Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/323830343a333866343a343030303a3a2f33342d3334203d3e20323636353134.roa
File:                     323830343a333866343a343030303a3a2f33342d3334203d3e20323636353134.roa (raw, json)
Hash identifier:          f0Ci/D0Jtyu18RVgcZ7SIkOzjThikC32rSuB/251rHA=
Subject key identifier:   6F:95:EE:95:52:05:27:87:51:2A:F6:67:AB:BD:F2:2E:87:2D:B8:68
Certificate issuer:       /CN=5DB65048062197DEFB6E6487EAB36BD76F794483
Certificate serial:       02742D91BDAD8257B0FF146CD9C8E045A2B7EF80
Authority key identifier: 5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/323830343a333866343a343030303a3a2f33342d3334203d3e20323636353134.roa
Signing time:             Tue 01 Sep 2026 12:02:22 +0000
ROA not before:           Tue 01 Sep 2026 11:57:22 +0000
ROA not after:            Tue 31 Aug 2027 12:02:22 +0000
asID:                     266514
IP address blocks:        2804:38f4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 14:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:74:2d:91:bd:ad:82:57:b0:ff:14:6c:d9:c8:e0:45:a2:b7:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB65048062197DEFB6E6487EAB36BD76F794483
        Validity
            Not Before: Sep  1 11:57:22 2026 GMT
            Not After : Aug 31 12:02:22 2027 GMT
        Subject: CN=6F95EE9552052787512AF667ABBDF22E872DB868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:79:ca:21:99:fa:84:8d:33:d2:4d:5a:98:34:
                    41:4e:13:17:5a:a5:47:82:42:be:77:46:66:da:e3:
                    0b:47:88:12:a9:3d:85:e8:a7:32:fb:ea:65:78:fa:
                    45:0c:b3:c6:62:7f:a6:65:7a:9d:03:4a:8f:71:c5:
                    56:5f:8c:2e:eb:37:63:38:d3:da:30:fb:42:0d:c6:
                    c7:56:08:1f:42:bb:33:2d:aa:10:6a:c5:a0:68:72:
                    30:1d:04:f2:fb:70:e5:d3:ac:01:78:7f:04:6e:1d:
                    ed:fe:3a:7e:01:60:44:a8:ae:cd:d0:d1:bb:12:35:
                    fd:89:59:33:04:4e:30:8f:71:11:1a:1b:36:21:eb:
                    d9:58:86:d5:f7:a5:d1:b6:1b:2b:8f:41:75:fd:22:
                    54:2c:0e:c2:ad:ce:bf:3b:13:96:a5:1f:c0:53:a0:
                    32:38:85:b6:e0:f4:c8:50:52:19:51:41:b2:eb:15:
                    16:e2:86:b9:f0:d7:68:fc:0b:e0:c6:88:a5:36:4e:
                    d6:52:57:18:67:de:91:44:46:b0:4f:33:a7:7b:14:
                    70:41:fc:38:f5:b7:d3:d0:fb:bb:1c:90:32:a0:7a:
                    a7:53:b1:0b:f3:dd:05:7d:69:2a:73:ed:e2:86:5c:
                    04:f1:95:e8:f9:79:92:9a:1a:d4:7d:42:01:ef:37:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:95:EE:95:52:05:27:87:51:2A:F6:67:AB:BD:F2:2E:87:2D:B8:68
            X509v3 Authority Key Identifier:
                keyid:5D:B6:50:48:06:21:97:DE:FB:6E:64:87:EA:B3:6B:D7:6F:79:44:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/5DB65048062197DEFB6E6487EAB36BD76F794483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB65048062197DEFB6E6487EAB36BD76F794483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/323830343a333866343a343030303a3a2f33342d3334203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:f9:d1:47:c8:8d:b8:10:52:0a:e3:55:20:19:3b:cb:e2:
         49:66:0b:cd:af:dc:a3:6d:b4:1d:d7:29:e4:98:fa:9e:a8:a3:
         8b:e8:80:84:c0:dc:92:b8:ee:1c:df:fc:50:a1:65:cd:b3:3b:
         5a:1a:df:b0:03:d4:00:e5:0b:98:cb:46:96:f6:3f:f5:b1:e2:
         71:a6:38:b0:9e:f9:7f:f8:d1:91:07:a3:f2:de:77:fc:04:9f:
         58:3f:1c:14:b3:1b:b5:59:95:8c:fa:d5:22:86:a8:30:6f:75:
         6e:99:32:5d:4b:a1:f3:b6:c5:d5:92:5e:ed:18:c9:c0:86:db:
         1a:16:c8:e6:e7:dd:74:30:4f:59:ac:c2:55:84:f4:a1:5f:73:
         2b:60:98:8d:0b:e1:00:a6:d2:24:f1:87:35:fa:06:c1:14:de:
         da:21:e7:70:bf:fd:f6:80:e0:1b:b4:a4:5a:25:ca:30:c6:9f:
         c8:4b:47:94:ad:19:59:cf:d0:27:ff:9d:b4:f6:91:21:38:13:
         c3:23:8e:7c:86:fc:cc:51:15:28:88:db:78:79:59:db:51:35:
         69:83:a2:cb:44:ec:18:a3:ec:64:fb:60:e9:bf:f5:c0:39:cd:
         75:5e:c2:a6:fc:0a:e2:fd:97:ea:08:59:84:8f:3f:39:ae:a6:
         2a:d6:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:41:56 2026 by rpki-client