Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323634323130.roa
File:                     323830343a383363343a383030303a3a2f34382d3438203d3e20323634323130.roa (raw, json)
Hash identifier:          7x04VmLd5MpSDy5Kbr4o4D9TfNld9Jf8gOs7G+IwTV4=
Subject key identifier:   B8:3C:1D:50:29:24:4F:64:41:BD:5A:2E:C5:36:B7:B2:7C:4F:3B:CB
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       189ED82CF141C8E1221D5BF652C7686E77ED6F7E
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323634323130.roa
Signing time:             Wed 05 Aug 2026 13:36:54 +0000
ROA not before:           Wed 05 Aug 2026 13:31:54 +0000
ROA not after:            Wed 04 Aug 2027 13:36:54 +0000
asID:                     264210
IP address blocks:        2804:83c4:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 04:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9e:d8:2c:f1:41:c8:e1:22:1d:5b:f6:52:c7:68:6e:77:ed:6f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug  5 13:31:54 2026 GMT
            Not After : Aug  4 13:36:54 2027 GMT
        Subject: CN=B83C1D5029244F6441BD5A2EC536B7B27C4F3BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:1c:8a:cf:b3:30:2e:c9:ab:ce:a3:5f:b8:
                    50:ea:97:f1:f7:1d:73:a7:66:93:89:07:a8:f1:b4:
                    39:3f:1f:e8:b4:09:0e:e7:a0:7b:38:c9:67:99:17:
                    0d:73:41:cb:47:df:80:ff:a7:34:0b:53:60:7f:4d:
                    a5:ae:b0:d7:27:24:58:03:0e:1a:ad:69:65:20:a8:
                    dc:a3:39:8b:e5:37:06:54:ce:a2:f0:57:94:4b:d3:
                    a5:eb:e4:33:ef:2c:23:8f:42:26:75:ff:f8:f3:94:
                    ab:fa:8e:60:50:b7:2f:64:9c:97:80:a7:11:ae:88:
                    00:81:95:76:ef:40:06:67:13:35:29:35:82:12:2d:
                    41:3b:1d:9a:9c:cb:55:3c:01:84:e4:ba:1b:eb:af:
                    b5:d9:e0:0b:0c:b7:89:0b:94:ba:a0:8e:b9:56:e8:
                    52:5a:97:b4:9a:8b:5e:aa:b2:27:57:6e:96:a0:44:
                    50:28:f8:3d:80:27:98:ac:f8:fa:76:82:d9:db:e7:
                    2c:44:5d:20:74:50:d0:ec:1a:55:c5:25:f2:20:55:
                    f2:2f:bb:f8:f2:d9:bb:0d:04:06:a6:e1:d4:d8:a6:
                    d5:86:9b:fc:9d:2c:b7:d7:51:c9:6d:79:cf:c7:b6:
                    f2:fb:f7:92:c4:1b:17:10:75:4a:3c:9c:bf:75:fe:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3C:1D:50:29:24:4F:64:41:BD:5A:2E:C5:36:B7:B2:7C:4F:3B:CB
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323634323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:0c:21:6d:98:d3:1a:f9:41:38:9e:6c:25:7a:b9:4c:ed:66:
         66:a1:cd:44:fe:98:56:f9:74:a6:d5:d9:2b:a5:d9:bb:e2:9c:
         94:6f:83:d4:12:f4:99:05:fa:84:e8:20:25:a7:38:f0:db:b9:
         ce:3a:5c:32:4c:c0:ad:e3:8b:90:1e:7e:78:44:32:72:2d:db:
         78:77:59:51:87:14:00:d7:27:28:77:9c:39:01:b0:07:1d:e0:
         12:99:88:08:1f:cb:37:87:94:7e:fe:db:a2:98:3a:ac:b6:1a:
         ce:1d:a2:82:65:9b:3d:9d:70:c8:e0:af:5d:e4:4b:35:24:d6:
         93:8b:90:40:f3:b4:3a:04:e5:97:27:18:4e:a8:31:c4:9b:80:
         64:ba:1b:72:37:51:07:37:4a:92:b7:21:1a:6b:58:04:d7:4b:
         ee:ec:13:f9:c4:af:19:c7:da:10:b9:ca:a3:23:df:31:c9:c0:
         5e:5c:26:df:21:8a:07:97:94:30:49:88:85:34:04:a3:67:43:
         b1:88:bd:35:7b:a8:63:5d:47:98:ff:b8:01:47:3a:a7:59:f0:
         5b:9a:63:b1:18:6b:4f:3e:18:9f:c7:40:fe:d2:27:ff:b2:e4:
         cf:33:d4:3a:d4:9d:eb:28:ce:42:be:99:bb:38:3c:8c:36:9b:
         98:5d:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:59:35 2026 by rpki-client