Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/323830343a346462633a3a2f33322d313238203d3e20323638323136.roa
File:                     323830343a346462633a3a2f33322d313238203d3e20323638323136.roa (raw, json)
Hash identifier:          qCwk8FDjh/IgNjRwtw/GE6d7KUKDYd5CGLagbhjoxwU=
Subject key identifier:   F1:2E:C8:C4:89:44:7C:59:06:A5:03:CA:AB:7C:85:30:E0:68:A9:D4
Certificate issuer:       /CN=BDEEC2CFED8D526DA6E87259DCD4C734C7AFF715
Certificate serial:       600A5B7DC7289BFD0CDB48B6471DCF92C4D30226
Authority key identifier: BD:EE:C2:CF:ED:8D:52:6D:A6:E8:72:59:DC:D4:C7:34:C7:AF:F7:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEEC2CFED8D526DA6E87259DCD4C734C7AFF715.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/323830343a346462633a3a2f33322d313238203d3e20323638323136.roa
Signing time:             Wed 26 Aug 2026 17:55:57 +0000
ROA not before:           Wed 26 Aug 2026 17:50:57 +0000
ROA not after:            Wed 25 Aug 2027 17:55:57 +0000
asID:                     268216
IP address blocks:        2804:4dbc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/BDEEC2CFED8D526DA6E87259DCD4C734C7AFF715.crl
                          rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/BDEEC2CFED8D526DA6E87259DCD4C734C7AFF715.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEEC2CFED8D526DA6E87259DCD4C734C7AFF715.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 17:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0a:5b:7d:c7:28:9b:fd:0c:db:48:b6:47:1d:cf:92:c4:d3:02:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEEC2CFED8D526DA6E87259DCD4C734C7AFF715
        Validity
            Not Before: Aug 26 17:50:57 2026 GMT
            Not After : Aug 25 17:55:57 2027 GMT
        Subject: CN=F12EC8C489447C5906A503CAAB7C8530E068A9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:23:3b:f7:3f:2b:06:18:17:a2:5a:64:39:35:
                    08:c6:fa:69:76:e7:8c:9a:87:a0:70:00:13:78:93:
                    20:68:9f:dd:f8:81:4e:2e:e3:c5:12:03:c2:d3:d3:
                    b3:f4:06:10:91:5f:92:33:3b:62:7d:7d:3b:ec:51:
                    2f:bc:08:29:15:6b:43:97:e2:0d:ed:7a:81:73:d9:
                    e6:1e:09:64:f5:c4:67:cb:a2:6d:0e:07:43:cf:01:
                    65:99:fa:6a:cb:e0:f1:f3:96:5a:23:c2:da:dd:ab:
                    52:3e:30:fd:41:9e:5f:9c:25:a1:d3:4a:85:3e:8b:
                    e6:17:86:f5:d9:8d:0c:0d:0b:07:32:0c:17:ae:60:
                    d1:a7:8c:41:b6:c4:17:a3:73:a3:f8:67:bd:90:a4:
                    9f:61:a0:cb:ea:3f:97:78:31:51:a3:92:62:c5:5e:
                    d9:0e:f6:74:4a:a7:8e:4e:6c:f9:98:c0:9a:06:91:
                    a0:86:ab:c1:ec:11:1b:3c:f2:64:bc:c5:cc:ef:56:
                    9a:f3:af:bb:59:17:e4:2b:02:2d:67:7a:cf:31:39:
                    9c:5b:2c:2d:81:5b:f3:ed:6f:70:29:be:8a:c4:f0:
                    25:1d:83:51:67:54:fb:52:c0:f3:5d:5f:40:87:ea:
                    1b:43:7b:b9:33:06:4e:1e:00:30:12:10:93:17:8a:
                    88:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2E:C8:C4:89:44:7C:59:06:A5:03:CA:AB:7C:85:30:E0:68:A9:D4
            X509v3 Authority Key Identifier:
                keyid:BD:EE:C2:CF:ED:8D:52:6D:A6:E8:72:59:DC:D4:C7:34:C7:AF:F7:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/BDEEC2CFED8D526DA6E87259DCD4C734C7AFF715.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEEC2CFED8D526DA6E87259DCD4C734C7AFF715.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/323830343a346462633a3a2f33322d313238203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:9c:a1:f5:38:8f:cf:5f:38:ec:e5:fd:5b:1f:bb:10:cf:88:
         5c:d6:51:b6:cc:82:cc:14:56:ac:bb:ea:3f:64:0e:ae:a7:06:
         ab:27:ee:22:e6:46:e4:9a:63:00:b8:54:94:3b:82:1f:28:ee:
         ce:d2:e1:a2:cd:c2:f5:f3:f4:5b:b8:be:02:a7:c6:25:78:e8:
         7f:bb:e5:53:4b:99:5a:00:8e:9a:28:34:18:31:f0:7a:9a:e2:
         35:5e:3b:6c:eb:66:8c:12:41:ea:b1:41:e1:3a:e4:ff:47:b5:
         c9:c5:1d:1e:24:62:16:7a:13:22:a3:d3:5a:08:a8:20:a7:8a:
         84:af:2e:b9:40:d7:13:e1:78:6f:f5:2a:c7:8d:9f:f1:2d:3a:
         0b:02:c5:1a:6c:1c:a6:be:b3:61:a2:f2:8b:3e:cf:04:6a:b1:
         b6:27:2e:eb:22:5e:5a:7e:1c:9f:96:70:76:fd:b2:b3:3f:8f:
         88:ab:c1:eb:97:ce:68:8e:c0:df:fd:51:08:da:46:56:28:ab:
         2f:a1:08:1a:37:22:71:c7:59:3c:5f:d8:42:0c:ab:99:b2:81:
         5e:24:89:99:3d:61:d7:27:e7:e6:f2:99:e7:65:be:d2:00:79:
         0a:fa:79:df:75:ca:da:f9:e1:2e:19:d3:6d:41:3d:35:e9:01:
         c7:0b:cf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:46:27 2026 by rpki-client