu 30 Sep 2027 21:26:44 +0000
asID:                     263480
IP address blocks:        2804:1280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.crl
                          rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 08:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6b:e8:1d:6e:ce:c7:79:94:81:90:18:80:80:68:01:9f:f0:de:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3
        Validity
            Not Before: Oct  1 21:21:44 2026 GMT
            Not After : Sep 30 21:26:44 2027 GMT
        Subject: CN=914E2B268C92FC7F1007971D88F945B47EFC88AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:0f:23:a4:50:80:2c:00:2a:d9:4c:1f:62:
                    87:5f:4b:ec:95:cc:21:01:d9:a0:b3:35:43:4b:28:
                    dd:ab:f4:2f:1f:a6:2e:2a:0f:9e:19:f8:e6:c9:6a:
                    40:c8:63:8c:33:17:53:28:ae:df:50:41:fa:71:3a:
                    ac:10:7d:bf:b8:38:ce:62:1e:07:28:55:72:3d:d3:
                    7b:fb:02:ae:56:c9:a2:2f:be:bb:fb:b7:ae:4e:cd:
                    26:7d:ca:38:71:67:18:42:87:62:3d:c0:5c:39:18:
                    3f:8b:2a:51:c3:53:51:b2:2a:40:a2:cb:49:9a:23:
                    f6:24:64:12:ee:af:04:c7:ae:3c:96:c2:b9:36:c1:
                    4d:45:75:f4:2d:dd:64:53:be:c3:a4:dd:e8:cb:92:
                    ca:ff:29:60:79:0b:4f:af:d1:07:0b:63:59:d6:a2:
                    3f:dd:2a:e9:7f:68:38:d8:db:fe:74:98:3d:be:12:
                    1f:2e:61:f6:b6:d5:9e:94:56:e3:00:09:ae:c9:e0:
                    b1:76:4e:01:28:90:ba:1e:02:8b:08:aa:3b:c9:25:
                    9d:e1:c7:cc:06:9c:92:31:13:3b:e0:71:77:ba:36:
                    ee:8f:9a:82:85:47:00:b4:b1:e8:7f:64:d9:28:b9:
                    32:a7:05:db:73:2b:8b:c1:e5:2c:01:a1:d9:1c:7a:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4E:2B:26:8C:92:FC:7F:10:07:97:1D:88:F9:45:B4:7E:FC:88:AE
            X509v3 Authority Key Identifier:
                keyid:84:79:CC:1B:EA:BB:7C:B5:EC:34:DF:DF:CB:0E:4F:73:AF:71:B0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/323830343a313238303a3a2f33322d3332203d3e20323633343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1280::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:d1:14:c3:99:8d:84:8f:31:24:71:dc:dd:63:0d:62:08:
         d9:13:e9:a9:bb:7a:98:0d:1b:d4:af:f1:3f:41:4b:88:8d:96:
         87:8c:42:93:7a:1b:c7:76:f3:e9:b0:97:d0:a1:5e:a4:81:a8:
         fd:35:be:44:24:2f:44:dc:05:b9:c8:5c:cc:26:94:79:13:df:
         53:87:6f:be:56:59:7f:b5:d8:35:be:63:b5:2a:2f:ad:46:ba:
         fc:d0:f9:ad:30:dc:8c:a2:15:8d:44:15:ed:6a:a3:55:8b:23:
         ba:f1:d0:b2:d7:36:14:fb:33:53:bf:fa:ad:97:04:dc:0d:5d:
         a2:61:ef:a8:36:c7:a2:ee:33:e7:4d:47:ff:da:f7:1a:f8:85:
         89:3c:69:0b:1a:9d:51:f4:74:bd:b7:80:00:87:94:cf:08:2c:
         27:57:23:5e:48:55:55:06:e0:1a:7d:3a:c9:1e:bd:47:af:4c:
         26:32:c0:a3:a9:dd:ce:b7:13:ff:41:25:6d:5a:34:d4:87:2a:
         60:0a:ad:e8:9f:7a:2b:5c:5e:09:14:e5:4a:33:4e:f9:11:a9:
         15:c4:b9:09:b8:32:0c:44:80:15:b5:cc:b9:d6:f4:85:4a:af:
         4f:85:39:e3:e8:dd:92:39:a8:9b:88:06:9d:82:c7:71:07:b7:
         62:a3:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 01:21:20 2026 by rpki-client