Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/323830343a353464633a3a2f33332d3333203d3e20323638363734.roa
File:                     323830343a353464633a3a2f33332d3333203d3e20323638363734.roa (raw, json)
Hash identifier:          dTGRtYr1ET6yGCFM/bnoPAcWUXKB3X8dKU5ELlLs6Ks=
Subject key identifier:   04:8C:10:4E:FE:43:5A:29:02:EC:44:F9:B7:A2:4C:44:72:6C:E1:CF
Certificate issuer:       /CN=434F36A7682F1C0B36BEEDA7D466801534075702
Certificate serial:       6B09EB28C3B7D4DC449669F43A2C332FD5A90836
Authority key identifier: 43:4F:36:A7:68:2F:1C:0B:36:BE:ED:A7:D4:66:80:15:34:07:57:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/323830343a353464633a3a2f33332d3333203d3e20323638363734.roa
Signing time:             Tue 27 Oct 2026 13:11:04 +0000
ROA not before:           Tue 27 Oct 2026 13:06:04 +0000
ROA not after:            Tue 26 Oct 2027 13:11:04 +0000
asID:                     268674
IP address blocks:        2804:54dc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.crl
                          rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 08:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:09:eb:28:c3:b7:d4:dc:44:96:69:f4:3a:2c:33:2f:d5:a9:08:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=434F36A7682F1C0B36BEEDA7D466801534075702
        Validity
            Not Before: Oct 27 13:06:04 2026 GMT
            Not After : Oct 26 13:11:04 2027 GMT
        Subject: CN=048C104EFE435A2902EC44F9B7A24C44726CE1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:3e:fd:cd:c0:68:44:5d:09:e1:ed:56:5a:
                    0e:c8:4e:6c:16:b1:81:37:12:27:c8:4d:79:21:7a:
                    9f:3c:a1:ba:52:99:67:c2:5f:48:aa:89:7f:6b:bb:
                    20:a4:75:51:d6:99:0f:9d:0c:75:b1:1a:74:57:8f:
                    44:9f:44:88:ed:7a:58:74:5e:2f:cf:58:fb:60:69:
                    5b:ec:de:69:85:66:5d:68:7d:a8:86:cd:46:b5:81:
                    b0:e5:92:f7:c6:86:fb:e9:3b:52:4c:93:3e:38:74:
                    27:e6:87:f4:11:20:30:90:ba:a9:80:e8:3c:ab:5d:
                    3b:77:79:27:d7:a1:25:2d:23:d0:11:29:c0:85:ba:
                    aa:f4:24:07:f5:85:5f:aa:4d:8d:fa:c2:b0:15:61:
                    a7:65:52:7b:1c:61:85:b3:ab:88:86:57:aa:04:b2:
                    29:8d:72:3d:fa:af:f2:e5:ec:eb:c9:bc:7d:ec:57:
                    a4:bc:59:34:b9:fe:20:4c:38:8d:5b:60:07:b6:6a:
                    d5:02:4a:70:43:e3:1d:ca:b2:92:e1:0e:b0:0f:a2:
                    ca:4e:5e:45:36:1f:e5:5b:67:c5:f6:dc:71:2a:0e:
                    1a:67:3b:4f:c0:68:d0:b2:fc:0a:5e:02:b5:2a:df:
                    dd:8d:91:1d:e6:13:fe:e5:f8:a4:3a:cc:e3:f5:a2:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8C:10:4E:FE:43:5A:29:02:EC:44:F9:B7:A2:4C:44:72:6C:E1:CF
            X509v3 Authority Key Identifier:
                keyid:43:4F:36:A7:68:2F:1C:0B:36:BE:ED:A7:D4:66:80:15:34:07:57:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/323830343a353464633a3a2f33332d3333203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54dc::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:5e:5f:f7:16:9f:c4:88:53:b9:82:b6:74:a9:5e:4c:19:
         5a:9c:45:e9:75:3f:96:de:b8:81:1f:b4:9e:d3:39:be:d6:04:
         b5:b9:44:6a:3f:68:22:7a:3c:76:f1:90:e7:70:9a:f2:1f:10:
         e9:82:ec:b6:51:5f:fd:54:cf:64:2d:4d:99:b4:bb:84:4d:f0:
         65:bd:28:9d:6b:f9:50:b0:5a:4e:e3:ae:56:a2:af:53:f6:2d:
         19:ac:83:dc:5a:09:c3:f7:7e:5b:cf:63:17:2d:c3:00:b6:29:
         71:35:9f:ad:fd:52:9b:a8:c1:27:d0:8b:b3:f8:99:9d:e8:4d:
         5c:5b:e5:ee:6c:80:66:03:5d:0f:79:1a:5e:e8:fc:8d:10:b7:
         7a:a6:1c:1f:11:0f:25:f7:c2:dc:e2:26:af:0a:d7:f7:9d:60:
         75:5a:75:20:14:6b:d3:8a:c4:de:2b:dc:51:74:e9:50:15:c0:
         a4:c8:c9:88:88:9a:e3:4a:bf:6f:86:f1:dc:fb:cc:c3:53:64:
         a2:33:e5:52:09:59:bf:a8:34:f7:6d:31:ed:ac:1c:c8:20:6a:
         fe:8a:08:73:ec:f3:40:a1:28:57:d7:d4:79:f9:27:38:68:d3:
         42:76:30:13:9c:15:10:fa:3e:d8:14:d0:38:7b:e7:3c:eb:e8:
         11:9b:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----