Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/323830343a353830383a3a2f33322d3334203d3e20323638313031.roa
File:                     323830343a353830383a3a2f33322d3334203d3e20323638313031.roa (raw, json)
Hash identifier:          8/chp3Vg8u9XTXy+n/X1LmpM1+W9K+VIaL8X6stydnQ=
Subject key identifier:   14:B9:2D:E1:33:7F:37:92:24:5C:60:23:B5:C4:BC:45:A6:BA:F0:3B
Certificate issuer:       /CN=0A29F6E2AAF63F6EADE50DE80645B410F6B9784A
Certificate serial:       1FA0629C0B0E61B89DB6CBF72D8DC976021BF8B0
Authority key identifier: 0A:29:F6:E2:AA:F6:3F:6E:AD:E5:0D:E8:06:45:B4:10:F6:B9:78:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A29F6E2AAF63F6EADE50DE80645B410F6B9784A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/323830343a353830383a3a2f33322d3334203d3e20323638313031.roa
Signing time:             Fri 21 Aug 2026 03:14:10 +0000
ROA not before:           Fri 21 Aug 2026 03:09:10 +0000
ROA not after:            Fri 20 Aug 2027 03:14:10 +0000
asID:                     268101
IP address blocks:        2804:5808::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/0A29F6E2AAF63F6EADE50DE80645B410F6B9784A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/0A29F6E2AAF63F6EADE50DE80645B410F6B9784A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A29F6E2AAF63F6EADE50DE80645B410F6B9784A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a0:62:9c:0b:0e:61:b8:9d:b6:cb:f7:2d:8d:c9:76:02:1b:f8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A29F6E2AAF63F6EADE50DE80645B410F6B9784A
        Validity
            Not Before: Aug 21 03:09:10 2026 GMT
            Not After : Aug 20 03:14:10 2027 GMT
        Subject: CN=14B92DE1337F3792245C6023B5C4BC45A6BAF03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:ec:f2:3c:e0:bd:d8:0d:c3:df:75:8d:64:
                    4b:9d:70:f0:05:1b:1d:9d:32:62:44:b5:0f:5e:b6:
                    17:35:fa:cc:a2:9a:2c:42:c7:3b:f9:39:74:14:10:
                    17:0a:f0:f6:d0:60:a3:ba:0a:2c:be:51:ca:8f:3b:
                    7c:98:de:d9:4f:9b:0a:fc:81:19:e8:b0:03:16:a8:
                    85:ad:9d:f0:fb:26:8c:e9:8e:7e:02:f5:cf:06:9c:
                    9a:7f:6f:37:02:92:be:8c:cc:ee:a5:c9:50:38:f8:
                    3e:23:87:65:8f:55:ba:ea:37:ba:9c:e1:0c:d1:ef:
                    b9:f0:62:f6:6e:3a:80:0b:17:4e:f8:4f:a0:f1:17:
                    2c:1a:1d:80:f2:a9:05:71:0e:99:88:c8:3a:d9:1e:
                    57:cf:f8:77:ad:c3:a9:60:c2:9f:e0:f3:32:34:fc:
                    ef:72:bc:4d:45:5d:72:0e:51:6b:2f:06:85:13:ab:
                    cf:05:de:fa:e0:6d:67:81:6d:60:7a:73:8a:c7:00:
                    55:0a:f3:13:48:97:7d:7c:70:7c:28:9c:2a:40:45:
                    96:8a:0d:25:dc:16:a8:8e:4a:90:78:27:f8:06:32:
                    17:a6:e6:58:d8:b5:23:d1:9a:2e:ae:d6:ba:5f:33:
                    f3:d3:98:3b:41:d8:a5:95:6f:e3:b4:9e:d3:c7:0b:
                    b6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B9:2D:E1:33:7F:37:92:24:5C:60:23:B5:C4:BC:45:A6:BA:F0:3B
            X509v3 Authority Key Identifier:
                keyid:0A:29:F6:E2:AA:F6:3F:6E:AD:E5:0D:E8:06:45:B4:10:F6:B9:78:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/0A29F6E2AAF63F6EADE50DE80645B410F6B9784A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A29F6E2AAF63F6EADE50DE80645B410F6B9784A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/323830343a353830383a3a2f33322d3334203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5808::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:bc:a0:b2:3d:e8:b0:aa:e7:bb:2d:91:33:6a:e7:b2:4a:
         0d:b5:d2:37:a9:52:f3:42:e7:e7:8e:b0:5e:84:93:31:ca:c7:
         da:53:a7:0a:03:6b:02:9d:75:9a:cc:11:4a:ce:12:13:bc:6d:
         23:74:60:1b:aa:fa:67:07:aa:4b:8f:ff:5e:20:33:6f:ce:df:
         5f:6c:68:e8:eb:15:cf:7f:09:da:49:b6:bd:1b:6c:ef:73:cf:
         d6:cc:ea:b4:9f:45:c5:f6:33:79:5c:d2:bb:5d:a4:20:9e:72:
         a6:d0:77:80:80:25:8c:09:7f:64:c3:4e:7e:7b:0b:ea:51:31:
         4b:d1:4f:90:3d:03:18:b4:c0:b4:2e:0f:33:07:0c:0d:aa:78:
         62:6d:68:38:86:f7:97:28:15:ba:94:cc:61:36:82:f7:78:65:
         33:2a:e0:80:ab:e7:3f:fd:d0:8a:28:3f:0b:fc:da:39:dc:ce:
         97:69:19:29:e7:9d:e7:07:e4:d5:fb:88:2c:7d:f2:f6:c8:64:
         68:4d:5a:13:6e:7b:52:75:0a:29:79:bd:2e:27:85:66:0b:15:
         e9:72:63:77:09:28:93:ea:2b:95:39:d7:3e:2d:be:56:27:8f:
         c2:ff:ee:1d:6b:76:86:e7:14:90:ed:cb:3b:bf:6f:80:ba:f8:
         9e:f9:b7:01
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH6BinAsOYbidtsv3LY3JdgIb+LAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyOUY2RTJBQUY2M0Y2RUFERTUwREU4MDY0NUI0MTBG
NkI5Nzg0QTAeFw0yNjA4MjEwMzA5MTBaFw0yNzA4MjAwMzE0MTBaMDMxMTAvBgNV
BAMTKDE0QjkyREUxMzM3RjM3OTIyNDVDNjAyM0I1QzRCQzQ1QTZCQUYwM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA+zyPOC92A3D33WNZEudcPAF
Gx2dMmJEtQ9ethc1+syimixCxzv5OXQUEBcK8PbQYKO6Ciy+UcqPO3yY3tlPmwr8
gRnosAMWqIWtnfD7Jozpjn4C9c8GnJp/bzcCkr6MzO6lyVA4+D4jh2WPVbrqN7qc
4QzR77nwYvZuOoALF074T6DxFywaHYDyqQVxDpmIyDrZHlfP+Hetw6lgwp/g8zI0
/O9yvE1FXXIOUWsvBoUTq88F3vrgbWeBbWB6c4rHAFUK8xNIl318cHwonCpARZaK
DSXcFqiOSpB4J/gGMhem5ljYtSPRmi6u1rpfM/PTmDtB2KWVb+O0ntPHC7bZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFLkt4TN/N5IkXGAjtcS8Raa68DswHwYDVR0j
BBgwFoAUCin24qr2P26t5Q3oBkW0EPa5eEowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpL
TlgvMC8wQTI5RjZFMkFBRjYzRjZFQURFNTBERTgwNjQ1QjQxMEY2Qjk3ODRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMjlGNkUyQUFGNjNGNkVB
REU1MERFODA2NDVCNDEwRjZCOTc4NEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVSalZhYTJZTnN2U3kyNVlUdkxudnUxdVNlU1BkS3JTTjI3TlhDdXFKS05YLzAv
MzIzODMwMzQzYTM1MzgzMDM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzEzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYCDANBgkqhkiG9w0BAQsFAAOCAQEAXoe8oLI9
6LCq57stkTNq57JKDbXSN6lS80Ln546wXoSTMcrH2lOnCgNrAp11mswRSs4SE7xt
I3RgG6r6ZweqS4//XiAzb87fX2xo6OsVz38J2km2vRts73PP1szqtJ9FxfYzeVzS
u12kIJ5yptB3gIAljAl/ZMNOfnsL6lExS9FPkD0DGLTAtC4PMwcMDap4Ym1oOIb3
lygVupTMYTaC93hlMyrggKvnP/3Qiig/C/zaOdzOl2kZKeed5wfk1fuILH3y9shk
aE1aE257UnUKKXm9LieFZgsV6XJjdwkok+orlTnXPi2+ViePwv/uHWt2hucUkO3L
O79vgLr4nvm3AQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:10:05 2026 by rpki-client