Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2vv1GFmFXXBNRMzHNV6ZXKbavUoieD2EusXS98CEY9hz/0/323830343a383338303a3a2f33322d3438203d3e20323732323032.roa
File:                     323830343a383338303a3a2f33322d3438203d3e20323732323032.roa (raw, json)
Hash identifier:          ImHngoTJZHbIksAgyONZMcOOmdXZMW9nLiDhfca2A+o=
Subject key identifier:   D6:2C:6E:E4:5A:E5:2D:02:37:29:2A:CD:96:7D:15:AE:CC:5B:C4:44
Certificate issuer:       /CN=8E027C5F5C8E3EB51ED92D437309EA89395B1466
Certificate serial:       6D31E4134CF829A0E183C7BA1E60A0881CDC92E5
Authority key identifier: 8E:02:7C:5F:5C:8E:3E:B5:1E:D9:2D:43:73:09:EA:89:39:5B:14:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E027C5F5C8E3EB51ED92D437309EA89395B1466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vv1GFmFXXBNRMzHNV6ZXKbavUoieD2EusXS98CEY9hz/0/323830343a383338303a3a2f33322d3438203d3e20323732323032.roa
Signing time:             Thu 10 Sep 2026 01:05:15 +0000
ROA not before:           Thu 10 Sep 2026 01:00:15 +0000
ROA not after:            Thu 09 Sep 2027 01:05:15 +0000
asID:                     272202
IP address blocks:        2804:8380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vv1GFmFXXBNRMzHNV6ZXKbavUoieD2EusXS98CEY9hz/0/8E027C5F5C8E3EB51ED92D437309EA89395B1466.crl
                          rsync://rpki-repo.registro.br/repo/2vv1GFmFXXBNRMzHNV6ZXKbavUoieD2EusXS98CEY9hz/0/8E027C5F5C8E3EB51ED92D437309EA89395B1466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E027C5F5C8E3EB51ED92D437309EA89395B1466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 22:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:31:e4:13:4c:f8:29:a0:e1:83:c7:ba:1e:60:a0:88:1c:dc:92:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E027C5F5C8E3EB51ED92D437309EA89395B1466
        Validity
            Not Before: Sep 10 01:00:15 2026 GMT
            Not After : Sep  9 01:05:15 2027 GMT
        Subject: CN=D62C6EE45AE52D0237292ACD967D15AECC5BC444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:07:d9:60:66:bf:9d:50:9c:e1:c5:54:5b:
                    d8:a9:dd:e1:d1:34:ff:b6:4e:dc:16:0c:12:2b:c2:
                    0b:b5:55:02:aa:ba:58:ec:25:72:53:5b:96:64:a7:
                    83:28:bd:76:a8:e0:f1:73:62:17:87:4f:0b:59:ac:
                    e5:b9:0e:06:22:b0:9b:24:bb:aa:a0:80:ab:3a:f1:
                    8f:74:73:5c:16:68:07:d6:e2:aa:ed:0f:f1:65:ac:
                    5d:b4:44:bd:b9:75:00:cb:fd:e3:3d:da:02:fa:c7:
                    18:f5:c6:01:8c:53:c5:54:68:c0:75:46:79:f6:ec:
                    33:17:37:af:8c:2f:93:cc:1b:11:11:38:3b:72:62:
                    1b:64:e5:89:79:5f:6b:1a:bd:63:b3:e9:54:f7:2b:
                    20:05:43:f5:32:76:8c:60:7e:40:4f:c8:5f:05:7d:
                    61:61:23:35:a2:12:7f:39:12:a4:0b:1c:ea:a9:90:
                    a6:12:a0:57:41:db:00:9b:9c:12:42:95:3a:d9:55:
                    17:e9:3d:6a:8c:df:3a:e8:e6:4c:23:d7:b5:57:b4:
                    43:12:c9:8d:88:9b:7f:37:e6:8f:6b:85:83:19:46:
                    c2:7f:43:3b:f7:ad:98:76:9e:a7:f3:7b:70:80:e9:
                    bc:d7:8e:4d:04:6d:18:08:52:7c:71:c8:a5:79:19:
                    b1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:6E:E4:5A:E5:2D:02:37:29:2A:CD:96:7D:15:AE:CC:5B:C4:44
            X509v3 Authority Key Identifier:
                keyid:8E:02:7C:5F:5C:8E:3E:B5:1E:D9:2D:43:73:09:EA:89:39:5B:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vv1GFmFXXBNRMzHNV6ZXKbavUoieD2EusXS98CEY9hz/0/8E027C5F5C8E3EB51ED92D437309EA89395B1466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E027C5F5C8E3EB51ED92D437309EA89395B1466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vv1GFmFXXBNRMzHNV6ZXKbavUoieD2EusXS98CEY9hz/0/323830343a383338303a3a2f33322d3438203d3e20323732323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8380::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:14:88:02:32:b6:c8:ef:37:da:6a:ff:13:0d:6f:f3:78:af:
         a0:0a:37:cf:16:0a:eb:e6:33:d1:b8:c7:2f:5a:2e:9c:4c:45:
         73:a9:fa:49:0f:c2:7f:04:d8:87:44:5e:e2:1c:18:83:26:31:
         73:58:0d:44:d3:d1:c0:da:1d:63:50:05:87:0c:5d:f3:64:74:
         b9:65:ca:a2:fc:36:50:14:8c:7d:d3:b5:75:aa:c2:7d:c7:30:
         12:31:53:de:e9:43:dc:e8:8e:25:62:a3:8e:db:c7:ba:fd:70:
         b7:18:ea:7a:05:6a:3c:1a:d4:89:0a:e1:cc:4e:90:5c:a3:68:
         0c:ff:01:b5:d4:75:26:bf:30:be:98:4a:79:df:51:36:91:e2:
         56:57:8d:4a:d5:4e:b4:2f:2a:48:c1:8c:c6:eb:86:6a:7b:66:
         c3:cf:64:ad:e3:1a:77:83:21:50:a3:46:4b:15:05:72:b2:04:
         35:28:05:c0:de:03:a1:9f:8f:00:ad:62:20:84:79:88:d6:6e:
         11:0b:5c:3f:d1:8c:8f:32:ce:01:fe:58:5c:83:ca:fb:e5:4f:
         b7:ba:bd:d9:38:ed:f5:d3:1c:39:f1:bd:49:13:94:dc:8b:e8:
         25:b0:cf:6b:fc:be:00:4d:ca:b3:cc:1b:80:f8:a1:f3:53:9e:
         60:36:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 13:25:21 2026 by rpki-client