Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/323830343a386162303a343030303a3a2f33342d3334203d3e20323733363836.roa
File:                     323830343a386162303a343030303a3a2f33342d3334203d3e20323733363836.roa (raw, json)
Hash identifier:          PU+ReHCVixMOav9T6+gN9CgNH1vzzLijZflqpgb82fY=
Subject key identifier:   99:2D:29:BC:31:EA:C7:9B:68:51:AB:E9:E5:61:5E:D2:D7:E5:BF:DE
Certificate issuer:       /CN=05F33EC42A1325AEA4545EBE036B58237A45A15D
Certificate serial:       050074511A014697A48877100CBFBC87D7245CAF
Authority key identifier: 05:F3:3E:C4:2A:13:25:AE:A4:54:5E:BE:03:6B:58:23:7A:45:A1:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F33EC42A1325AEA4545EBE036B58237A45A15D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/323830343a386162303a343030303a3a2f33342d3334203d3e20323733363836.roa
Signing time:             Fri 02 Oct 2026 18:27:40 +0000
ROA not before:           Fri 02 Oct 2026 18:22:40 +0000
ROA not after:            Fri 01 Oct 2027 18:27:40 +0000
asID:                     273686
IP address blocks:        2804:8ab0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/05F33EC42A1325AEA4545EBE036B58237A45A15D.crl
                          rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/05F33EC42A1325AEA4545EBE036B58237A45A15D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F33EC42A1325AEA4545EBE036B58237A45A15D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 23:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:00:74:51:1a:01:46:97:a4:88:77:10:0c:bf:bc:87:d7:24:5c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F33EC42A1325AEA4545EBE036B58237A45A15D
        Validity
            Not Before: Oct  2 18:22:40 2026 GMT
            Not After : Oct  1 18:27:40 2027 GMT
        Subject: CN=992D29BC31EAC79B6851ABE9E5615ED2D7E5BFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:c2:92:a2:bc:5c:49:da:1d:6a:db:cb:9d:
                    62:12:27:19:d6:0b:60:76:29:99:ee:6a:c4:47:e4:
                    5f:f3:27:da:57:2d:7b:cb:b3:0b:7c:84:4c:00:a9:
                    49:18:07:9b:f7:fc:8b:56:4d:cf:84:9a:33:6a:73:
                    7f:7e:e0:65:08:9e:16:ed:36:c9:00:0e:8b:4d:c2:
                    10:c4:e8:8c:06:aa:37:53:10:42:b1:2f:55:a4:14:
                    89:63:d4:82:85:89:f3:c0:4b:26:14:05:0e:36:cc:
                    a8:8b:95:db:42:91:ba:f1:81:70:76:cc:ef:3b:c0:
                    b4:c5:37:5e:63:9c:94:eb:98:12:43:55:dc:7d:79:
                    d7:08:3a:4e:fc:31:69:1b:04:83:f7:12:ed:1b:93:
                    3e:30:2e:d8:fd:49:b9:25:91:cd:45:f1:c3:cd:9f:
                    8c:73:14:c0:d7:64:fa:32:b3:0b:b9:94:cf:4f:4b:
                    52:7b:8e:77:68:88:e4:c8:1b:b2:96:ae:30:43:15:
                    7c:fb:de:4c:09:0b:e1:a3:ca:3b:6e:10:af:21:7c:
                    f9:0e:ea:12:60:ae:a3:23:b8:f8:b9:0a:c1:9f:99:
                    3f:dd:21:32:bd:d3:fc:df:07:7f:2e:18:13:f8:44:
                    87:3d:a3:2a:99:65:eb:ba:5f:a9:7d:d0:dc:9b:ce:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2D:29:BC:31:EA:C7:9B:68:51:AB:E9:E5:61:5E:D2:D7:E5:BF:DE
            X509v3 Authority Key Identifier:
                keyid:05:F3:3E:C4:2A:13:25:AE:A4:54:5E:BE:03:6B:58:23:7A:45:A1:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/05F33EC42A1325AEA4545EBE036B58237A45A15D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F33EC42A1325AEA4545EBE036B58237A45A15D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/323830343a386162303a343030303a3a2f33342d3334203d3e20323733363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ab0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:d8:4b:11:48:5b:c9:c9:41:47:93:f9:09:a4:03:e4:92:47:
         36:85:3f:e9:2a:3c:08:3f:ee:2d:13:4b:eb:d0:25:6f:e9:be:
         d4:c3:13:89:08:02:19:fb:e0:7e:23:fd:15:6a:7d:fa:33:f9:
         82:55:70:a3:ed:b0:84:12:4f:75:1b:b5:fd:9b:eb:7a:be:b9:
         40:e4:66:22:dd:4d:53:a9:89:c8:30:c5:f2:1d:88:32:ed:ed:
         00:ae:41:d8:b6:a0:36:68:8a:e9:05:6b:b6:aa:9b:eb:b9:66:
         f0:0d:3d:20:58:6c:32:8c:e6:f7:cf:76:31:c7:29:87:dc:dc:
         ff:95:22:e8:fa:b2:10:d2:f8:78:d2:a3:01:16:2f:5a:66:16:
         2a:27:aa:b5:1e:77:5d:fb:e6:99:9b:1d:cb:8e:b0:ab:73:59:
         11:fa:06:e7:bf:20:3a:5c:c2:ee:66:2a:43:6b:3b:b1:cf:8c:
         84:d5:93:cd:32:57:d0:87:7f:76:fc:13:a5:7d:99:80:e0:c7:
         4b:fc:95:a7:49:1c:1d:77:9a:44:9b:7b:65:a0:2b:25:52:99:
         72:7e:2a:81:61:05:c7:a2:26:5f:5b:1f:af:79:d3:38:06:2c:
         f2:53:21:f7:2c:92:49:85:25:4d:a3:37:a3:7d:23:f7:09:35:
         44:79:0e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:29:46 2026 by rpki-client