Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330333a3a2f34382d3438203d3e20323637343639.roa
File:                     323830343a343166383a663330333a3a2f34382d3438203d3e20323637343639.roa (raw, json)
Hash identifier:          +coy/IDlyH7y0plRLI9HkbmbcxwkyKKPpR7eSfYJDbo=
Subject key identifier:   D7:34:49:95:D8:EE:B4:9E:73:D0:A5:55:51:55:33:1F:24:B8:85:DB
Certificate issuer:       /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial:       0D2068D8E7C0336F900B251A779201F4D54B6614
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330333a3a2f34382d3438203d3e20323637343639.roa
Signing time:             Wed 07 Oct 2026 01:36:44 +0000
ROA not before:           Wed 07 Oct 2026 01:31:44 +0000
ROA not after:            Wed 06 Oct 2027 01:36:44 +0000
asID:                     267469
IP address blocks:        2804:41f8:f303::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:20:68:d8:e7:c0:33:6f:90:0b:25:1a:77:92:01:f4:d5:4b:66:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
        Validity
            Not Before: Oct  7 01:31:44 2026 GMT
            Not After : Oct  6 01:36:44 2027 GMT
        Subject: CN=D7344995D8EEB49E73D0A5555155331F24B885DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:f8:03:d9:c3:c4:e4:7f:57:cd:36:89:73:
                    32:62:94:5b:0c:b5:34:46:64:ad:f2:c1:72:9e:1b:
                    2f:82:33:1c:35:2d:7d:2e:6b:2e:26:31:ee:2c:a5:
                    17:ec:e5:bc:11:93:c4:f3:f6:f5:28:11:bb:58:d7:
                    c1:e2:44:9b:8c:c5:34:f9:6a:33:8a:69:78:74:65:
                    e5:e6:26:7e:8a:44:9d:6a:a6:82:95:60:4e:f5:3f:
                    9e:75:13:b2:f9:c5:20:72:de:c7:a4:f4:25:a0:b0:
                    04:95:57:18:2f:e9:ab:ab:ed:01:8f:d4:da:4d:d7:
                    4b:00:30:45:cd:cc:a9:05:11:d5:ec:9f:b1:04:61:
                    37:7a:84:f8:8d:f0:6d:7b:86:cb:53:60:8c:2d:cd:
                    86:c6:d0:f3:10:6c:a8:4e:b8:a9:23:0c:13:0d:a9:
                    f6:4d:9c:39:b3:d9:59:7c:46:a6:42:4a:99:fc:ed:
                    47:6c:89:ca:7e:34:cc:63:ec:b6:ba:92:f9:de:ca:
                    40:a6:d0:d2:79:d7:dd:42:d7:73:93:96:d7:ea:91:
                    60:ee:d3:61:85:5b:76:51:6b:4f:74:4a:b4:58:4c:
                    05:6f:a5:1d:3c:67:a6:45:b5:3e:fa:09:42:b1:d0:
                    38:83:19:6c:6d:25:7a:c7:66:16:17:7b:23:3f:f2:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:49:95:D8:EE:B4:9E:73:D0:A5:55:51:55:33:1F:24:B8:85:DB
            X509v3 Authority Key Identifier:
                keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330333a3a2f34382d3438203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41f8:f303::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:83:44:be:f9:63:25:95:7b:f8:27:7d:fd:41:25:c1:ea:e4:
         25:b1:e1:58:09:66:2f:d0:b2:dc:05:05:b4:81:51:d8:bd:fa:
         ff:38:8c:6d:7c:77:5b:60:7e:32:8e:05:fc:34:61:3d:c7:14:
         e1:8a:1f:a7:14:46:61:48:9f:39:4d:12:94:b7:30:67:23:ec:
         48:d3:ea:35:d2:03:08:57:e0:79:de:ae:be:b9:c8:f7:8c:6b:
         79:3c:ab:11:f3:27:ee:78:0d:3c:1a:56:ce:47:29:2e:28:8c:
         9f:13:36:54:b8:01:ad:fe:07:6a:b9:6a:33:fc:fc:6c:53:47:
         14:1a:41:fa:cf:9a:12:5f:af:0d:36:dd:9f:d5:4f:a7:08:c6:
         d6:eb:85:c5:6f:69:5d:c6:84:ca:8f:4f:6f:2b:a4:03:bf:37:
         a5:2a:1c:42:90:9d:12:b0:f2:da:f5:7a:34:61:3a:d5:05:8b:
         fd:60:6a:a2:09:0f:f6:26:4d:f6:52:1b:4b:4d:d7:36:4d:dc:
         30:57:28:e1:23:29:95:2a:91:68:af:97:78:95:bb:8f:47:a1:
         bf:80:f1:c1:90:62:be:a8:45:7f:37:e6:c8:ac:a3:6e:60:14:
         99:01:ca:41:f5:5a:6a:66:52:25:89:52:72:b1:a0:26:a7:a6:
         c6:71:6b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:03:07 2026 by rpki-client