Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/323830343a323030633a3a2f33322d3536203d3e20323632383135.roa
File:                     323830343a323030633a3a2f33322d3536203d3e20323632383135.roa (raw, json)
Hash identifier:          lMDiNtzoVN8h15boIwGbTs7R6qguCkMwqNVOuqLaZJc=
Subject key identifier:   71:5B:D2:5B:68:37:E1:86:A7:19:85:A3:4E:A8:4A:89:E4:7F:B0:4A
Certificate issuer:       /CN=73C99207B0A83999DA30B6A4FCB17DF3A5A3E389
Certificate serial:       6312EDDEF6A0EAEE177BB8E4A2E86279B6E3605B
Authority key identifier: 73:C9:92:07:B0:A8:39:99:DA:30:B6:A4:FC:B1:7D:F3:A5:A3:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/323830343a323030633a3a2f33322d3536203d3e20323632383135.roa
Signing time:             Fri 02 Oct 2026 18:28:53 +0000
ROA not before:           Fri 02 Oct 2026 18:23:53 +0000
ROA not after:            Fri 01 Oct 2027 18:28:53 +0000
asID:                     262815
IP address blocks:        2804:200c::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.crl
                          rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 00:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:12:ed:de:f6:a0:ea:ee:17:7b:b8:e4:a2:e8:62:79:b6:e3:60:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C99207B0A83999DA30B6A4FCB17DF3A5A3E389
        Validity
            Not Before: Oct  2 18:23:53 2026 GMT
            Not After : Oct  1 18:28:53 2027 GMT
        Subject: CN=715BD25B6837E186A71985A34EA84A89E47FB04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:75:f3:c2:b8:03:36:c6:db:ef:c0:13:60:0f:
                    fa:e0:8f:d4:bc:f8:4e:5e:4d:08:cd:37:c3:ce:bd:
                    9d:53:43:c2:01:0b:d0:37:6e:b6:66:13:78:09:4b:
                    8a:90:6c:53:d8:1f:79:07:28:1b:c9:14:56:20:b5:
                    bf:5e:01:4e:b5:48:9b:e2:95:88:f1:f3:a4:88:4a:
                    7b:53:9c:82:a8:82:52:47:ad:b5:b4:9f:d8:06:83:
                    74:ce:0a:4d:5b:75:9a:70:25:ba:64:3d:57:7e:20:
                    10:1d:33:99:b2:96:8f:ea:d4:1f:12:84:eb:1b:03:
                    4c:27:9c:d3:de:d7:38:54:81:c5:fd:be:de:1c:86:
                    52:f2:e5:60:80:7f:c3:b4:56:44:65:ac:4c:91:c7:
                    b3:98:bf:4f:89:d9:da:c0:c7:cd:35:91:d7:4d:65:
                    c1:4a:d9:87:23:7a:69:10:0d:2f:20:26:88:e8:78:
                    12:11:c3:e1:65:89:d5:32:04:ec:b6:7e:2f:cf:0f:
                    a0:37:f3:a6:bb:5b:f1:1c:51:0e:2a:35:28:45:4e:
                    60:bf:97:8d:7c:6e:fd:05:34:84:75:59:b3:03:1a:
                    1d:2e:60:a3:a4:73:f1:b6:90:37:9e:0c:58:bb:5b:
                    3f:b3:e2:39:d8:36:00:55:1d:36:4d:74:6b:17:61:
                    b4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5B:D2:5B:68:37:E1:86:A7:19:85:A3:4E:A8:4A:89:E4:7F:B0:4A
            X509v3 Authority Key Identifier:
                keyid:73:C9:92:07:B0:A8:39:99:DA:30:B6:A4:FC:B1:7D:F3:A5:A3:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/323830343a323030633a3a2f33322d3536203d3e20323632383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:200c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:e7:89:d4:0a:52:80:c8:88:24:9b:a8:7a:01:98:68:99:99:
         8e:a1:5f:27:66:2b:97:74:be:cb:ae:85:31:ed:ba:1f:f0:43:
         cd:25:36:50:e7:d5:fb:77:76:8e:bb:2d:8e:ec:62:f2:25:a5:
         f1:8b:09:e9:d4:43:52:77:48:0c:90:e8:02:a1:13:32:54:1e:
         9e:ca:00:33:ac:65:96:c6:b1:80:d1:0d:61:4a:26:87:af:e9:
         1b:66:40:24:1a:7a:b9:d0:3c:c0:a4:b4:96:44:50:4e:84:38:
         b3:9c:ac:15:d9:47:1a:63:c6:24:c5:68:70:1f:e9:85:ff:9a:
         b2:cb:a0:7d:40:69:63:bf:3a:5c:04:44:a7:67:44:6d:0c:d9:
         ac:0b:63:bf:86:b1:fc:55:b7:fc:ea:02:33:8a:eb:cc:b4:bb:
         35:57:61:14:38:f7:30:c6:1c:a9:2b:d4:b1:46:d3:ab:aa:e5:
         f7:2e:25:58:2c:7f:6e:ce:52:32:66:72:49:a1:33:db:3f:f4:
         c8:07:ae:14:40:30:fa:16:c3:bd:fa:f1:39:5c:43:dc:21:e3:
         1d:f5:9f:c2:4f:dc:70:16:24:c9:ee:a2:31:5a:9a:f4:3e:fb:
         02:e3:f3:90:58:49:5d:26:26:ab:4a:76:50:5e:ac:aa:b3:88:
         52:fd:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:27:18 2026 by rpki-client