Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33322d3332203d3e203532373231.roa
File:                     323830343a323636343a3a2f33322d3332203d3e203532373231.roa (raw, json)
Hash identifier:          3rRNA02IVlSgCpJmLMk8sE2oOm6Wf/xSTwuYOZnNYbk=
Subject key identifier:   A9:A9:DF:F8:6F:08:9D:84:0B:1F:77:7F:05:66:79:7C:82:83:7C:90
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       3B95806CD1A43779869E586B0AB006D7E5C6C1AF
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33322d3332203d3e203532373231.roa
Signing time:             Tue 22 Sep 2026 17:11:58 +0000
ROA not before:           Tue 22 Sep 2026 17:06:58 +0000
ROA not after:            Tue 21 Sep 2027 17:11:58 +0000
asID:                     52721
IP address blocks:        2804:2664::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:95:80:6c:d1:a4:37:79:86:9e:58:6b:0a:b0:06:d7:e5:c6:c1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Sep 22 17:06:58 2026 GMT
            Not After : Sep 21 17:11:58 2027 GMT
        Subject: CN=A9A9DFF86F089D840B1F777F0566797C82837C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:94:f0:6c:87:a4:1a:02:e5:58:7b:12:09:
                    c4:ee:47:16:24:12:ec:39:52:fb:0d:af:02:56:4a:
                    61:66:83:83:72:b2:99:33:dc:0b:ce:80:f4:33:b9:
                    28:98:58:c1:d3:f1:b8:98:6f:52:d4:44:b3:78:55:
                    1a:67:c1:fc:ef:93:72:5d:98:67:f5:ba:d2:b6:39:
                    95:4b:61:c0:fb:25:01:bd:4a:c2:40:9f:5c:1e:d2:
                    c1:e3:6e:f9:e5:1b:55:38:31:16:21:83:3a:ad:1e:
                    25:0f:57:6f:00:e8:48:a3:fe:f1:71:2b:9e:00:f9:
                    66:88:08:40:33:0a:d2:3d:e2:f0:29:00:45:33:27:
                    d6:7f:33:61:22:ad:91:10:ca:c7:87:24:7e:cc:ec:
                    ea:95:67:b5:8c:2c:91:5b:a4:a5:06:61:87:ba:ce:
                    e9:79:d0:80:35:ed:60:7c:5c:c9:40:0c:a5:61:25:
                    47:4c:dc:5a:50:79:7b:b4:e2:89:34:09:ee:5c:bb:
                    c2:fa:0a:83:16:15:66:9f:d2:36:11:fc:b5:6b:00:
                    a0:b0:29:7d:70:e1:f5:fa:0f:ad:82:f6:01:3e:22:
                    6a:11:ce:94:d0:95:7e:00:f9:a3:77:c2:5e:11:85:
                    7a:2e:57:6f:06:7e:eb:29:01:3b:a0:ae:6d:ca:9d:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A9:DF:F8:6F:08:9D:84:0B:1F:77:7F:05:66:79:7C:82:83:7C:90
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33322d3332203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2664::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:88:ac:40:87:f3:6e:6f:b0:fd:c5:fb:5b:2c:ff:fc:76:
         e2:82:b9:da:1c:c0:07:e7:02:8d:09:ca:8b:28:a4:5b:74:da:
         b6:0f:b6:80:1b:7f:b5:5d:22:b4:d5:1c:74:83:97:b2:9f:ad:
         7b:8d:ef:f5:cb:ac:b4:be:3b:17:99:bb:2a:52:d4:42:9f:86:
         c6:e6:b2:eb:d8:fc:da:21:31:da:67:90:23:94:1f:73:b6:23:
         cc:c4:a4:2f:84:d5:ff:a5:d8:8f:fc:c2:01:db:9e:99:da:6c:
         5f:c6:4c:1d:59:e0:60:ed:e2:6b:b4:22:98:8a:0b:eb:21:93:
         98:6b:c4:04:f2:46:7e:25:b4:3c:88:43:89:36:41:74:33:77:
         65:cc:29:18:9a:8d:8f:93:12:4b:24:97:a1:b0:d4:42:5d:6e:
         7f:18:b0:54:bb:6e:ed:d3:39:4c:ff:ca:7e:98:c6:b8:a1:da:
         d2:44:48:e1:26:66:09:d9:45:ba:5a:b2:e6:e6:64:ee:be:0a:
         42:49:76:4c:e1:fa:46:8a:f9:2a:e8:d9:9b:82:b0:ee:64:26:
         f6:c8:3a:77:49:8e:96:4b:7b:7e:90:bc:95:72:cb:93:a6:0b:
         16:fc:3c:7f:a1:35:6c:5b:1c:b2:9f:7a:b6:dd:28:56:80:85:
         34:0d:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 13:31:05 2026 by rpki-client