Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8181Gr8wqi1kPSf3ZxbdUCBG7KmyhiqkVptq9khyUpDK/0/323830343a363338343a3a2f33322d313238203d3e20323639333636.roa
File:                     323830343a363338343a3a2f33322d313238203d3e20323639333636.roa (raw, json)
Hash identifier:          IFE39bq17k0g9FYtNfThrrspabKbd9ReNC0FcMuN4Qk=
Subject key identifier:   8D:63:D8:17:91:D5:25:85:29:9D:2A:3D:96:AE:E2:C2:7B:4F:2E:6F
Certificate issuer:       /CN=EA46E2ABA22D2C63B7AB997DD85353299DC7D827
Certificate serial:       6A7824BDAAA000B08A9C1F134FFAE42B38D4FCC4
Authority key identifier: EA:46:E2:AB:A2:2D:2C:63:B7:AB:99:7D:D8:53:53:29:9D:C7:D8:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA46E2ABA22D2C63B7AB997DD85353299DC7D827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8181Gr8wqi1kPSf3ZxbdUCBG7KmyhiqkVptq9khyUpDK/0/323830343a363338343a3a2f33322d313238203d3e20323639333636.roa
Signing time:             Tue 01 Sep 2026 12:04:09 +0000
ROA not before:           Tue 01 Sep 2026 11:59:09 +0000
ROA not after:            Tue 31 Aug 2027 12:04:09 +0000
asID:                     269366
IP address blocks:        2804:6384::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8181Gr8wqi1kPSf3ZxbdUCBG7KmyhiqkVptq9khyUpDK/0/EA46E2ABA22D2C63B7AB997DD85353299DC7D827.crl
                          rsync://rpki-repo.registro.br/repo/8181Gr8wqi1kPSf3ZxbdUCBG7KmyhiqkVptq9khyUpDK/0/EA46E2ABA22D2C63B7AB997DD85353299DC7D827.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA46E2ABA22D2C63B7AB997DD85353299DC7D827.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:78:24:bd:aa:a0:00:b0:8a:9c:1f:13:4f:fa:e4:2b:38:d4:fc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA46E2ABA22D2C63B7AB997DD85353299DC7D827
        Validity
            Not Before: Sep  1 11:59:09 2026 GMT
            Not After : Aug 31 12:04:09 2027 GMT
        Subject: CN=8D63D81791D52585299D2A3D96AEE2C27B4F2E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:d5:62:ec:72:b5:11:8e:3f:88:cd:56:1a:
                    12:0f:06:2f:e8:e5:eb:78:d5:0b:84:80:c5:71:92:
                    b5:3e:a7:ab:46:7a:2b:57:a1:e4:26:c1:a3:64:a7:
                    09:62:bd:d0:f3:8d:f8:b3:d4:10:46:12:e9:f6:f9:
                    60:ce:11:ce:fe:af:2d:74:e7:aa:f6:b9:77:7c:93:
                    07:c3:48:5d:3f:5b:c4:55:a7:5c:be:a0:08:30:15:
                    d7:1f:9d:62:81:ca:e2:86:87:7d:9a:8e:ff:5f:84:
                    1c:68:20:f8:1f:25:53:b2:b9:34:0c:26:9a:a2:9a:
                    81:a0:92:36:c0:84:01:79:96:8f:90:f0:73:4d:3c:
                    61:90:3f:84:45:f1:ca:8f:a9:30:89:a9:f4:74:25:
                    41:a6:b0:a4:47:5f:41:57:eb:56:c5:3f:df:b3:2d:
                    bb:21:b0:38:97:51:5f:1d:4e:e7:ce:0d:d1:c5:81:
                    fe:2a:66:4c:c1:b5:b9:91:11:29:91:fc:3d:90:4b:
                    ce:53:0d:72:e9:17:6b:da:b5:3d:cb:71:13:35:ce:
                    2a:1a:07:1d:e4:50:aa:19:5b:39:52:67:fb:f7:9f:
                    23:62:f6:11:7e:70:67:69:85:fd:22:3c:1f:1e:0b:
                    9d:05:43:c0:d8:1c:d3:55:93:e1:21:50:91:e7:d5:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:D8:17:91:D5:25:85:29:9D:2A:3D:96:AE:E2:C2:7B:4F:2E:6F
            X509v3 Authority Key Identifier:
                keyid:EA:46:E2:AB:A2:2D:2C:63:B7:AB:99:7D:D8:53:53:29:9D:C7:D8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8181Gr8wqi1kPSf3ZxbdUCBG7KmyhiqkVptq9khyUpDK/0/EA46E2ABA22D2C63B7AB997DD85353299DC7D827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA46E2ABA22D2C63B7AB997DD85353299DC7D827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8181Gr8wqi1kPSf3ZxbdUCBG7KmyhiqkVptq9khyUpDK/0/323830343a363338343a3a2f33322d313238203d3e20323639333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6384::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:66:e4:f6:6d:07:e4:f3:72:3c:21:d0:44:2e:42:67:38:e4:
         76:38:e3:3a:90:3b:37:39:f4:1b:78:b9:9b:a9:6a:ab:a4:08:
         db:e6:90:e8:2c:10:ce:fe:14:09:bc:87:4b:4a:17:0e:cb:0a:
         01:b6:0a:8e:04:32:cf:82:e3:e0:1b:88:00:2a:6d:d3:62:26:
         9e:98:73:0c:f8:0e:ea:f9:86:62:ca:ce:b4:2a:71:9e:67:f4:
         6a:02:66:dd:24:8c:a1:2c:24:2b:22:06:d7:41:47:a7:a7:00:
         68:80:3f:a5:03:84:68:a7:2f:d8:08:a4:a8:7e:d0:0e:b5:3d:
         78:48:df:23:03:b1:6c:9e:ec:42:be:e7:14:56:1b:ad:b8:af:
         3c:ea:c0:74:b0:cb:47:d8:8f:a9:a1:c7:98:e5:17:5e:3c:ca:
         30:0b:28:14:27:fb:aa:8f:e5:c8:20:9a:79:0e:7c:7f:22:e2:
         c0:08:26:60:cc:cd:2a:84:76:92:ea:ef:ef:c9:87:da:23:93:
         2c:a9:b1:19:f4:d4:3a:49:21:ff:dd:81:75:64:71:58:96:37:
         ff:e0:25:e8:bc:db:b0:2c:be:7f:ba:f3:78:bf:aa:0f:ed:05:
         5d:54:03:fd:6f:3e:40:1e:4b:6a:2b:57:ee:07:36:54:8d:b5:
         b3:03:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:31:53 2026 by rpki-client