Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a363a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a363a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          410+9D0feHH5pqmsiPiKv39Xip6miTf71qnHHZ+ulsM=
Subject key identifier:   64:60:0B:45:AE:7A:9E:B7:89:72:79:E2:4D:91:D7:7E:06:89:BA:48
Certificate issuer:       /CN=827D965704E253482E03B27A810CA99521D92AE0
Certificate serial:       68DF5742F48EB8DEAFB957A1000707FC29F63FB6
Authority key identifier: 82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a363a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Fri 28 Aug 2026 18:30:58 +0000
ROA not before:           Fri 28 Aug 2026 18:25:58 +0000
ROA not after:            Fri 27 Aug 2027 18:30:58 +0000
asID:                     264996
IP address blocks:        2804:3124:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 11:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:df:57:42:f4:8e:b8:de:af:b9:57:a1:00:07:07:fc:29:f6:3f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827D965704E253482E03B27A810CA99521D92AE0
        Validity
            Not Before: Aug 28 18:25:58 2026 GMT
            Not After : Aug 27 18:30:58 2027 GMT
        Subject: CN=64600B45AE7A9EB7897279E24D91D77E0689BA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:38:b3:7d:85:42:3b:0a:5e:56:d4:3b:25:
                    8b:d0:52:52:db:c1:7e:dc:d1:ab:dd:2d:de:c1:b2:
                    c4:d9:74:d0:73:a5:2b:22:d0:5a:07:df:db:93:8c:
                    b2:98:59:a7:c5:c5:2c:27:05:c9:06:2d:5d:14:da:
                    f3:89:02:79:36:bf:94:0d:aa:05:9f:af:2e:9f:f7:
                    2e:fd:15:8a:a2:2d:67:b1:df:1c:76:c7:2e:d6:13:
                    94:f1:ad:97:5c:49:b6:08:a3:7e:1b:e5:44:d0:e8:
                    b6:7c:3d:5f:be:36:07:5a:7b:5c:97:c4:4f:e1:9d:
                    05:9b:de:73:73:a8:02:61:9b:7e:90:a7:31:f9:f6:
                    0d:95:70:e8:74:bd:9c:c1:51:f2:89:31:bb:d7:2b:
                    d0:93:cd:57:7b:0d:72:21:ee:34:03:27:6a:77:0f:
                    01:44:f8:b9:f3:8c:e7:6b:19:35:ac:eb:25:e2:a6:
                    06:bf:6d:1e:97:71:7a:1a:d9:da:d8:f4:aa:31:19:
                    df:c7:8b:b2:0c:80:ff:12:ac:33:d0:8a:bc:9b:89:
                    6e:3a:a5:cd:e1:5c:72:ba:af:a1:3c:f4:2a:e4:ea:
                    9e:7e:39:6b:31:2b:8d:74:6c:9c:0f:fa:d8:f5:07:
                    76:a3:1f:d6:a8:95:c7:aa:4c:89:63:27:d3:b8:ff:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:60:0B:45:AE:7A:9E:B7:89:72:79:E2:4D:91:D7:7E:06:89:BA:48
            X509v3 Authority Key Identifier:
                keyid:82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a363a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:a2:41:6c:8f:51:fe:f0:ee:1d:8b:65:a7:3d:fd:db:df:df:
         2d:6a:1a:93:e8:2b:a4:76:8f:13:95:4d:fd:35:83:8e:d6:38:
         05:8b:1c:51:1d:09:51:f1:09:cb:d2:93:40:30:52:3b:ff:23:
         91:eb:40:9a:f9:33:0e:0a:17:f0:94:a9:6b:3f:0e:1f:ac:0a:
         71:d4:a8:f5:03:88:21:57:43:7a:ab:0d:77:5b:b1:f3:fb:2e:
         9e:ab:8f:5d:d2:51:f4:8d:1e:af:aa:d5:59:52:6a:5f:0e:c7:
         bd:b6:fe:ba:f4:a9:26:64:8d:49:95:71:ef:b2:61:45:07:96:
         0f:b1:52:2e:de:89:f0:55:a2:23:35:f3:19:e3:56:cb:7b:2e:
         df:f0:58:60:50:f5:94:73:87:0b:3f:47:f8:27:91:55:2e:2c:
         00:41:dc:0c:41:59:bb:23:4b:ab:90:9b:ff:24:25:8a:fd:e4:
         1d:f5:eb:a2:06:d0:77:86:52:8c:5e:47:98:2b:c3:d0:af:bc:
         34:69:da:30:cc:27:49:53:54:77:a7:10:63:b7:ee:69:48:41:
         b8:2d:af:de:07:f9:be:f2:a8:0c:79:77:9b:2a:00:7d:1e:47:
         6e:fa:b0:29:81:4a:f8:5a:51:fc:9a:1a:0d:02:b9:03:4d:61:
         eb:ec:66:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:26 2026 by rpki-client