Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030363a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383030363a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          /W9q8mPcXJkYOlA/i4xsT9lmg2ZC/RxMXrtOR56FTso=
Subject key identifier:   D3:D6:54:DB:E3:AD:06:E6:37:DE:AE:E7:50:DC:79:C8:E8:B8:D4:01
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       15F328A60A0DDE9F9D06AA370D3D061ED1BA16C5
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030363a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 27 Jul 2026 20:33:24 +0000
ROA not before:           Mon 27 Jul 2026 20:28:24 +0000
ROA not after:            Mon 26 Jul 2027 20:33:24 +0000
asID:                     272218
IP address blocks:        2804:83c4:8006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 15:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f3:28:a6:0a:0d:de:9f:9d:06:aa:37:0d:3d:06:1e:d1:ba:16:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Jul 27 20:28:24 2026 GMT
            Not After : Jul 26 20:33:24 2027 GMT
        Subject: CN=D3D654DBE3AD06E637DEAEE750DC79C8E8B8D401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:e3:04:81:b6:93:43:d5:7f:d1:4c:38:eb:
                    91:2d:55:e2:8e:14:32:7e:9d:33:67:fd:d4:a6:a3:
                    b8:57:d7:42:f7:a1:33:84:f7:5e:d5:58:d8:fe:83:
                    60:b3:32:fe:a6:67:03:d5:38:ef:0f:f4:f2:36:29:
                    3e:6d:69:ac:f4:c1:93:a5:90:5f:36:54:44:d2:5f:
                    77:e6:32:6a:62:16:c8:e8:40:29:03:3a:8a:1c:14:
                    34:2a:6f:ff:94:63:bb:67:e6:85:3f:8f:21:23:41:
                    47:18:d2:a0:fe:04:46:7f:9f:34:bf:a5:c8:26:35:
                    a8:55:35:c4:7d:f2:97:28:d0:bd:2d:a4:d0:82:7c:
                    32:ad:b9:16:f1:0d:e4:4f:a8:97:b8:cb:37:b9:fe:
                    5c:24:40:ae:e0:72:d6:e9:e5:8a:b0:89:df:2b:b5:
                    d4:36:d5:07:18:dd:1b:9e:17:93:70:fb:94:92:c2:
                    05:2b:04:0c:15:96:2f:43:83:e0:c5:5f:e7:46:00:
                    4d:52:80:37:e6:50:d1:9b:0c:07:e5:f9:9b:6a:92:
                    8b:3a:d8:ed:f3:c7:b4:cf:ef:30:b8:c4:49:c5:3f:
                    dd:86:fc:50:72:81:bb:e4:97:09:f9:55:e5:f5:16:
                    91:29:de:8c:f3:57:62:7a:26:f2:8e:b7:e5:4a:73:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D6:54:DB:E3:AD:06:E6:37:DE:AE:E7:50:DC:79:C8:E8:B8:D4:01
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030363a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:73:19:fa:35:91:c3:94:cb:bb:eb:e6:65:2d:44:d4:94:42:
         36:a2:99:8e:2a:1c:e8:a0:f0:b8:07:ad:15:20:c1:0d:1b:0c:
         ef:eb:5c:4a:c1:3f:82:b1:ac:63:0a:10:5a:6e:30:ea:58:12:
         ec:82:16:0a:9b:8b:60:c3:79:a4:93:6e:bc:bc:df:14:1e:f4:
         5e:e6:f2:67:45:99:63:1f:5c:16:2e:cb:e7:5e:10:15:13:67:
         00:d5:27:76:71:4b:61:b9:81:48:a3:af:14:8a:4e:a0:e6:18:
         8a:d7:36:4b:7c:c5:d7:fb:7a:09:54:b7:50:be:22:a8:9f:cb:
         4d:f0:e9:5d:89:2e:4b:40:8e:b2:d6:33:90:0f:0c:0c:6c:76:
         39:21:63:1f:64:76:ed:1b:b8:52:e9:4a:0d:e8:c3:6d:fc:56:
         48:3d:90:1b:41:d6:ee:03:12:18:b4:0e:59:b2:32:16:7f:28:
         4e:d8:b3:da:6f:2f:fc:cf:10:e6:c5:37:36:36:cb:8b:c6:b8:
         a7:8f:6d:cd:17:ca:4a:48:33:50:1a:2a:17:bd:1c:13:8b:50:
         13:50:d0:5d:e0:ef:c0:39:2e:0f:d1:40:cb:0c:b7:60:14:1d:
         23:64:f9:fa:4d:ff:af:b1:c6:0f:64:db:52:ad:a7:af:91:bc:
         30:85:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:12:30 2026 by rpki-client