Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/323830343a363266343a3a2f33322d313238203d3e20323639333330.roa
File:                     323830343a363266343a3a2f33322d313238203d3e20323639333330.roa (raw, json)
Hash identifier:          AOufJ49AvHLXmiRVyXt+8vXU8F0mu2vTPZ7RCuCAymo=
Subject key identifier:   9A:60:42:33:BD:F6:37:F8:18:B1:B2:2A:CA:6E:67:99:20:82:EA:2C
Certificate issuer:       /CN=6545F594C81E03CA80107611F7A05BD2E940F666
Certificate serial:       0E0A6CB600E5637221A2C48A9A14324EA9A1C3D0
Authority key identifier: 65:45:F5:94:C8:1E:03:CA:80:10:76:11:F7:A0:5B:D2:E9:40:F6:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6545F594C81E03CA80107611F7A05BD2E940F666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/323830343a363266343a3a2f33322d313238203d3e20323639333330.roa
Signing time:             Sat 29 Aug 2026 23:21:46 +0000
ROA not before:           Sat 29 Aug 2026 23:16:46 +0000
ROA not after:            Sat 28 Aug 2027 23:21:46 +0000
asID:                     269330
IP address blocks:        2804:62f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/6545F594C81E03CA80107611F7A05BD2E940F666.crl
                          rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/6545F594C81E03CA80107611F7A05BD2E940F666.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6545F594C81E03CA80107611F7A05BD2E940F666.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 06:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0a:6c:b6:00:e5:63:72:21:a2:c4:8a:9a:14:32:4e:a9:a1:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6545F594C81E03CA80107611F7A05BD2E940F666
        Validity
            Not Before: Aug 29 23:16:46 2026 GMT
            Not After : Aug 28 23:21:46 2027 GMT
        Subject: CN=9A604233BDF637F818B1B22ACA6E67992082EA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:f9:20:e2:0a:da:41:a7:99:57:bb:a8:ac:
                    35:3b:fb:56:72:b8:e3:00:1f:b4:cd:c6:6d:52:2f:
                    0b:0d:e2:bd:d7:db:98:47:4e:fa:ce:67:5f:cb:6c:
                    a6:f3:48:c3:aa:75:4b:80:51:ae:4c:43:eb:9b:7c:
                    82:9e:d3:e2:32:e7:33:6b:b8:81:d5:d4:47:11:93:
                    69:e4:c1:92:a3:2c:eb:24:e6:35:a9:0e:f6:01:e3:
                    f3:55:ab:26:54:0a:05:be:30:63:8b:8f:97:e4:1b:
                    c7:57:46:bc:68:80:20:b3:df:a8:02:2b:51:1e:ff:
                    7b:38:5e:ab:3a:65:1f:f5:a3:d6:27:f6:43:19:51:
                    68:9d:5c:49:f3:b2:5a:b6:9e:87:69:5d:7f:04:b6:
                    ac:9f:2e:1f:da:17:83:f9:0e:40:fa:c5:9c:73:43:
                    ae:d3:99:06:07:91:81:ce:e0:6a:95:96:22:f9:f7:
                    eb:5d:4c:bd:a1:28:5f:8d:cb:35:f8:6b:c1:71:2d:
                    37:8c:3f:87:ce:28:09:b1:f0:48:75:8b:53:b6:44:
                    37:12:eb:2b:03:7d:19:f9:11:9a:06:11:99:f0:e0:
                    eb:55:06:e7:37:83:ec:31:4c:31:1c:3a:d9:76:3f:
                    2b:81:6c:ce:46:62:0d:8e:ed:c5:72:b7:0f:19:fd:
                    4a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:60:42:33:BD:F6:37:F8:18:B1:B2:2A:CA:6E:67:99:20:82:EA:2C
            X509v3 Authority Key Identifier:
                keyid:65:45:F5:94:C8:1E:03:CA:80:10:76:11:F7:A0:5B:D2:E9:40:F6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/6545F594C81E03CA80107611F7A05BD2E940F666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6545F594C81E03CA80107611F7A05BD2E940F666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/323830343a363266343a3a2f33322d313238203d3e20323639333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:85:80:69:aa:06:73:c2:4d:96:68:43:c7:b7:04:1f:f3:2e:
         ab:bf:6c:cd:e6:ec:80:93:02:17:78:a5:cb:db:12:07:54:ea:
         d8:be:65:74:48:d4:7f:fb:c2:1b:ba:a5:37:8b:d5:04:49:9d:
         70:6b:03:77:c7:df:3d:d1:ef:c5:ab:93:df:17:9a:20:57:93:
         51:0e:8a:c1:5a:f6:fb:c6:8f:c6:19:17:d5:4e:6a:32:34:76:
         e8:9c:1b:94:4f:73:f5:1c:7d:3e:dd:f8:cb:9a:8f:4c:a8:59:
         27:b5:79:de:2b:1c:39:4c:5e:d4:15:3b:7f:1c:4c:e7:97:2a:
         6d:d9:3d:15:b7:71:a8:32:3d:85:15:74:b5:db:c6:05:ec:fb:
         a6:fa:fb:e8:00:66:59:1b:fc:43:73:7d:c4:c8:b2:36:e6:dc:
         96:51:2f:9a:55:9d:6b:f3:25:27:c3:0c:81:42:b5:3a:e5:3e:
         11:50:67:99:ee:f6:13:20:7a:ac:d7:90:43:5f:dd:70:54:c7:
         7f:1f:29:6e:e9:c4:5f:f7:85:20:fb:08:1b:22:52:9b:30:7c:
         56:15:ee:77:5b:f7:91:0d:fb:95:34:ba:2e:9a:fc:6a:ed:f7:
         ef:cb:98:b8:43:87:2f:42:e1:06:21:8f:6e:f2:eb:99:03:91:
         56:64:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:28:52 2026 by rpki-client