Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/323830343a383162303a3a2f33322d3438203d3e20323732343730.roa
File:                     323830343a383162303a3a2f33322d3438203d3e20323732343730.roa (raw, json)
Hash identifier:          8sJRaBSk/b0O/4ErSiT0S8cbZWphb/5LW84Cn8kLgLY=
Subject key identifier:   1A:66:24:3D:53:73:78:9F:1B:D5:75:97:B1:A3:07:C9:26:51:4E:33
Certificate issuer:       /CN=E23EFB2C8115F36C5CE734B469D247AB25869530
Certificate serial:       34EAFF517694D33685C622C49247B7A195F22825
Authority key identifier: E2:3E:FB:2C:81:15:F3:6C:5C:E7:34:B4:69:D2:47:AB:25:86:95:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E23EFB2C8115F36C5CE734B469D247AB25869530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/323830343a383162303a3a2f33322d3438203d3e20323732343730.roa
Signing time:             Tue 29 Sep 2026 17:37:38 +0000
ROA not before:           Tue 29 Sep 2026 17:32:38 +0000
ROA not after:            Tue 28 Sep 2027 17:37:38 +0000
asID:                     272470
IP address blocks:        2804:81b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/E23EFB2C8115F36C5CE734B469D247AB25869530.crl
                          rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/E23EFB2C8115F36C5CE734B469D247AB25869530.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E23EFB2C8115F36C5CE734B469D247AB25869530.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 21:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ea:ff:51:76:94:d3:36:85:c6:22:c4:92:47:b7:a1:95:f2:28:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23EFB2C8115F36C5CE734B469D247AB25869530
        Validity
            Not Before: Sep 29 17:32:38 2026 GMT
            Not After : Sep 28 17:37:38 2027 GMT
        Subject: CN=1A66243D5373789F1BD57597B1A307C926514E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:56:d2:ff:fd:90:94:9f:64:8f:4a:52:f2:
                    0b:e5:b1:1b:9e:99:ae:6d:cc:48:8a:ba:56:34:7f:
                    87:f5:61:e4:3e:28:cb:7c:eb:c4:d7:09:76:97:d3:
                    32:2a:8b:ea:1d:8c:2d:23:31:60:c4:fe:25:68:cf:
                    c0:0a:ad:c0:b8:ef:c4:ee:2c:46:7f:03:a0:01:fd:
                    83:c9:1d:a5:88:e9:e0:22:16:9b:53:0d:93:ff:f5:
                    04:0f:0f:e6:b0:c5:2b:b4:9b:ff:c7:ed:06:5f:4b:
                    29:cb:ae:69:e5:91:78:8c:8b:3d:6b:00:d2:a7:fa:
                    79:dc:0e:89:f8:b1:08:d0:c5:94:f3:9d:76:39:28:
                    2c:f9:c9:88:08:24:b9:ed:3b:6b:18:53:6d:64:25:
                    76:9c:eb:dd:67:bd:12:df:a5:8b:ba:d5:4e:a1:cb:
                    f3:e2:95:d9:c8:9e:41:76:e5:ec:26:47:e6:20:b7:
                    e5:d6:ce:90:60:4c:e0:78:fa:dd:94:ee:6b:1f:e7:
                    d9:b4:09:17:b1:b6:a9:b1:65:03:1b:0b:13:9e:f2:
                    1c:44:05:d4:04:f2:b4:fe:eb:50:30:4b:7c:2c:a7:
                    65:9b:d2:bc:91:39:b6:24:99:cd:cb:08:cc:e7:fa:
                    d2:fd:36:b2:8b:83:57:c5:6b:71:a6:4e:9f:51:96:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:66:24:3D:53:73:78:9F:1B:D5:75:97:B1:A3:07:C9:26:51:4E:33
            X509v3 Authority Key Identifier:
                keyid:E2:3E:FB:2C:81:15:F3:6C:5C:E7:34:B4:69:D2:47:AB:25:86:95:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/E23EFB2C8115F36C5CE734B469D247AB25869530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E23EFB2C8115F36C5CE734B469D247AB25869530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/323830343a383162303a3a2f33322d3438203d3e20323732343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:28:9c:70:f0:b0:c7:53:fe:f5:1e:82:d3:53:58:aa:4c:bd:
         8f:d8:e3:6b:59:78:ac:cf:a6:00:d8:27:65:64:18:1a:9b:3e:
         a3:2b:c2:ad:36:21:c3:51:45:ae:af:bd:a3:9d:6b:b8:54:91:
         90:e5:71:15:fe:b0:9e:bf:74:4f:07:8a:bf:be:32:ca:a0:80:
         ee:22:5e:12:e1:c6:bf:a9:da:a1:f1:5d:df:7e:8c:33:e5:5c:
         98:62:13:e9:cf:02:16:d1:24:33:e5:a3:78:ab:e3:44:27:bd:
         57:24:2d:5f:85:15:5b:83:76:fd:f4:78:77:e9:aa:f2:1b:61:
         52:f3:ec:7f:0d:b5:c6:15:49:fb:ba:63:7e:c7:4c:1f:ad:5e:
         6e:0c:5f:64:04:d0:27:bb:73:51:4a:da:02:15:2d:81:d2:0f:
         cd:83:e1:13:f4:27:18:61:7b:72:8c:c5:7a:0b:0f:38:2b:85:
         94:0b:cc:7c:a3:d3:c9:53:8e:bc:e2:b2:b7:e2:24:ac:d2:d8:
         17:c1:52:55:e3:e2:00:f2:39:0b:e8:fe:c6:51:3c:8d:dd:9c:
         50:38:12:c0:e4:e6:70:59:dc:ae:17:80:5b:e5:c8:77:6d:b7:
         27:8d:de:78:1b:f6:60:e0:3b:2c:ce:c7:33:74:83:65:93:15:
         e2:72:cd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:02:37 2026 by rpki-client