Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1/323830343a366163343a3a2f33322d3438203d3e203136393231.roa
File:                     323830343a366163343a3a2f33322d3438203d3e203136393231.roa (raw, json)
Hash identifier:          FF0S+XIkLDGUruwaeqMbdTrRLWMkBj3omR8CKhFucvE=
Subject key identifier:   D2:1C:F7:8B:AB:BC:65:DB:C9:25:55:18:62:FB:27:82:74:5B:02:DA
Certificate issuer:       /CN=B247F8144A91BB00407FF89B639BE9CEFD42F769
Certificate serial:       6D41234DFDCA191B05D0561FF7F8A41389F6E49F
Authority key identifier: B2:47:F8:14:4A:91:BB:00:40:7F:F8:9B:63:9B:E9:CE:FD:42:F7:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B247F8144A91BB00407FF89B639BE9CEFD42F769.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1/323830343a366163343a3a2f33322d3438203d3e203136393231.roa
Signing time:             Fri 09 Oct 2026 14:39:40 +0000
ROA not before:           Fri 09 Oct 2026 14:34:40 +0000
ROA not after:            Fri 08 Oct 2027 14:39:40 +0000
asID:                     16921
IP address blocks:        2804:6ac4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1/B247F8144A91BB00407FF89B639BE9CEFD42F769.crl
                          rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1/B247F8144A91BB00407FF89B639BE9CEFD42F769.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B247F8144A91BB00407FF89B639BE9CEFD42F769.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 22:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:41:23:4d:fd:ca:19:1b:05:d0:56:1f:f7:f8:a4:13:89:f6:e4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B247F8144A91BB00407FF89B639BE9CEFD42F769
        Validity
            Not Before: Oct  9 14:34:40 2026 GMT
            Not After : Oct  8 14:39:40 2027 GMT
        Subject: CN=D21CF78BABBC65DBC925551862FB2782745B02DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:8b:72:e9:77:a0:21:b1:ee:23:6a:8a:31:
                    4e:34:77:fb:12:04:69:8e:fb:7c:59:ea:d0:89:78:
                    83:14:9d:50:3c:71:cd:cc:bd:c6:ad:b2:2c:02:69:
                    b0:4b:1c:6e:5c:9e:49:12:0a:4a:5d:18:8b:ee:3f:
                    f6:61:b4:df:a1:c2:02:23:73:01:ec:13:3d:b0:e5:
                    2b:91:3f:2c:08:92:94:2f:a0:1f:22:ef:79:94:46:
                    62:11:f0:e6:d6:6b:22:fa:cb:bd:78:8d:ee:f7:48:
                    b7:56:52:5f:50:ae:48:28:1b:09:76:3a:9a:ff:ff:
                    fd:3e:a6:fd:ad:37:fc:58:7d:4a:5a:a9:a6:d8:d9:
                    66:48:74:b6:44:1a:94:d6:a8:e0:71:15:2d:e2:55:
                    a3:cb:1b:ca:02:5a:2b:12:ea:33:eb:68:57:d3:ea:
                    f9:2d:b4:26:09:a6:7e:85:ef:19:94:57:aa:3b:f8:
                    e5:60:14:f8:9b:74:90:e6:fd:d6:47:2d:14:a0:c5:
                    b1:f3:26:d1:a6:db:8c:2e:92:22:7e:8f:11:7a:ea:
                    45:03:57:7f:57:a1:9f:b9:d3:2d:22:f8:3b:c0:fd:
                    e1:7b:13:fc:76:f9:b7:18:94:6b:10:6c:96:27:24:
                    42:36:0e:b4:f0:48:dd:a9:8a:f3:8e:ca:da:3a:c7:
                    66:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1C:F7:8B:AB:BC:65:DB:C9:25:55:18:62:FB:27:82:74:5B:02:DA
            X509v3 Authority Key Identifier:
                keyid:B2:47:F8:14:4A:91:BB:00:40:7F:F8:9B:63:9B:E9:CE:FD:42:F7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1/B247F8144A91BB00407FF89B639BE9CEFD42F769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B247F8144A91BB00407FF89B639BE9CEFD42F769.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/1/323830343a366163343a3a2f33322d3438203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:b7:af:11:4b:89:d1:1c:08:a4:47:35:95:ea:61:e9:4e:18:
         3f:c6:fb:df:9b:3f:43:04:c5:fe:de:a4:2d:a3:80:74:0e:76:
         4a:31:28:a9:4f:1f:70:36:c8:ec:30:d1:c8:b9:0a:f6:e0:67:
         d9:dd:c9:41:66:14:9e:03:aa:c5:75:1c:14:b7:f5:5a:7c:cc:
         cb:ba:7e:e2:1d:ff:f0:89:a0:f4:3b:2f:df:d8:6d:56:fc:61:
         45:78:a8:36:d2:7f:a4:90:8d:80:2f:7c:76:a7:6a:60:f2:f0:
         9f:30:bc:27:42:50:be:e1:97:d2:7d:b3:cb:c2:40:bf:c2:c5:
         2d:c0:7c:dc:29:ea:fd:15:2b:6e:2d:9c:ce:b5:5d:5f:c1:ef:
         23:12:21:0c:47:7f:da:a1:f4:e9:ae:2a:d4:c1:14:71:83:1f:
         84:76:48:5e:55:b6:bc:a6:0d:2b:29:17:5f:c9:0c:72:e0:33:
         1b:ae:2d:4a:7f:ea:e4:0c:1f:4b:bf:a8:34:57:87:f4:a2:6a:
         27:98:47:48:65:7f:be:32:c7:78:b4:09:a1:b1:f7:4e:6e:56:
         83:42:a1:16:c6:05:0c:f4:4f:1c:21:3f:c4:d9:a9:1d:c8:81:
         3c:68:a5:3f:c7:3e:3b:25:61:ad:7f:d9:fd:51:7c:e7:06:e2:
         3e:2b:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:24:19 2026 by rpki-client