Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/323830343a333661343a3a2f33322d3332203d3e20323636333631.roa
File:                     323830343a333661343a3a2f33322d3332203d3e20323636333631.roa (raw, json)
Hash identifier:          z633nmIgMHu/UF8k1UGDEuVSYaPSQldHY5D5NBbDmUk=
Subject key identifier:   D6:08:32:66:64:A3:DF:58:94:7D:9A:17:9D:A7:6C:07:5D:AD:B9:E9
Certificate issuer:       /CN=97B0541C54F73EE9EF2182F7E0793A06A664D6BC
Certificate serial:       78783614A53C465AFEF0F38A195FCF3D24D5C741
Authority key identifier: 97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/323830343a333661343a3a2f33322d3332203d3e20323636333631.roa
Signing time:             Fri 11 Sep 2026 18:22:25 +0000
ROA not before:           Fri 11 Sep 2026 18:17:25 +0000
ROA not after:            Fri 10 Sep 2027 18:22:25 +0000
asID:                     266361
IP address blocks:        2804:36a4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.crl
                          rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 16:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:78:36:14:a5:3c:46:5a:fe:f0:f3:8a:19:5f:cf:3d:24:d5:c7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97B0541C54F73EE9EF2182F7E0793A06A664D6BC
        Validity
            Not Before: Sep 11 18:17:25 2026 GMT
            Not After : Sep 10 18:22:25 2027 GMT
        Subject: CN=D608326664A3DF58947D9A179DA76C075DADB9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:8d:4c:33:02:b6:89:e8:05:33:34:19:f9:
                    9a:52:38:b8:a4:fb:31:b5:68:9c:ce:a9:11:25:8c:
                    ec:b5:2b:ff:7a:d8:ae:49:bf:f9:91:f4:45:46:4f:
                    92:43:74:41:84:4d:10:04:19:fe:e7:93:9d:14:28:
                    d4:91:26:8a:cc:2e:a1:fb:a8:3b:f8:95:1f:15:38:
                    ca:d3:bd:b3:10:ec:df:33:8b:0f:f4:c2:00:81:7c:
                    b5:40:21:81:e2:cf:52:77:56:2f:02:e4:a8:5d:33:
                    e1:f1:75:83:7b:a5:27:22:4b:94:19:6f:3d:3f:e1:
                    c5:e2:68:7a:6e:d5:62:31:7c:47:de:15:f1:23:bb:
                    d1:f9:3f:fd:67:67:c3:c6:8a:95:21:d0:a0:8a:c3:
                    17:80:49:f9:be:40:74:84:8c:54:df:9b:2d:69:e5:
                    5c:f0:71:05:9d:64:e5:fb:b0:b5:a5:8f:d9:63:99:
                    b6:7d:1c:43:b6:84:82:c4:e4:c9:12:e4:39:df:8d:
                    19:f5:75:5b:04:5a:3f:fc:ee:d0:63:8b:5a:7c:6d:
                    31:fa:62:c4:36:43:12:68:0d:81:54:ae:44:23:48:
                    97:cd:3d:07:48:b9:2d:dd:14:73:0b:12:22:01:c0:
                    30:ef:7f:10:98:09:d5:c0:a6:65:9c:d9:b4:ec:e5:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:32:66:64:A3:DF:58:94:7D:9A:17:9D:A7:6C:07:5D:AD:B9:E9
            X509v3 Authority Key Identifier:
                keyid:97:B0:54:1C:54:F7:3E:E9:EF:21:82:F7:E0:79:3A:06:A6:64:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97B0541C54F73EE9EF2182F7E0793A06A664D6BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31q1t1vZ8rwYbfJBNY6Tz4krez3YWMAF2aiTWZPVbFqw/0/323830343a333661343a3a2f33322d3332203d3e20323636333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:2e:35:61:d8:e7:de:0e:28:3b:a5:dc:dc:13:63:12:80:
         a1:fe:9b:5e:e0:43:82:08:85:c5:20:6f:34:7c:71:33:9f:a4:
         6b:d1:f6:2e:7c:af:18:16:2b:54:5a:d5:78:d5:b3:12:13:18:
         6c:27:f9:3d:30:ba:78:bf:62:83:77:7a:b6:02:ee:e3:06:34:
         36:b7:8e:a4:d5:7b:00:32:20:a7:02:5f:3f:3e:6e:53:91:e8:
         bc:38:df:c1:6c:01:a5:47:69:6a:95:91:db:b3:f3:58:f2:6e:
         f7:76:a9:37:1a:ca:d4:d7:5f:6a:a2:a7:e0:de:74:74:6a:17:
         a6:ec:9e:a2:9d:a3:4a:5e:bc:48:55:89:87:e2:a8:15:db:8b:
         53:8f:69:6b:18:bd:f7:ae:ae:bc:aa:95:5f:c5:d2:f3:75:56:
         9e:11:ec:81:48:08:aa:07:86:c0:13:18:7d:0f:1e:c1:5b:c8:
         33:f3:4b:a0:c2:1a:f4:1a:59:d8:dd:c8:d7:dc:88:2f:1b:5c:
         91:d3:e3:b8:bb:ea:cc:07:a1:2e:b6:a2:0a:48:e4:78:43:9d:
         f6:0d:f1:54:02:05:7b:0d:c2:dd:12:10:d7:1b:f3:50:fe:d2:
         9a:88:aa:e1:66:b5:f7:ad:de:b3:f1:19:f3:6f:02:5a:8c:a9:
         87:0a:77:5f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeHg2FKU8Rlr+8POKGV/PPSTVx0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdCMDU0MUM1NEY3M0VFOUVGMjE4MkY3RTA3OTNBMDZB
NjY0RDZCQzAeFw0yNjA5MTExODE3MjVaFw0yNzA5MTAxODIyMjVaMDMxMTAvBgNV
BAMTKEQ2MDgzMjY2NjRBM0RGNTg5NDdEOUExNzlEQTc2QzA3NURBREI5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xI1MMwK2iegFMzQZ+ZpSOLik
+zG1aJzOqREljOy1K/962K5Jv/mR9EVGT5JDdEGETRAEGf7nk50UKNSRJorMLqH7
qDv4lR8VOMrTvbMQ7N8ziw/0wgCBfLVAIYHiz1J3Vi8C5KhdM+HxdYN7pSciS5QZ
bz0/4cXiaHpu1WIxfEfeFfEju9H5P/1nZ8PGipUh0KCKwxeASfm+QHSEjFTfmy1p
5VzwcQWdZOX7sLWlj9ljmbZ9HEO2hILE5MkS5DnfjRn1dVsEWj/87tBji1p8bTH6
YsQ2QxJoDYFUrkQjSJfNPQdIuS3dFHMLEiIBwDDvfxCYCdXApmWc2bTs5Xx9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1ggyZmSj31iUfZoXnadsB12tuekwHwYDVR0j
BBgwFoAUl7BUHFT3PunvIYL34Hk6BqZk1rwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFxMXQxdlo4cndZYmZKQk5ZNlR6NGtyZXozWVdNQUYyYWlUV1pQVmJG
cXcvMC85N0IwNTQxQzU0RjczRUU5RUYyMTgyRjdFMDc5M0EwNkE2NjRENkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3QjA1NDFDNTRGNzNFRTlF
RjIxODJGN0UwNzkzQTA2QTY2NEQ2QkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxcTF0MXZaOHJ3WWJmSkJOWTZUejRrcmV6M1lXTUFGMmFpVFdaUFZiRnF3LzAv
MzIzODMwMzQzYTMzMzY2MTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzMzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ2pDANBgkqhkiG9w0BAQsFAAOCAQEAcRsuNWHY
594OKDul3NwTYxKAof6bXuBDggiFxSBvNHxxM5+ka9H2LnyvGBYrVFrVeNWzEhMY
bCf5PTC6eL9ig3d6tgLu4wY0NreOpNV7ADIgpwJfPz5uU5HovDjfwWwBpUdpapWR
27PzWPJu93apNxrK1NdfaqKn4N50dGoXpuyeop2jSl68SFWJh+KoFduLU49paxi9
966uvKqVX8XS83VWnhHsgUgIqgeGwBMYfQ8ewVvIM/NLoMIa9BpZ2N3I19yILxtc
kdPjuLvqzAehLraiCkjkeEOd9g3xVAIFew3C3RIQ1xvzUP7Smoiq4Wa1963es/EZ
828CWoyphwp3Xw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:58:19 2026 by rpki-client