Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a623030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a623030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          NClatBvTYy+brrpgQZ9Zowsc8TPtF01vicZjI3VdtN4=
Subject key identifier:   8F:96:E6:30:72:1E:E6:D3:49:C6:93:24:37:40:23:CB:43:FF:77:3F
Certificate issuer:       /CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
Certificate serial:       6524B7E36A9A3E0DC001AB0CBCF1A8397F48DE98
Authority key identifier: 0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a623030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Tue 18 Aug 2026 12:28:59 +0000
ROA not before:           Tue 18 Aug 2026 12:23:59 +0000
ROA not after:            Tue 17 Aug 2027 12:28:59 +0000
asID:                     272569
IP address blocks:        2804:8548:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:24:b7:e3:6a:9a:3e:0d:c0:01:ab:0c:bc:f1:a8:39:7f:48:de:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
        Validity
            Not Before: Aug 18 12:23:59 2026 GMT
            Not After : Aug 17 12:28:59 2027 GMT
        Subject: CN=8F96E630721EE6D349C69324374023CB43FF773F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:8d:b5:fb:5a:a0:89:f0:17:85:af:cf:e0:
                    b5:b5:e3:93:ae:c3:77:4c:14:8f:56:b7:54:44:5a:
                    fd:3d:d4:f4:43:22:9d:6d:90:d6:d6:60:21:04:88:
                    a3:2b:dc:ed:37:60:fd:b4:b2:8d:a4:27:71:b8:1a:
                    28:2e:60:a0:c7:25:59:dc:e3:c1:15:fc:c7:57:de:
                    c3:1f:2e:5f:03:72:74:c3:71:0a:40:11:08:e5:62:
                    1e:1b:36:65:94:21:00:42:7d:5f:82:3b:d2:96:46:
                    87:c3:3a:49:67:3e:e0:eb:32:a8:5a:58:46:45:f8:
                    e8:58:71:24:5d:cf:f9:3a:2b:6b:35:36:f2:03:a2:
                    db:bf:f9:be:91:7f:77:5e:a5:24:89:2e:4f:b1:06:
                    b3:6d:1e:24:95:5c:13:18:8a:d1:75:4a:2e:57:d1:
                    91:7f:b6:75:78:22:82:22:91:4f:e8:df:9d:4e:d0:
                    bf:d3:76:11:6d:1a:16:59:1e:4c:34:f9:2b:89:2f:
                    3d:f1:bb:52:30:d9:6b:8a:4a:28:9e:7b:e9:bd:5b:
                    f1:43:66:d8:78:ee:a0:3d:b8:18:5e:41:f2:c7:c2:
                    42:57:fe:57:ae:73:4a:6d:8a:01:86:86:7a:fc:85:
                    de:b8:43:58:cc:6d:a9:a6:4a:87:5a:98:ac:6a:4b:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:96:E6:30:72:1E:E6:D3:49:C6:93:24:37:40:23:CB:43:FF:77:3F
            X509v3 Authority Key Identifier:
                keyid:0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a623030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:7a:1b:ef:6e:fa:a1:a9:d9:70:50:43:da:ed:59:0f:cc:55:
         19:59:cf:6e:76:7c:34:61:05:88:6d:12:11:ae:72:bc:fc:7b:
         b5:26:bc:1d:26:17:d9:9c:a3:a1:c5:3f:3e:b0:c6:0b:e0:15:
         d1:92:fa:5f:da:ab:44:f3:16:4c:79:41:e9:1c:4d:f4:84:b7:
         3e:78:44:34:55:17:c9:0b:92:79:c5:fd:59:d6:f9:8a:ec:5b:
         ec:6c:86:fc:3f:a3:76:37:9b:a0:94:d0:ca:f5:56:4d:d5:b9:
         4f:63:85:35:7e:a8:5e:45:63:ca:57:57:ec:e8:71:a4:f8:76:
         4e:a1:ab:44:bf:ee:b6:42:b6:e2:35:30:8f:d8:2e:d3:b1:42:
         67:ef:60:4e:c9:c8:05:d1:a3:fb:20:b7:c4:5a:c9:06:c7:6b:
         3e:f2:e4:9b:68:10:54:c9:2b:35:80:3b:4c:71:63:7f:19:a6:
         91:d2:3a:39:e9:8a:4e:12:c0:dd:f3:5f:59:55:a4:6c:e0:68:
         d1:73:18:aa:6a:9f:4c:04:ec:44:9c:95:04:4a:48:7c:14:c5:
         4c:1e:e5:af:f6:20:7f:0e:93:22:53:ca:4e:30:ff:dc:7b:07:
         a8:ee:e0:88:0e:eb:47:4b:55:fc:5b:0a:be:65:28:5e:5f:a3:
         f5:5e:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 22:47:16 2026 by rpki-client