Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/323830343a333032633a3a2f33332d3333203d3e20323634393334.roa
File:                     323830343a333032633a3a2f33332d3333203d3e20323634393334.roa (raw, json)
Hash identifier:          gknB4IcCEN3PHJVNEEKoJwxWQFD7EkBRT+DziSZwwgg=
Subject key identifier:   E7:76:B6:C4:89:3E:7A:EA:BE:7F:35:99:B7:EF:DD:C2:CE:51:54:59
Certificate issuer:       /CN=86DDB7C72F5357A9758F963A9236F982FD87D824
Certificate serial:       24A424BCB66CBB1321C5D61A77511C38193109E1
Authority key identifier: 86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/323830343a333032633a3a2f33332d3333203d3e20323634393334.roa
Signing time:             Tue 01 Sep 2026 16:03:39 +0000
ROA not before:           Tue 01 Sep 2026 15:58:39 +0000
ROA not after:            Tue 31 Aug 2027 16:03:39 +0000
asID:                     264934
IP address blocks:        2804:302c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl
                          rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a4:24:bc:b6:6c:bb:13:21:c5:d6:1a:77:51:1c:38:19:31:09:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86DDB7C72F5357A9758F963A9236F982FD87D824
        Validity
            Not Before: Sep  1 15:58:39 2026 GMT
            Not After : Aug 31 16:03:39 2027 GMT
        Subject: CN=E776B6C4893E7AEABE7F3599B7EFDDC2CE515459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:3e:42:9c:bf:00:ea:8f:9f:2a:bc:20:4f:
                    d9:60:4a:b5:70:e5:7b:ce:3d:32:a1:f9:69:d4:92:
                    63:b9:72:eb:73:99:19:ef:8d:ec:70:6d:12:97:b4:
                    3d:bb:e0:fb:07:60:8e:47:94:9f:74:85:07:79:d2:
                    8d:73:ed:a2:87:88:2e:76:fb:29:70:fe:cf:8d:a9:
                    ad:79:c1:3a:85:c0:06:0f:51:3d:03:50:6e:1e:e4:
                    ad:e1:aa:29:96:7c:2c:16:e7:fb:19:b0:8a:8a:5f:
                    3e:61:35:b5:8b:d8:1c:3e:1e:e0:99:3e:a1:24:ad:
                    c0:39:dc:6b:18:16:b0:7e:8d:7d:4b:4f:24:9a:93:
                    ee:79:9f:f5:1c:48:4f:6c:e4:4c:bd:76:2a:09:2b:
                    2f:67:44:0e:ec:49:c3:90:f3:4c:e1:e9:e8:04:16:
                    33:de:1a:b1:65:5f:62:ae:a1:d6:fe:b7:8c:af:04:
                    65:d7:a7:24:da:87:9b:aa:6b:0a:8b:91:2a:00:23:
                    f4:fa:d4:c1:f9:01:78:2a:f6:dd:38:5a:30:e8:64:
                    a5:01:3a:f7:45:ea:4d:00:6e:c2:67:7c:b5:9c:c4:
                    ab:6f:f7:31:ab:e1:a1:af:6f:b8:38:45:23:6a:d2:
                    3a:25:1d:7f:06:ed:73:8f:81:36:b6:f4:d5:91:2e:
                    43:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:76:B6:C4:89:3E:7A:EA:BE:7F:35:99:B7:EF:DD:C2:CE:51:54:59
            X509v3 Authority Key Identifier:
                keyid:86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/323830343a333032633a3a2f33332d3333203d3e20323634393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:302c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a3:37:1e:96:9d:18:fe:cd:d1:e5:a5:f7:d2:fc:d4:6a:4f:f8:
         fb:95:cc:53:32:7a:40:6d:01:9c:69:f6:d8:da:fb:d8:32:a4:
         73:07:a7:b3:3f:77:62:a0:15:fe:5b:4f:82:e2:57:83:49:66:
         32:80:df:4e:e7:cc:3f:21:d1:9d:c0:8e:c2:e9:aa:8a:1e:40:
         c5:5f:1c:7e:e1:e7:37:ed:3c:91:27:db:74:1f:5b:dd:7b:d8:
         ac:c3:c5:c9:5e:87:f6:bc:b0:d2:f5:43:59:15:22:54:26:fa:
         8e:39:19:1f:5c:0b:d8:38:a6:3d:27:9c:4c:07:27:20:23:28:
         15:41:30:7a:10:7a:c9:7f:30:42:80:14:5d:02:5a:4e:72:00:
         e0:04:a7:c1:23:6a:f6:02:4a:79:27:93:87:2b:ee:0b:48:8a:
         0e:6d:6f:85:1c:9e:a1:74:b7:55:4b:ab:4a:64:8d:bd:8f:68:
         18:44:ec:00:60:47:18:21:f7:94:1c:7e:ef:33:48:1b:10:31:
         16:63:c3:7b:3d:b7:7b:2e:84:3f:1d:e2:ee:5c:43:fd:b5:d3:
         08:5f:4c:c6:95:82:fe:b3:23:3c:a9:2d:98:38:bf:c5:2e:e9:
         57:44:33:52:84:16:4e:f7:b1:8b:06:06:df:f6:9d:86:9e:d9:
         62:a1:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:34:08 2026 by rpki-client