Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/323030313a313238343a3a2f33322d3333203d3e203134383638.roa
File:                     323030313a313238343a3a2f33322d3333203d3e203134383638.roa (raw, json)
Hash identifier:          8VkcyVmMQYlGZMb6+0zJjg/5jVKWM2gD5y3VFluzcpc=
Subject key identifier:   30:79:8D:97:AE:FD:FA:FE:67:F3:7C:70:8D:79:C9:AF:9E:06:3C:24
Certificate issuer:       /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial:       5CC737112A8AE0D81D927785602B1346C44A7418
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/323030313a313238343a3a2f33322d3333203d3e203134383638.roa
Signing time:             Mon 17 Aug 2026 17:48:33 +0000
ROA not before:           Mon 17 Aug 2026 17:43:33 +0000
ROA not after:            Mon 16 Aug 2027 17:48:33 +0000
asID:                     14868
IP address blocks:        2001:1284::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
                          rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c7:37:11:2a:8a:e0:d8:1d:92:77:85:60:2b:13:46:c4:4a:74:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
        Validity
            Not Before: Aug 17 17:43:33 2026 GMT
            Not After : Aug 16 17:48:33 2027 GMT
        Subject: CN=30798D97AEFDFAFE67F37C708D79C9AF9E063C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:1f:e7:9a:d2:7c:0e:9d:f7:dd:cc:09:09:
                    28:2f:ae:48:86:5f:61:86:bb:32:94:ae:bd:38:c8:
                    11:7e:29:c5:0b:82:47:5f:72:fd:57:97:f2:01:df:
                    a6:c1:f1:f2:27:b8:33:33:70:45:fa:6e:8f:ad:e2:
                    8f:44:f5:b9:f7:b2:95:5c:bb:b8:74:6d:a2:13:3d:
                    c8:42:37:9d:2d:a2:fc:21:f3:4a:76:67:29:17:7a:
                    18:09:fa:bf:e4:7d:63:99:12:13:01:26:6f:1d:e6:
                    42:4d:0f:08:30:23:7f:9e:bc:9d:7a:22:81:22:1c:
                    3d:09:49:13:14:ee:e8:11:fe:50:a9:3b:5b:f3:ff:
                    d3:f0:32:9d:05:09:79:0a:93:47:a9:44:ec:3c:ef:
                    14:cf:c8:9a:ca:84:4b:0c:ce:ca:27:fd:56:e0:16:
                    1e:a1:84:90:3c:e6:39:53:0b:54:e6:68:2f:8d:bc:
                    0a:f2:3c:9b:01:71:f9:9f:43:c8:a5:8d:60:99:bd:
                    2b:f1:99:ca:b9:22:c3:8e:21:35:a6:c8:e1:c8:f8:
                    1a:dd:2f:51:bf:85:7d:73:aa:04:54:5c:7e:88:78:
                    d7:d4:0b:66:7a:e5:e4:bd:71:05:50:6b:3e:88:8d:
                    38:07:ec:17:76:b4:07:41:bd:01:96:4a:f4:6f:4e:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:8D:97:AE:FD:FA:FE:67:F3:7C:70:8D:79:C9:AF:9E:06:3C:24
            X509v3 Authority Key Identifier:
                keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/323030313a313238343a3a2f33322d3333203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1284::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:04:d7:a8:02:87:ea:c3:e2:6e:b6:40:eb:a5:2b:78:af:6c:
         10:cd:4e:e2:c4:d9:d9:80:d5:d5:b4:92:90:3e:83:b2:70:70:
         c1:1e:60:fe:ea:6b:b9:44:a4:a0:09:d3:ad:ad:25:2c:f6:79:
         46:66:d9:85:a5:9c:1e:bc:b5:f9:b6:29:93:a3:20:18:d4:34:
         b6:e4:d7:50:b3:65:fa:45:da:6a:00:fa:f6:73:94:0e:ad:db:
         ea:9b:2c:04:47:eb:2a:6f:16:a2:42:e0:03:dc:79:b2:d2:fc:
         d0:2f:70:0d:23:ab:06:65:0e:d6:a6:18:ac:1b:49:4f:c6:5a:
         a2:5b:94:cb:d4:86:44:28:b1:b8:04:8a:96:3b:92:51:2f:d2:
         ab:41:78:c6:5e:14:77:1c:d3:52:f6:38:f5:a5:33:84:e6:e9:
         2f:6b:53:8c:62:36:3b:23:f9:3e:db:d2:c2:9d:1f:ac:c4:20:
         94:7f:43:f0:0e:d6:94:ac:e4:10:8b:cd:20:8a:c6:5a:37:e7:
         60:be:05:31:d9:43:32:ba:72:4a:44:1a:12:0d:fe:30:3e:fc:
         ec:89:ca:67:6d:f1:25:51:ed:29:60:25:d0:fc:27:a0:0d:1d:
         40:55:e7:3b:d9:07:60:09:f9:cf:b0:a8:7b:78:20:a2:34:a5:
         1f:a2:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:34:40 2026 by rpki-client