Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a343030303a3a2f33342d3334203d3e20323634353030.roa
File:                     323830343a323039383a343030303a3a2f33342d3334203d3e20323634353030.roa (raw, json)
Hash identifier:          z55dtPZbEsR5L/FnT0/PfEvwm870CzxPZjZXnJFZwho=
Subject key identifier:   E5:5C:40:BF:98:39:99:7B:42:D6:6B:95:14:05:5E:CF:54:93:03:F5
Certificate issuer:       /CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
Certificate serial:       075F2C7A8AA691771F03328BD580D9AB23C1AA05
Authority key identifier: 5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a343030303a3a2f33342d3334203d3e20323634353030.roa
Signing time:             Wed 02 Sep 2026 13:25:33 +0000
ROA not before:           Wed 02 Sep 2026 13:20:33 +0000
ROA not after:            Wed 01 Sep 2027 13:25:33 +0000
asID:                     264500
IP address blocks:        2804:2098:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl
                          rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 09:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5f:2c:7a:8a:a6:91:77:1f:03:32:8b:d5:80:d9:ab:23:c1:aa:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
        Validity
            Not Before: Sep  2 13:20:33 2026 GMT
            Not After : Sep  1 13:25:33 2027 GMT
        Subject: CN=E55C40BF9839997B42D66B9514055ECF549303F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:95:f1:02:7b:53:7b:1e:dc:12:3d:3b:fc:
                    cf:60:70:1e:fe:7f:18:80:dd:80:7a:88:85:01:db:
                    4a:a8:94:49:4f:ba:56:a6:3e:bf:eb:4f:d1:4d:af:
                    ea:18:5c:b3:af:4c:be:54:aa:5c:66:1a:19:ff:2f:
                    15:79:35:56:eb:2a:38:f6:5d:a9:9b:57:37:2a:dd:
                    0a:32:05:81:b2:fb:96:04:ae:9c:98:55:f8:ba:14:
                    ad:d2:0b:ee:42:2d:6f:cf:10:8e:32:32:22:ca:88:
                    6c:9f:e8:42:5c:7f:dc:7e:16:7f:20:ce:c0:20:0c:
                    98:3d:6f:7b:b3:89:f8:06:33:97:ba:bb:ff:ec:8d:
                    17:82:18:d0:d1:59:00:2f:aa:92:c2:e3:23:61:10:
                    94:24:ab:0a:0a:62:88:19:39:1d:2e:a6:a9:04:52:
                    6a:0c:94:1f:a4:d6:4d:cc:e4:12:46:a7:2b:4b:04:
                    ff:94:98:30:66:b9:2d:1f:67:e8:32:ee:8c:46:78:
                    67:3d:df:32:8f:9e:cc:95:34:a9:69:79:fd:f2:da:
                    83:d0:2f:8b:ac:bc:3e:6b:d5:2b:64:57:43:be:5e:
                    91:81:7f:b2:b5:6d:d3:bb:cb:08:26:9d:e8:7d:90:
                    53:2f:c1:cb:13:05:84:f2:53:d3:4f:25:40:33:95:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5C:40:BF:98:39:99:7B:42:D6:6B:95:14:05:5E:CF:54:93:03:F5
            X509v3 Authority Key Identifier:
                keyid:5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a343030303a3a2f33342d3334203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:39:1f:80:3c:8e:52:83:16:3d:35:5b:f5:45:9e:3c:c7:76:
         7a:35:31:83:92:c7:85:84:06:9f:11:ce:07:28:7b:dd:41:1e:
         a4:f3:fd:25:c3:ab:eb:a3:a1:20:4c:ca:e1:5d:2e:b3:95:51:
         ad:68:91:80:6a:cb:a2:a7:3a:6c:4e:b5:72:ee:b7:ce:ac:5a:
         6c:d1:d7:4e:c9:e4:b3:7e:34:1a:e4:7b:76:95:ac:67:dc:ec:
         70:6e:1b:f9:97:88:80:51:5f:f5:38:ac:fb:b5:cf:27:c2:80:
         b8:63:5f:e0:a7:5f:dc:23:01:12:3c:43:f9:61:6b:d1:48:0b:
         b5:1f:ab:3b:b8:33:28:4c:ae:7f:4c:6f:7c:67:b9:01:06:1d:
         b1:f9:0d:93:e2:08:4b:41:3c:d2:62:a5:fe:f9:52:37:19:87:
         f0:d9:b6:e2:dd:e0:8e:eb:b3:13:a4:4d:60:39:ed:ba:33:5d:
         5e:7f:46:ce:c7:b7:d9:1e:54:88:c3:6a:ce:c5:d3:2e:48:b7:
         a7:15:9d:ab:18:bf:f6:07:4a:21:04:13:12:cd:c8:f3:12:48:
         a7:20:c6:0c:05:06:f6:99:29:a5:3c:76:5a:60:9f:89:2d:42:
         5d:1f:3a:03:04:45:a7:aa:9f:d3:2b:f3:f9:ea:0d:6b:d2:e2:
         52:69:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:39:46 2026 by rpki-client