Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663333303a3a2f34342d3434203d3e20323637343639.roa
File:                     323830343a343166383a663333303a3a2f34342d3434203d3e20323637343639.roa (raw, json)
Hash identifier:          5nvIxsApuMawQ09GfBAEuf98HVvm3tGoqahoR4tAx5o=
Subject key identifier:   46:1A:62:BC:8B:D6:63:78:B5:18:27:AC:06:FE:F7:E2:79:63:66:27
Certificate issuer:       /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial:       72915CAE151FB52E530594307C6377096CD2FA50
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663333303a3a2f34342d3434203d3e20323637343639.roa
Signing time:             Wed 07 Oct 2026 01:36:43 +0000
ROA not before:           Wed 07 Oct 2026 01:31:43 +0000
ROA not after:            Wed 06 Oct 2027 01:36:43 +0000
asID:                     267469
IP address blocks:        2804:41f8:f330::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 02:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:91:5c:ae:15:1f:b5:2e:53:05:94:30:7c:63:77:09:6c:d2:fa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
        Validity
            Not Before: Oct  7 01:31:43 2026 GMT
            Not After : Oct  6 01:36:43 2027 GMT
        Subject: CN=461A62BC8BD66378B51827AC06FEF7E279636627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:57:62:37:3c:ff:b8:bb:aa:26:c2:5d:b9:
                    d8:15:3c:95:e9:7d:eb:28:86:14:31:17:f3:a0:2c:
                    eb:7a:aa:c7:a2:f0:e8:da:e4:7c:7c:00:6d:ab:ac:
                    5d:9e:d8:c3:42:07:79:c9:5c:ba:75:7c:21:ae:df:
                    6b:0b:2a:52:23:c6:c3:6f:90:da:77:84:67:5d:e9:
                    87:fe:1f:97:7c:97:37:98:8c:cf:b1:08:24:41:ee:
                    4f:a0:f3:34:ee:fe:01:af:0a:f7:61:66:92:00:70:
                    da:a3:5e:da:6d:84:4f:39:0b:05:11:ee:ba:b3:52:
                    73:e0:06:52:05:5d:b1:90:a9:a2:11:40:b4:70:fe:
                    5c:d7:e8:78:c8:a1:ef:1f:a2:23:cd:94:62:7e:b1:
                    45:92:d8:b2:97:3f:79:5d:f7:aa:a5:7a:93:a7:7e:
                    84:5e:4d:4d:fd:0e:02:7d:a4:01:61:55:4f:5f:c5:
                    ec:5a:42:f0:d5:96:77:d1:4d:62:5f:8b:0e:49:1e:
                    47:d4:e3:eb:dd:06:c4:49:07:f4:56:7d:b8:b0:42:
                    2b:d8:fd:5b:a4:e5:df:18:22:1a:55:06:18:e6:4e:
                    20:e3:7f:96:d9:a7:4f:93:6e:3a:22:c6:da:9d:b6:
                    a5:3b:df:16:40:4d:59:65:1f:cc:93:8b:be:13:65:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1A:62:BC:8B:D6:63:78:B5:18:27:AC:06:FE:F7:E2:79:63:66:27
            X509v3 Authority Key Identifier:
                keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663333303a3a2f34342d3434203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41f8:f330::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:a3:9b:b1:ce:76:31:0c:cb:a9:9c:42:a4:89:cd:fb:a0:
         89:a6:7e:e0:45:55:46:64:14:14:17:7f:5b:8b:b4:4c:10:2f:
         60:33:5a:a4:c3:18:7b:26:70:b5:9b:0a:66:e1:5b:85:40:86:
         02:db:a1:d4:e6:c1:cb:ed:94:9d:db:cc:ab:b8:75:81:c9:48:
         7a:1b:31:34:05:cd:e2:78:69:f4:ae:b8:a5:f1:70:3a:91:54:
         69:2f:5c:4e:73:83:50:c5:06:f4:64:90:0e:2c:17:ca:7a:15:
         03:fc:d4:94:95:b4:6c:06:88:00:1f:aa:cd:15:25:da:aa:dc:
         19:40:11:d1:84:ee:c6:a0:a4:40:a3:dd:f9:e6:b5:48:bc:53:
         f6:63:ec:ee:08:ca:a1:f2:35:1e:03:68:16:5d:0b:62:63:14:
         0e:af:eb:36:bf:94:64:77:20:2c:72:06:30:b9:9b:d2:63:b3:
         d4:5b:37:a7:1f:04:82:eb:96:97:81:27:cf:6f:83:82:4c:19:
         9d:a0:02:12:90:c4:0a:e1:fb:6c:1c:63:dd:20:30:0f:b7:3b:
         a8:a1:ac:46:14:a3:72:c8:cb:8d:6a:98:82:49:db:af:32:20:
         96:3d:0b:f3:99:94:f3:48:36:20:b0:26:ab:48:ee:f7:fa:46:
         ce:2e:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:52:32 2026 by rpki-client