Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/323830343a333961633a3a2f33332d3333203d3e20323636303433.roa
File:                     323830343a333961633a3a2f33332d3333203d3e20323636303433.roa (raw, json)
Hash identifier:          EQ03qLwt2JlKvx+pIgBx0kms2vmuAxh0IGOLkHMeG9g=
Subject key identifier:   C6:5E:8F:EE:F2:AF:77:17:52:B2:1A:58:5F:0F:5C:C4:0E:F4:31:A5
Certificate issuer:       /CN=858791F3197B2403C043B8C781E30FFF6C1C8C19
Certificate serial:       1C3F9D8C0170CDDF00FB182F44808BE81634738C
Authority key identifier: 85:87:91:F3:19:7B:24:03:C0:43:B8:C7:81:E3:0F:FF:6C:1C:8C:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/323830343a333961633a3a2f33332d3333203d3e20323636303433.roa
Signing time:             Fri 18 Sep 2026 13:09:56 +0000
ROA not before:           Fri 18 Sep 2026 13:04:56 +0000
ROA not after:            Fri 17 Sep 2027 13:09:56 +0000
asID:                     266043
IP address blocks:        2804:39ac::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.crl
                          rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3f:9d:8c:01:70:cd:df:00:fb:18:2f:44:80:8b:e8:16:34:73:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858791F3197B2403C043B8C781E30FFF6C1C8C19
        Validity
            Not Before: Sep 18 13:04:56 2026 GMT
            Not After : Sep 17 13:09:56 2027 GMT
        Subject: CN=C65E8FEEF2AF771752B21A585F0F5CC40EF431A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:7d:50:fd:ad:80:55:4b:b1:fa:67:15:ab:
                    c2:c3:55:0e:2b:4b:a4:be:35:d1:7c:f3:3f:2b:32:
                    15:91:9e:c1:c5:72:11:1b:6f:b9:be:15:f2:6b:3b:
                    55:17:4c:d0:9f:57:59:29:b9:48:53:f9:69:19:2a:
                    e2:e0:c8:d9:ab:8f:cf:23:47:d5:ae:12:80:8b:49:
                    3a:2f:ae:71:d7:ec:a6:ea:cf:38:80:c3:f6:83:06:
                    63:1d:70:1f:2a:69:ff:8d:bb:fa:1a:fc:3c:2c:b6:
                    fe:fe:aa:3b:ef:c9:e4:71:26:e2:2e:cb:81:74:f1:
                    44:4c:3f:52:88:07:6b:4c:f9:fa:cb:3b:d7:b9:0d:
                    03:cf:01:c0:ef:ed:3f:7e:fd:2b:d6:c8:e0:d5:82:
                    ed:dd:d0:d5:76:17:6e:8d:1b:41:7c:f7:ed:bc:2a:
                    bd:e8:65:36:1c:28:c9:c4:4b:86:3b:f7:a2:6e:6d:
                    43:ab:f5:91:74:b5:1b:38:16:e0:e9:eb:54:35:de:
                    20:e4:f7:7b:6b:b9:88:34:4e:fc:09:4b:39:c9:d1:
                    f2:d8:40:2a:7a:39:84:b1:71:0e:5d:ce:30:af:2b:
                    48:74:86:4c:bb:f4:33:0e:e4:a9:fd:27:21:cf:a8:
                    1c:de:c1:71:42:db:23:30:78:52:08:6b:ab:15:c4:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:8F:EE:F2:AF:77:17:52:B2:1A:58:5F:0F:5C:C4:0E:F4:31:A5
            X509v3 Authority Key Identifier:
                keyid:85:87:91:F3:19:7B:24:03:C0:43:B8:C7:81:E3:0F:FF:6C:1C:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/323830343a333961633a3a2f33332d3333203d3e20323636303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39ac::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:98:20:c5:94:c8:39:f1:85:a6:e0:91:08:9e:3c:65:23:
         4c:59:5b:9b:7e:08:35:c9:a3:d6:f3:f7:75:a1:37:03:61:63:
         7c:aa:9d:56:5b:f2:b0:f4:24:9e:16:70:68:92:40:8f:69:6d:
         23:aa:19:95:fa:15:d1:dc:ef:86:1a:03:51:bb:82:11:03:32:
         e7:1c:45:a3:64:00:cc:c4:49:87:7b:7b:f8:c2:4b:de:01:40:
         f0:af:e6:7b:d7:80:59:db:db:d3:1a:73:ee:27:a6:29:3d:20:
         eb:5b:ab:ad:85:5a:bf:6f:69:4d:2c:1f:ba:84:de:2f:9c:68:
         3a:13:1b:9c:1c:7f:04:df:21:e4:35:fe:8c:7b:35:ce:58:d3:
         e6:6e:79:06:88:ed:b6:62:37:7b:60:cc:83:62:5a:cb:5c:8b:
         e4:d0:27:01:78:87:ba:1c:60:3e:f1:91:c1:b8:9b:2c:e4:6a:
         09:18:51:20:97:dd:cd:9f:fb:8f:fe:27:af:71:63:1b:2b:04:
         46:62:ea:7f:ff:77:15:2a:2d:e8:38:0c:26:ed:9f:ed:0a:a1:
         5b:d3:1f:56:3e:bc:a0:5d:96:3f:16:96:e2:f5:30:82:0d:ce:
         77:a1:81:eb:81:b2:f0:7a:ce:6a:50:f7:a4:82:dc:1d:9f:00:
         3c:06:f1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:06:59 2026 by rpki-client