Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/323830343a333965383a3a2f33322d3333203d3e203134383638.roa
File:                     323830343a333965383a3a2f33322d3333203d3e203134383638.roa (raw, json)
Hash identifier:          wpHYFVIfHiwcRplLm+MRXX0320Gwrx/hnYmqJsVZ+vY=
Subject key identifier:   89:48:0C:32:20:33:A1:8C:83:7E:8D:D0:D8:9A:55:89:F5:E7:86:CE
Certificate issuer:       /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial:       59E0A50B35CD270F1A713E14EB98A9E05180B314
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/323830343a333965383a3a2f33322d3333203d3e203134383638.roa
Signing time:             Mon 17 Aug 2026 17:48:32 +0000
ROA not before:           Mon 17 Aug 2026 17:43:32 +0000
ROA not after:            Mon 16 Aug 2027 17:48:32 +0000
asID:                     14868
IP address blocks:        2804:39e8::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
                          rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e0:a5:0b:35:cd:27:0f:1a:71:3e:14:eb:98:a9:e0:51:80:b3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
        Validity
            Not Before: Aug 17 17:43:32 2026 GMT
            Not After : Aug 16 17:48:32 2027 GMT
        Subject: CN=89480C322033A18C837E8DD0D89A5589F5E786CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:22:45:3f:50:6e:bb:70:74:ba:7a:dc:9d:
                    84:6b:6d:b5:85:83:52:85:6e:1e:bd:19:4c:e1:5b:
                    ee:ce:ac:89:1b:6f:f6:d2:ca:55:f2:ca:d2:7c:26:
                    ce:02:a0:98:05:8d:ae:3a:19:3d:0c:c1:e3:68:e0:
                    7a:73:bf:e6:ba:50:49:12:58:a0:e0:73:a1:87:dc:
                    a5:1f:c9:39:80:14:af:bb:2d:3d:54:5f:76:d1:01:
                    a7:e6:9e:8f:ae:99:c2:ce:6d:8e:38:6d:af:11:08:
                    7d:f3:56:8d:12:9b:50:c9:65:98:4d:4c:88:f9:1f:
                    a8:cc:d6:3f:48:ab:13:90:5a:7b:99:cd:4a:cd:77:
                    46:55:00:89:28:9d:2e:fb:20:f4:6c:b9:99:16:d7:
                    e3:3f:ea:37:1f:0a:21:e5:cb:1b:9e:fa:ff:bd:c2:
                    a4:43:66:fc:73:c7:4e:69:f6:84:ef:54:9c:8f:9f:
                    65:1b:b7:6d:59:94:3f:c1:66:08:7c:0b:49:57:0f:
                    16:2d:8f:68:fe:98:05:47:b1:c9:ef:35:ef:17:54:
                    ee:7a:d2:08:5f:01:72:08:9f:68:9e:3c:c6:d2:a5:
                    02:47:21:38:9e:ac:06:47:de:f4:58:a2:88:16:5c:
                    24:27:0d:c1:50:c5:44:8e:13:24:60:77:45:bd:95:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:48:0C:32:20:33:A1:8C:83:7E:8D:D0:D8:9A:55:89:F5:E7:86:CE
            X509v3 Authority Key Identifier:
                keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/323830343a333965383a3a2f33322d3333203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:9e:ac:d5:d6:c3:30:1d:c6:8c:8a:fe:85:84:20:ae:49:
         4e:db:6a:c3:27:1e:e1:1a:72:71:c1:e6:22:88:53:da:b4:42:
         c8:4e:6f:16:be:40:7d:94:ab:9a:a9:6d:4a:53:54:33:26:73:
         ba:63:15:dc:ac:4d:2f:db:71:8e:d7:4c:ad:c8:02:a9:91:42:
         4d:37:ec:1d:e8:5d:c6:7f:b8:ce:fb:1b:25:19:dd:ab:80:af:
         82:7c:8c:e7:c0:59:b1:0d:66:9c:e1:b7:ad:e9:b5:1b:b3:f4:
         ed:21:a2:97:86:e4:1a:e7:d4:ca:02:a9:10:89:11:2f:a4:49:
         20:a0:be:5b:e8:ef:e1:11:1f:49:70:2a:b9:e8:1c:b0:9b:78:
         ca:3c:12:74:14:55:cc:be:49:d1:ef:73:9c:4e:da:57:70:63:
         f2:55:3c:ad:77:62:2d:a8:b8:89:d2:b4:aa:f4:3a:da:31:64:
         97:4c:95:b7:94:7e:62:f3:1d:bb:8f:3d:dd:5a:f7:fb:35:07:
         27:59:27:bf:d0:48:bf:62:43:c8:fb:a1:ab:2b:f3:ae:e9:1d:
         8f:19:e0:ef:a0:79:c1:5f:a0:61:b8:d2:62:36:dc:99:d8:4b:
         5e:a3:b3:55:2c:80:d8:a1:29:1f:0e:88:25:b5:31:1b:7c:3b:
         f0:60:a0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:41:11 2026 by rpki-client