Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a633031323a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633031323a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          X3kLYhmvI+oAYeRoEQOpiLXTfbInYssEiaqR6wIlRxM=
Subject key identifier:   18:35:79:33:93:C2:1E:06:AE:F3:68:30:DD:5A:A2:C6:4E:97:A9:81
Certificate issuer:       /CN=827D965704E253482E03B27A810CA99521D92AE0
Certificate serial:       7968FF986C98D0846DDC92D290761FD31B5C3D26
Authority key identifier: 82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a633031323a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Fri 28 Aug 2026 18:41:36 +0000
ROA not before:           Fri 28 Aug 2026 18:36:36 +0000
ROA not after:            Fri 27 Aug 2027 18:41:36 +0000
asID:                     264996
IP address blocks:        2804:3124:c012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 11:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:68:ff:98:6c:98:d0:84:6d:dc:92:d2:90:76:1f:d3:1b:5c:3d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827D965704E253482E03B27A810CA99521D92AE0
        Validity
            Not Before: Aug 28 18:36:36 2026 GMT
            Not After : Aug 27 18:41:36 2027 GMT
        Subject: CN=1835793393C21E06AEF36830DD5AA2C64E97A981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:3d:a0:f2:6c:05:08:d1:e5:e2:5f:c8:9e:
                    7d:2b:6f:ea:a3:69:3c:58:95:0c:b1:cd:c0:98:bd:
                    96:56:ab:6b:4a:db:fa:93:54:e8:98:a6:63:d6:26:
                    b1:cb:c0:a5:e9:c8:d0:66:cd:a3:9a:22:0f:de:91:
                    dd:1a:b3:aa:72:2e:dc:53:d8:25:0e:26:62:a4:c6:
                    11:7a:d1:e4:8e:37:3a:96:62:c5:64:f4:e4:0f:bf:
                    09:b4:36:ed:2f:80:98:e1:e6:ba:cb:36:10:ee:7f:
                    36:44:ca:86:b5:43:e1:8c:b0:c0:63:69:26:57:18:
                    12:4f:90:46:2e:39:ad:49:3c:4d:90:7d:5c:07:f0:
                    5f:a7:f6:b0:8f:20:3b:a1:19:57:6b:48:89:b5:14:
                    17:50:39:10:8e:f6:53:68:15:0b:1e:34:d5:9d:9b:
                    e6:1c:31:86:95:4c:91:23:d2:ef:1e:cc:b9:82:58:
                    2a:92:a4:6a:84:da:47:b8:77:26:52:ca:a6:c2:90:
                    7c:3d:c1:04:e7:ba:09:eb:3e:e8:4a:8c:b6:94:8e:
                    9d:64:c6:0d:cf:9e:b9:62:cd:08:94:2e:e6:72:be:
                    fb:61:c6:b3:11:49:08:ac:c9:66:e9:fa:65:92:4a:
                    a8:05:a0:92:e2:6b:6c:9f:ed:20:7a:b2:f6:db:d5:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:35:79:33:93:C2:1E:06:AE:F3:68:30:DD:5A:A2:C6:4E:97:A9:81
            X509v3 Authority Key Identifier:
                keyid:82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a633031323a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c012::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:22:95:8a:9f:ff:59:8c:a4:45:3d:27:bc:b8:d8:43:96:
         2d:6c:db:63:1f:3e:f5:4f:e4:f2:88:d1:d4:b5:a2:97:fa:44:
         84:81:ab:dc:4d:4a:6a:c5:a5:56:29:f4:e5:a1:b6:7f:71:2a:
         9b:66:4d:0b:13:37:a6:3e:c9:b4:ee:30:5a:4f:70:27:60:9c:
         d4:1a:71:18:f5:b3:e5:38:dd:00:ae:5e:ff:49:ce:0c:2b:4c:
         87:a4:e4:6c:43:57:92:d1:c1:cf:db:13:93:c2:f0:72:77:01:
         e8:cc:b1:f6:8d:71:86:f4:23:f8:9e:89:8d:a6:11:20:81:54:
         bf:1d:08:dc:e2:34:a0:e4:52:60:9a:ff:de:4a:14:a0:e8:1b:
         27:c9:61:64:21:5a:c2:a5:e0:d7:cb:8a:f5:31:a3:f6:78:09:
         c8:0a:ea:f2:76:5a:85:33:e5:af:79:23:91:40:bc:b2:65:7a:
         73:37:49:0f:a1:55:83:7b:af:7e:3b:d0:c5:b6:ab:39:47:5d:
         5e:2a:4c:03:7c:b8:9e:a5:bc:eb:19:bd:2e:b2:f3:a8:96:b9:
         6c:24:62:0c:e6:0c:6c:26:2f:71:1f:34:ae:43:50:9a:39:80:
         65:75:05:77:71:cf:d8:80:8f:54:2a:36:a9:3b:69:61:31:49:
         02:11:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:25:21 2026 by rpki-client