Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/323830343a323365383a3a2f33322d3634203d3e20323632383535.roa
File:                     323830343a323365383a3a2f33322d3634203d3e20323632383535.roa (raw, json)
Hash identifier:          aOBEuSIBkh9NXs+sJN+IAdZ0yfI6UnSrRLithadqWfI=
Subject key identifier:   08:88:A6:25:82:CA:0C:6F:95:EB:96:E4:D5:5E:DD:D4:45:59:CD:8A
Certificate issuer:       /CN=8FCABCE25DE1EB121A1B3A5A6AE89B904C7115EB
Certificate serial:       62A77DAE5B7DA43BA7A0398175D45366A6C3B905
Authority key identifier: 8F:CA:BC:E2:5D:E1:EB:12:1A:1B:3A:5A:6A:E8:9B:90:4C:71:15:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCABCE25DE1EB121A1B3A5A6AE89B904C7115EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/323830343a323365383a3a2f33322d3634203d3e20323632383535.roa
Signing time:             Mon 21 Sep 2026 11:26:45 +0000
ROA not before:           Mon 21 Sep 2026 11:21:45 +0000
ROA not after:            Mon 20 Sep 2027 11:26:45 +0000
asID:                     262855
IP address blocks:        2804:23e8::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/8FCABCE25DE1EB121A1B3A5A6AE89B904C7115EB.crl
                          rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/8FCABCE25DE1EB121A1B3A5A6AE89B904C7115EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCABCE25DE1EB121A1B3A5A6AE89B904C7115EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a7:7d:ae:5b:7d:a4:3b:a7:a0:39:81:75:d4:53:66:a6:c3:b9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCABCE25DE1EB121A1B3A5A6AE89B904C7115EB
        Validity
            Not Before: Sep 21 11:21:45 2026 GMT
            Not After : Sep 20 11:26:45 2027 GMT
        Subject: CN=0888A62582CA0C6F95EB96E4D55EDDD44559CD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:50:9c:84:3d:46:87:a6:fb:1e:09:69:d3:
                    fa:bb:3b:7d:06:73:75:94:8c:17:69:08:a9:8a:51:
                    1e:a7:12:94:7b:f8:85:c3:58:a9:c9:f6:71:4c:17:
                    01:7e:fb:e8:c6:2f:54:66:c4:d5:db:5d:89:66:37:
                    1b:73:14:02:f9:e0:7e:16:ad:e9:55:5d:92:bc:7c:
                    b2:a2:ca:bc:9a:83:e6:62:06:e4:6b:17:e6:34:28:
                    ee:97:02:65:66:03:36:ff:56:66:aa:34:21:44:c0:
                    40:84:56:41:9a:c2:c4:47:4c:25:f4:57:13:0d:3e:
                    c4:c4:60:1e:1d:e5:cc:2d:37:5d:04:a9:7a:59:9e:
                    23:f3:67:0c:c4:c6:01:0a:35:66:79:c6:25:5c:41:
                    a7:ef:b9:66:f8:c7:28:3b:33:5c:38:e5:a8:d5:4c:
                    e8:03:83:02:fd:fe:3b:29:02:a1:e7:9f:c7:9a:d9:
                    8c:e9:5d:77:7a:9b:9c:38:31:00:f4:90:cf:2d:0e:
                    a4:cf:6c:9a:da:0a:8f:85:af:a8:df:18:11:9c:ce:
                    6d:cb:c6:86:69:c8:af:ee:e0:79:c9:99:07:e4:97:
                    a8:47:c8:72:57:1f:ad:8e:2f:b3:66:3d:c6:42:72:
                    fb:e5:7b:49:99:2f:be:14:c9:28:08:eb:93:89:c8:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:88:A6:25:82:CA:0C:6F:95:EB:96:E4:D5:5E:DD:D4:45:59:CD:8A
            X509v3 Authority Key Identifier:
                keyid:8F:CA:BC:E2:5D:E1:EB:12:1A:1B:3A:5A:6A:E8:9B:90:4C:71:15:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/8FCABCE25DE1EB121A1B3A5A6AE89B904C7115EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCABCE25DE1EB121A1B3A5A6AE89B904C7115EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/323830343a323365383a3a2f33322d3634203d3e20323632383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:65:39:1c:9a:7b:89:fb:c6:08:54:25:10:d0:e9:70:82:8c:
         d7:69:41:b2:4f:87:22:e4:b5:10:20:8b:ef:df:93:83:68:98:
         2f:a1:46:03:be:4d:cd:c4:1f:fb:f6:21:11:8e:72:be:4f:01:
         01:d2:8a:bb:68:16:19:66:10:22:df:cf:68:41:ff:83:a8:be:
         ff:dd:e5:a3:c1:eb:8f:d2:da:62:70:7d:5e:70:dd:23:c0:58:
         1f:99:c3:cb:aa:bf:cc:2c:4d:ee:c9:a0:e5:1c:7e:82:00:7b:
         20:87:f2:32:c5:8e:79:b2:73:26:58:e4:29:b8:00:c3:1d:26:
         59:40:05:a7:4d:39:73:e6:f3:5f:34:3c:07:a3:2b:e5:54:a8:
         3a:c4:71:83:f6:7f:88:d7:d1:8d:12:e0:2e:b1:42:5e:ce:02:
         3b:a7:15:38:ae:04:09:08:e0:03:b7:d2:48:a3:9c:4a:18:7e:
         59:d5:4e:c9:bd:09:a7:cd:7f:93:f1:b9:3f:0b:ee:70:48:12:
         63:9e:52:04:2b:7d:53:c5:64:62:35:be:af:b6:9e:3d:01:01:
         d9:98:02:a4:70:21:3e:89:d7:d2:db:46:ee:f5:14:8b:9b:53:
         40:06:3b:61:2f:08:82:62:68:f9:70:87:d3:9f:a6:3a:04:e4:
         f6:27:82:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:24:48 2026 by rpki-client