Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/323830343a383037303a3a2f33322d3336203d3e20323731373530.roa
File:                     323830343a383037303a3a2f33322d3336203d3e20323731373530.roa (raw, json)
Hash identifier:          uE+INDM279sn3/uPR95v4t8NpwPCx4bF+1WVGHjM3Ig=
Subject key identifier:   71:38:01:C7:59:21:A7:BA:7D:07:60:AA:CB:EC:47:E4:C2:44:2A:34
Certificate issuer:       /CN=05940783C565662DAC5FD5C45FDDAF43E3E62F83
Certificate serial:       707B9EAC16D966C0930459A5F880A617CB08D765
Authority key identifier: 05:94:07:83:C5:65:66:2D:AC:5F:D5:C4:5F:DD:AF:43:E3:E6:2F:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05940783C565662DAC5FD5C45FDDAF43E3E62F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/323830343a383037303a3a2f33322d3336203d3e20323731373530.roa
Signing time:             Tue 25 Aug 2026 12:31:54 +0000
ROA not before:           Tue 25 Aug 2026 12:26:54 +0000
ROA not after:            Tue 24 Aug 2027 12:31:54 +0000
asID:                     271750
IP address blocks:        2804:8070::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/05940783C565662DAC5FD5C45FDDAF43E3E62F83.crl
                          rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/05940783C565662DAC5FD5C45FDDAF43E3E62F83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05940783C565662DAC5FD5C45FDDAF43E3E62F83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 13:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7b:9e:ac:16:d9:66:c0:93:04:59:a5:f8:80:a6:17:cb:08:d7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05940783C565662DAC5FD5C45FDDAF43E3E62F83
        Validity
            Not Before: Aug 25 12:26:54 2026 GMT
            Not After : Aug 24 12:31:54 2027 GMT
        Subject: CN=713801C75921A7BA7D0760AACBEC47E4C2442A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:85:d7:65:f0:32:1c:82:54:a2:d6:8c:cf:
                    1d:2f:1f:88:6b:89:b2:c5:71:12:18:32:4c:1f:1a:
                    e4:f7:8a:e7:5f:58:e0:ec:60:30:da:20:5d:9b:68:
                    75:be:ce:42:95:27:39:46:3d:15:db:e7:53:3f:c4:
                    23:93:b4:00:fd:d8:c3:32:b1:93:aa:ca:e3:22:8b:
                    21:d1:15:17:58:aa:ff:bb:9a:11:bf:98:15:c0:ba:
                    e7:2c:ed:eb:e3:cd:cb:3b:27:4d:5c:df:a6:13:e0:
                    f0:70:8b:82:c4:f4:5e:4d:38:f5:71:bc:be:b8:dd:
                    ae:ba:94:e7:63:24:bc:5d:c0:40:37:6c:7a:d0:f9:
                    10:32:5d:93:16:7b:58:9b:a1:4d:7d:eb:7c:79:69:
                    d5:d0:2d:3e:e8:11:45:a2:99:99:f8:dc:a1:27:9d:
                    7f:18:ab:e6:ca:cc:19:e2:61:dc:f8:3c:b8:6c:9f:
                    67:c6:b0:6b:88:03:f6:6c:df:6f:4d:e4:72:94:05:
                    36:66:0a:81:12:26:72:2b:ef:8c:7f:69:33:53:04:
                    7e:72:c8:fa:bd:62:89:fe:92:40:ea:95:9c:71:0a:
                    a8:a2:9a:bc:6c:b2:06:4b:8e:a7:bd:d5:4e:f5:b0:
                    27:a0:e6:0a:77:6a:cc:e2:dc:39:27:cb:64:80:51:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:38:01:C7:59:21:A7:BA:7D:07:60:AA:CB:EC:47:E4:C2:44:2A:34
            X509v3 Authority Key Identifier:
                keyid:05:94:07:83:C5:65:66:2D:AC:5F:D5:C4:5F:DD:AF:43:E3:E6:2F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/05940783C565662DAC5FD5C45FDDAF43E3E62F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05940783C565662DAC5FD5C45FDDAF43E3E62F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/323830343a383037303a3a2f33322d3336203d3e20323731373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8070::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:83:bf:45:2c:59:dd:ea:92:b3:2d:bb:8c:54:4c:f0:ec:19:
         ba:4b:ad:d0:16:d5:d7:4d:3d:17:84:67:a2:67:f4:53:3c:e3:
         93:44:90:14:34:79:6e:0b:1b:e4:80:b6:69:fe:eb:da:1d:07:
         07:06:47:3e:7d:eb:4d:3d:d6:46:46:88:75:8f:19:41:93:bc:
         7f:ea:68:35:4c:d5:6e:07:75:7c:2e:cd:a0:64:2a:69:2e:b0:
         72:3d:0c:68:04:38:4a:76:bc:23:f2:19:80:2d:39:c3:fa:b2:
         32:0d:00:d4:f1:9b:98:44:c8:fd:61:50:76:2f:ac:1a:39:5c:
         ae:3f:51:15:d3:e7:36:55:97:01:4d:23:81:6e:b1:55:19:e8:
         68:80:45:a4:9a:e2:29:65:fe:22:72:99:e4:c2:df:03:5f:bb:
         04:55:71:30:45:39:a4:d7:50:8b:2e:0e:03:3b:81:af:8c:77:
         66:8f:71:d4:99:e2:a4:b3:ab:23:b2:c0:9f:27:19:b1:1f:ea:
         9c:40:52:89:a6:e3:d6:e2:30:cc:59:8f:f2:4e:6b:2a:13:29:
         55:1e:fc:7c:29:0d:f5:48:a6:54:67:14:13:4a:ff:6a:84:34:
         96:4f:2f:44:22:61:eb:6d:9f:17:96:e7:e8:4d:49:42:9f:bc:
         3e:c1:e6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:13:41 2026 by rpki-client