Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/323830343a356532383a3a2f33322d3332203d3e20323639303135.roa
File:                     323830343a356532383a3a2f33322d3332203d3e20323639303135.roa (raw, json)
Hash identifier:          KFfwETe9Mbvp6+bq8nFTcpN1sZlzXD2sXRTLa0YUIds=
Subject key identifier:   17:2E:4C:8F:D3:CB:A2:B9:94:E9:4D:A5:87:79:FD:F6:07:51:97:41
Certificate issuer:       /CN=13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185
Certificate serial:       65AF87C5E43B0AFF7C056E2E1CCD26ADA20BD1B7
Authority key identifier: 13:DC:DD:1F:DB:5A:E5:67:97:0E:F8:DE:DB:37:8C:1F:DC:E8:41:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/323830343a356532383a3a2f33322d3332203d3e20323639303135.roa
Signing time:             Thu 01 Oct 2026 14:48:25 +0000
ROA not before:           Thu 01 Oct 2026 14:43:25 +0000
ROA not after:            Thu 30 Sep 2027 14:48:25 +0000
asID:                     269015
IP address blocks:        2804:5e28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:af:87:c5:e4:3b:0a:ff:7c:05:6e:2e:1c:cd:26:ad:a2:0b:d1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185
        Validity
            Not Before: Oct  1 14:43:25 2026 GMT
            Not After : Sep 30 14:48:25 2027 GMT
        Subject: CN=172E4C8FD3CBA2B994E94DA58779FDF607519741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:ab:dc:4c:a2:4e:95:28:fd:69:0c:fc:46:
                    c3:65:94:51:b5:b3:79:ed:57:43:48:69:de:e2:03:
                    fb:7b:62:7e:1c:16:63:c6:95:a4:da:4d:27:d7:3a:
                    40:ee:73:e9:dc:4d:01:a1:8d:56:62:07:09:ee:04:
                    1a:e7:09:ba:91:11:6b:57:c4:89:af:bf:66:63:c1:
                    78:72:3c:f9:00:fb:1f:5b:b2:06:ac:96:3f:39:33:
                    0a:8e:3e:ad:9a:3c:13:26:68:08:dc:79:91:e3:a3:
                    bd:44:44:89:25:a7:1f:98:53:aa:5e:5a:f3:81:ea:
                    fd:67:44:1b:30:90:90:ca:1b:6e:7f:87:7d:71:02:
                    a0:3d:f0:aa:3a:7b:2f:da:6f:a3:b4:a7:52:c1:97:
                    6a:41:17:50:a5:a7:a2:49:97:2b:5a:58:15:06:c2:
                    63:f0:f8:5a:9e:fe:1a:2d:76:49:e3:4b:c6:75:8d:
                    73:66:40:b0:f4:59:c1:a0:ca:c0:44:5c:1d:e6:03:
                    ae:0a:41:82:f7:f0:3c:a3:5f:1c:29:8a:b1:a9:12:
                    6c:7c:37:eb:9c:ba:f9:0a:ad:8b:23:e6:c7:02:84:
                    9a:31:ac:b0:73:7d:4c:d2:06:12:be:59:4d:7e:bd:
                    a1:27:bc:89:e7:63:5a:ac:62:ba:ab:68:11:58:88:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2E:4C:8F:D3:CB:A2:B9:94:E9:4D:A5:87:79:FD:F6:07:51:97:41
            X509v3 Authority Key Identifier:
                keyid:13:DC:DD:1F:DB:5A:E5:67:97:0E:F8:DE:DB:37:8C:1F:DC:E8:41:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/323830343a356532383a3a2f33322d3332203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:d0:18:69:5a:42:ff:ac:0e:ee:1a:fd:d7:9e:91:27:b1:f4:
         0f:7d:e4:58:67:2b:73:ba:4c:31:ba:7f:14:89:c4:97:3d:60:
         ce:b1:59:e6:f8:12:ef:d7:7c:a7:5a:5d:67:dd:e0:85:65:b1:
         c9:54:41:c7:b6:1a:5f:87:83:a7:4f:6d:f1:1d:57:6a:60:8d:
         80:6a:2a:ff:f5:45:fb:89:35:cf:8c:81:36:91:e3:37:cb:a2:
         d1:0a:a1:78:98:cb:bd:cc:3b:17:29:85:da:44:b8:d4:57:bd:
         16:9d:ed:a2:4b:5b:3c:35:f9:23:16:bb:79:06:b3:44:8d:67:
         f9:37:f0:d4:f4:ba:45:70:b1:52:ef:e7:c3:b2:42:ed:ff:5b:
         6d:70:02:0f:8e:d8:9d:58:47:91:3c:ec:71:bf:ee:d4:70:c5:
         d6:9e:47:16:a2:c5:ad:9a:50:ca:c1:39:d5:d7:51:64:22:d7:
         58:4d:7d:79:81:1a:b1:e2:e1:5e:a4:14:ee:65:de:95:5d:ce:
         7d:70:b9:29:67:8b:ed:5a:68:f9:11:e3:04:63:1d:a4:36:22:
         da:f1:42:b3:dd:16:f3:d3:fe:81:52:ad:07:74:bb:da:fe:20:
         d9:42:77:13:fb:10:e3:4f:6c:a0:a8:8d:67:6c:9e:50:64:10:
         9d:60:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:34:14 2026 by rpki-client