Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33342d3334203d3e20323732353639.roa
File:                     323830343a383534383a3a2f33342d3334203d3e20323732353639.roa (raw, json)
Hash identifier:          exG1DD9dEe7Oe31sKgGsjOMEI9jj9zWcv5voZZLOgGQ=
Subject key identifier:   14:E1:16:D6:ED:D8:FC:F7:1A:D5:1D:13:AC:6B:10:6F:4C:8A:69:A8
Certificate issuer:       /CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
Certificate serial:       09019AD95C2E2C21960DF86727CBCD64067FDD81
Authority key identifier: 0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33342d3334203d3e20323732353639.roa
Signing time:             Tue 18 Aug 2026 12:27:21 +0000
ROA not before:           Tue 18 Aug 2026 12:22:21 +0000
ROA not after:            Tue 17 Aug 2027 12:27:21 +0000
asID:                     272569
IP address blocks:        2804:8548::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:01:9a:d9:5c:2e:2c:21:96:0d:f8:67:27:cb:cd:64:06:7f:dd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
        Validity
            Not Before: Aug 18 12:22:21 2026 GMT
            Not After : Aug 17 12:27:21 2027 GMT
        Subject: CN=14E116D6EDD8FCF71AD51D13AC6B106F4C8A69A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:be:40:1b:a9:b8:24:d9:c7:87:34:1a:8d:
                    21:d6:99:78:05:e8:5e:3c:f5:53:4e:f8:e2:47:74:
                    1b:4f:26:8d:e9:c5:e1:49:1f:88:50:9c:0d:2a:c7:
                    16:42:e3:10:e4:c6:42:29:34:4c:13:72:94:3c:e2:
                    af:58:d7:9d:32:e2:75:ed:c1:e4:b0:a1:c2:30:62:
                    37:01:9b:b1:32:33:bb:11:a5:86:f8:3a:49:4b:0e:
                    2e:48:39:66:d5:33:f3:12:70:c1:6c:fa:03:18:5f:
                    39:df:c8:f1:7a:2c:37:c4:27:45:52:36:60:1f:f0:
                    6d:d1:5d:3b:77:d2:2b:e2:51:87:fa:99:8f:d1:4d:
                    22:a2:8c:e8:0b:07:e4:7c:24:15:39:b5:68:de:3a:
                    db:06:60:e7:f5:c0:fa:4a:36:38:d5:73:51:4f:8e:
                    eb:89:e9:c2:d3:58:4b:33:06:d0:44:06:e3:a5:77:
                    d5:85:5b:8c:13:6b:87:4a:e0:ce:ad:82:e4:cd:2a:
                    71:a1:17:b0:6b:4f:0e:82:1e:67:96:05:40:d9:a9:
                    d3:31:a3:88:4a:30:a7:c6:d8:ed:b5:c6:90:a5:4e:
                    51:49:7d:59:34:4f:ca:c6:bf:26:d2:bd:61:6b:82:
                    ee:7e:5d:f7:44:af:26:04:e9:92:41:a4:bd:30:2d:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E1:16:D6:ED:D8:FC:F7:1A:D5:1D:13:AC:6B:10:6F:4C:8A:69:A8
            X509v3 Authority Key Identifier:
                keyid:0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33342d3334203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:d2:b4:2a:0d:91:3a:65:4b:0c:b6:6e:de:96:b3:de:57:3a:
         68:de:13:1c:40:bb:df:ed:65:d6:f0:f7:31:99:74:d7:35:44:
         52:f2:70:2d:9a:c0:8c:00:38:42:0d:12:40:53:ba:ff:98:07:
         34:91:4b:c6:da:96:4b:5d:3f:b4:71:9a:6d:88:1d:72:09:15:
         8c:13:6b:1b:29:af:0e:88:94:b9:2c:f0:3b:5d:35:e6:79:2e:
         dd:14:4d:d8:86:c6:a0:74:56:3d:8d:a2:ce:e3:18:b1:71:80:
         a0:6a:df:54:2f:b7:e7:34:39:82:db:ae:f6:56:8a:c0:b8:e7:
         88:fe:2d:6f:89:1c:08:e3:ea:28:6e:a2:97:4f:4f:cd:e4:1c:
         39:3c:3b:0a:78:c0:65:24:94:25:15:c4:19:48:2b:59:12:c4:
         57:36:8e:88:94:23:68:d4:6f:64:09:ca:36:5c:0c:7b:6b:c3:
         78:79:5f:41:43:2a:55:99:b0:fe:66:ce:6e:86:bd:ce:5d:07:
         d5:80:64:ac:11:11:fa:07:56:91:1b:23:28:1c:04:bf:cd:e1:
         f3:0c:a8:1c:54:ac:65:d4:38:43:0c:c7:7e:38:cf:91:0e:f1:
         41:7b:97:4f:1e:bd:8a:14:12:4e:e8:f5:64:ca:2d:9c:08:86:
         0e:3c:c5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:56:40 2026 by rpki-client