Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/323830343a386231303a3830303a3a2f34382d3438203d3e20323733373039.roa
File:                     323830343a386231303a3830303a3a2f34382d3438203d3e20323733373039.roa (raw, json)
Hash identifier:          3CQYa4eWyUlHPghteP/AEwH6gOVbKsFZ80f8R3QlcOs=
Subject key identifier:   39:C2:E2:42:93:B9:04:47:8C:08:C5:05:D7:2D:C5:6F:87:D2:09:1A
Certificate issuer:       /CN=15ECBBC6CA09DABDA13646561F388D1E4024A25B
Certificate serial:       2608CA7D785C7075037692BE0830391A9D18D57E
Authority key identifier: 15:EC:BB:C6:CA:09:DA:BD:A1:36:46:56:1F:38:8D:1E:40:24:A2:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15ECBBC6CA09DABDA13646561F388D1E4024A25B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/323830343a386231303a3830303a3a2f34382d3438203d3e20323733373039.roa
Signing time:             Sun 06 Sep 2026 18:57:31 +0000
ROA not before:           Sun 06 Sep 2026 18:52:31 +0000
ROA not after:            Sun 05 Sep 2027 18:57:31 +0000
asID:                     273709
IP address blocks:        2804:8b10:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/15ECBBC6CA09DABDA13646561F388D1E4024A25B.crl
                          rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/15ECBBC6CA09DABDA13646561F388D1E4024A25B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15ECBBC6CA09DABDA13646561F388D1E4024A25B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 08:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:08:ca:7d:78:5c:70:75:03:76:92:be:08:30:39:1a:9d:18:d5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ECBBC6CA09DABDA13646561F388D1E4024A25B
        Validity
            Not Before: Sep  6 18:52:31 2026 GMT
            Not After : Sep  5 18:57:31 2027 GMT
        Subject: CN=39C2E24293B904478C08C505D72DC56F87D2091A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:dd:02:60:5d:54:d4:02:82:dd:6e:cb:05:
                    5a:82:56:54:c1:9f:b8:5f:60:bd:e9:d2:f9:d2:53:
                    ba:55:70:57:42:d1:80:0c:7a:dc:b6:91:2e:a4:c6:
                    5a:11:db:2b:b6:2b:b2:3b:94:0c:2b:f7:a3:24:73:
                    a2:6d:7d:94:67:91:a4:2c:51:a0:9a:25:03:52:f8:
                    a9:89:a2:64:f7:a1:6b:6a:a6:13:72:ce:54:94:1e:
                    36:c8:4b:9b:8a:93:31:77:aa:12:04:6c:15:5b:3c:
                    d3:da:dd:79:6d:42:a3:e7:e3:c3:6f:11:3f:6f:08:
                    4c:34:13:b7:0a:a0:0f:4e:13:ae:8f:fa:4f:48:10:
                    ee:2b:87:55:15:d5:27:88:ae:d6:a7:45:c4:0c:40:
                    af:16:a9:df:65:ec:2c:68:90:80:0d:e2:c1:0a:b0:
                    0e:a3:d2:f6:78:5d:03:37:7c:38:14:14:09:f0:bf:
                    93:de:63:03:fa:54:45:6f:5d:b5:0c:1c:c5:51:0c:
                    5e:f1:09:78:d2:66:50:9c:c2:03:ad:d2:1e:20:11:
                    18:6f:2a:90:f2:86:9f:fe:16:4e:dd:ea:1b:d4:f2:
                    f0:c5:c2:70:4a:b4:05:e4:a3:02:4b:0b:9f:72:dc:
                    aa:0d:91:ee:1d:8e:b4:9f:ff:17:b3:eb:62:a1:cc:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C2:E2:42:93:B9:04:47:8C:08:C5:05:D7:2D:C5:6F:87:D2:09:1A
            X509v3 Authority Key Identifier:
                keyid:15:EC:BB:C6:CA:09:DA:BD:A1:36:46:56:1F:38:8D:1E:40:24:A2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/15ECBBC6CA09DABDA13646561F388D1E4024A25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15ECBBC6CA09DABDA13646561F388D1E4024A25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/323830343a386231303a3830303a3a2f34382d3438203d3e20323733373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b10:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:6a:e0:3d:19:cc:f2:29:44:05:77:60:55:6e:b9:7e:11:
         cd:9d:35:18:6d:c8:ea:02:91:b2:31:d7:25:e8:05:6c:19:0c:
         ea:69:97:d6:1e:d6:fb:82:36:45:36:31:eb:48:7f:48:6d:5f:
         b8:c6:dc:1d:61:5a:b6:78:44:d6:9a:e2:37:b2:da:7f:a7:32:
         70:4b:32:be:56:c7:fa:b9:8f:34:7d:bf:89:cc:f2:6e:89:a3:
         0e:c2:6b:d0:3a:c7:93:bb:6c:d4:61:50:0d:11:26:0c:05:4c:
         b0:bc:bd:3a:86:90:50:0b:51:b7:31:67:c6:93:e2:8d:71:c8:
         16:98:ba:ea:06:37:49:e8:49:16:d5:ad:d8:3f:4a:22:f1:4c:
         44:47:0f:b8:79:28:3a:83:bb:1b:51:ae:a5:80:dc:7c:1c:ea:
         49:b8:45:34:c7:5f:2b:6b:9c:dc:4f:c0:1e:dd:85:6f:c0:4c:
         bf:18:ba:7c:3a:11:41:7f:36:9a:55:6b:45:12:ec:94:e2:1e:
         9e:60:0b:42:f6:45:32:4c:19:1f:04:89:54:b4:43:80:fb:35:
         4e:da:41:3d:b7:5b:44:9a:54:6e:d4:67:ca:57:59:20:3e:1e:
         10:32:a6:d4:17:69:bb:9a:9d:d4:d9:9f:e3:74:7e:84:e8:c6:
         8d:be:10:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:13:35 2026 by rpki-client