Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/323830343a393534383a3a2f33322d3438203d3e20323734353131.roa
File:                     323830343a393534383a3a2f33322d3438203d3e20323734353131.roa (raw, json)
Hash identifier:          Rr8m/dUJzjQjHTRlAkas/R85OQEWMedkYpNAlNqKVhk=
Subject key identifier:   BD:E4:E4:4E:04:86:CC:66:ED:CA:AC:45:18:68:A9:F5:BF:3F:52:15
Certificate issuer:       /CN=5EB4E88A8CC75B0EA0B831A2FBCE9810D2CC2C06
Certificate serial:       3687681C0E278BE6B31DD99A455BD46984D9EE70
Authority key identifier: 5E:B4:E8:8A:8C:C7:5B:0E:A0:B8:31:A2:FB:CE:98:10:D2:CC:2C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EB4E88A8CC75B0EA0B831A2FBCE9810D2CC2C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/323830343a393534383a3a2f33322d3438203d3e20323734353131.roa
Signing time:             Tue 11 Aug 2026 14:04:31 +0000
ROA not before:           Tue 11 Aug 2026 13:59:31 +0000
ROA not after:            Tue 10 Aug 2027 14:04:31 +0000
asID:                     274511
IP address blocks:        2804:9548::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/5EB4E88A8CC75B0EA0B831A2FBCE9810D2CC2C06.crl
                          rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/5EB4E88A8CC75B0EA0B831A2FBCE9810D2CC2C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EB4E88A8CC75B0EA0B831A2FBCE9810D2CC2C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:87:68:1c:0e:27:8b:e6:b3:1d:d9:9a:45:5b:d4:69:84:d9:ee:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB4E88A8CC75B0EA0B831A2FBCE9810D2CC2C06
        Validity
            Not Before: Aug 11 13:59:31 2026 GMT
            Not After : Aug 10 14:04:31 2027 GMT
        Subject: CN=BDE4E44E0486CC66EDCAAC451868A9F5BF3F5215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:eb:70:e2:dc:f9:d2:28:b6:3a:a8:af:97:
                    41:b5:70:5a:de:45:2c:ff:7d:ea:d1:32:43:b0:6c:
                    e1:26:08:cd:7e:f5:e8:aa:f3:0d:e3:27:ed:bd:89:
                    3e:da:5b:c6:dc:f2:67:1f:e0:12:63:92:bd:3d:dc:
                    42:46:a9:62:9a:a8:37:21:41:d1:da:1b:41:67:e8:
                    4a:04:d5:8a:eb:35:24:5f:8f:e4:8d:8c:e0:29:94:
                    2a:6b:93:44:7b:f3:30:c2:f0:cf:17:38:0d:85:92:
                    97:9f:cd:a9:84:ea:74:59:e3:ad:07:34:bf:4a:b8:
                    a4:30:e5:9f:78:b6:78:ba:50:1e:4a:1f:6c:18:21:
                    91:b7:59:f0:e2:cf:d5:91:26:d6:e5:6f:e0:85:15:
                    fd:42:37:33:c1:3f:57:47:d0:15:39:12:a4:55:0b:
                    18:bf:66:26:a2:2d:f1:9d:79:91:31:ce:5e:4b:68:
                    49:31:39:07:b4:0c:31:c9:42:1b:77:5c:79:c4:15:
                    c3:cd:87:a9:4c:af:83:81:8a:3b:89:25:ca:c2:01:
                    0d:1d:21:1d:c2:5c:fb:0a:4f:13:a4:e2:4d:87:f5:
                    9a:07:c0:1a:1d:a9:3c:fe:f8:29:05:aa:af:15:51:
                    2e:b4:9f:6a:3c:06:11:08:76:d9:10:c4:a6:a6:17:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E4:E4:4E:04:86:CC:66:ED:CA:AC:45:18:68:A9:F5:BF:3F:52:15
            X509v3 Authority Key Identifier:
                keyid:5E:B4:E8:8A:8C:C7:5B:0E:A0:B8:31:A2:FB:CE:98:10:D2:CC:2C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/5EB4E88A8CC75B0EA0B831A2FBCE9810D2CC2C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EB4E88A8CC75B0EA0B831A2FBCE9810D2CC2C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/323830343a393534383a3a2f33322d3438203d3e20323734353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9548::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:69:20:95:df:b1:f3:ea:6e:bb:7b:9c:c0:42:e8:fa:a3:3b:
         55:25:84:4e:4f:d8:f3:da:35:42:41:1a:64:5f:39:64:a0:22:
         b3:3d:cc:9f:2a:bd:f3:85:c1:0c:50:e9:e4:0c:e2:a2:ad:9b:
         3c:51:61:6f:62:b3:af:d6:68:85:40:00:b4:7d:4f:d4:de:a4:
         97:48:cc:4b:64:e9:81:b6:98:26:18:ef:5f:53:e5:48:54:a9:
         84:53:d1:65:b0:61:37:a7:a1:f0:4b:1a:13:cd:49:e6:33:4e:
         6d:95:56:44:69:e8:60:3e:29:3a:47:56:ea:d2:06:00:9f:aa:
         b6:50:33:a0:32:90:79:7f:51:c5:a3:c5:23:7f:fb:5b:89:b7:
         d7:9e:8d:15:58:4c:4f:82:b0:93:5d:04:1d:4a:97:04:63:12:
         9e:44:88:20:3c:d5:cd:e0:73:81:f6:73:4f:05:76:18:72:48:
         4f:77:d6:90:95:e0:4a:b4:a0:2d:93:76:13:a2:0f:a5:d1:50:
         a9:07:fd:e1:2a:f0:46:8b:15:d9:1b:9c:c5:c4:0e:88:09:32:
         96:8e:c9:76:96:f2:a9:41:59:fd:fc:3f:d3:41:40:5d:64:43:
         3b:5d:3d:fc:bf:0f:38:45:99:08:4f:95:a0:bb:fb:46:72:b3:
         24:8a:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:11:29 2026 by rpki-client