Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa
File:                     323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (raw, json)
Hash identifier:          d+7y03ercWBHYS8SYcLtOcZ6UdwFtRNbIUzN4k1JbMk=
Subject key identifier:   A8:60:76:F2:DE:78:8C:4A:00:1A:3F:C2:69:B1:76:58:0C:6C:92:0C
Certificate issuer:       /CN=B0485678AE7155C65290067DA6041EB0A1652E4E
Certificate serial:       680DED9DCBB4AE9EC1A3617ABDFE8D172E6DF867
Authority key identifier: B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa
Signing time:             Fri 23 Oct 2026 16:53:25 +0000
ROA not before:           Fri 23 Oct 2026 16:48:25 +0000
ROA not after:            Fri 22 Oct 2027 16:53:25 +0000
asID:                     262769
IP address blocks:        2804:224c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 14:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0d:ed:9d:cb:b4:ae:9e:c1:a3:61:7a:bd:fe:8d:17:2e:6d:f8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0485678AE7155C65290067DA6041EB0A1652E4E
        Validity
            Not Before: Oct 23 16:48:25 2026 GMT
            Not After : Oct 22 16:53:25 2027 GMT
        Subject: CN=A86076F2DE788C4A001A3FC269B176580C6C920C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:f3:a3:c1:af:c6:a4:84:46:c2:1f:25:82:
                    15:3f:65:b3:a2:fc:97:05:fe:c6:d1:2a:70:bc:55:
                    c7:3b:9a:d4:66:8c:92:47:2c:22:61:3c:28:a0:2f:
                    3e:33:fb:7e:a7:69:7f:3e:3a:10:6b:97:35:1d:a4:
                    a2:73:9e:b2:2b:16:42:89:d6:03:f3:40:90:f8:e2:
                    9d:cb:9b:76:3b:cd:1b:85:5e:2f:aa:38:cc:61:65:
                    e8:bb:8a:6d:39:27:3e:3b:61:c8:76:6f:60:f4:89:
                    9e:38:1c:d5:7c:b4:30:0c:9f:77:92:61:5d:28:50:
                    38:4a:c7:1c:62:0c:6e:e7:e3:82:f0:94:cc:13:3a:
                    35:6c:f4:21:4b:8a:4a:29:94:bd:61:da:2e:1d:4d:
                    45:8d:6b:04:f6:62:10:e2:53:cd:eb:67:88:63:61:
                    77:b8:00:cd:a8:1d:7e:14:10:90:e6:e7:2d:97:68:
                    8f:aa:aa:1b:61:d3:a0:39:aa:66:94:5c:d7:fa:62:
                    02:3a:35:db:65:c4:d6:b5:7c:68:14:35:4d:a9:03:
                    14:c1:bf:6a:dc:83:50:d7:ca:9c:7e:86:cd:ed:b9:
                    4c:91:68:48:73:44:33:48:45:65:64:6a:b4:ff:bb:
                    c1:cc:73:99:ad:67:ef:6c:d3:62:66:1a:93:4f:1d:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:60:76:F2:DE:78:8C:4A:00:1A:3F:C2:69:B1:76:58:0C:6C:92:0C
            X509v3 Authority Key Identifier:
                keyid:B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:224c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:57:03:44:ee:3e:a3:0e:33:3d:fe:d6:58:e4:b6:e2:af:
         44:58:40:8f:42:b1:c6:b5:d2:26:87:b6:4b:96:d4:d6:8a:67:
         1f:58:08:99:81:73:00:c7:18:d3:c7:43:9c:54:9f:f5:63:e5:
         86:af:d8:1c:c2:af:e8:90:4b:44:69:77:26:9b:fd:19:6e:f6:
         e9:f3:12:d9:d8:71:c4:ca:22:6c:06:cf:18:2f:12:36:5d:28:
         ca:07:ec:16:c3:64:bc:b4:de:29:83:54:0f:c9:aa:6e:2d:6a:
         6e:04:0c:07:73:f5:52:ce:57:de:fb:c4:a7:87:e7:01:c0:c0:
         93:54:69:47:c3:8b:a5:21:95:f6:50:99:af:d2:a9:59:ac:da:
         a6:df:60:93:3e:88:6f:7d:9a:a8:dd:a8:f5:d8:c0:43:35:82:
         cb:e2:c9:b6:14:45:09:c3:6a:cb:e4:de:f1:89:bc:4f:a7:59:
         f4:30:62:7f:78:f0:0b:fb:47:9f:47:23:2b:3f:c1:8c:57:67:
         be:4e:ff:17:4f:82:c4:ea:75:1f:77:b3:2a:66:ab:d5:74:c4:
         5e:26:01:8f:c3:1a:a2:0d:1e:82:8e:cc:b6:78:e7:64:f7:3b:
         1b:a6:61:3b:95:db:08:b4:55:7f:4b:2e:bb:b4:6a:b2:ca:15:
         12:e2:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:18:37 2026 by rpki-client