Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a383030323a3a2f34382d3438203d3e20323639353238.roa
File:                     323830343a363630343a383030323a3a2f34382d3438203d3e20323639353238.roa (raw, json)
Hash identifier:          zSVkIjIoqPDnCrlcOuKa61B/3oMahJWkGmYtrfWg7Gs=
Subject key identifier:   D7:EB:A1:16:96:B1:F0:0F:8A:15:EC:B3:13:0C:5F:9D:DE:5E:69:6C
Certificate issuer:       /CN=0536254B395E744767A170B2A9041042916EF407
Certificate serial:       580804580FCA05DB30B23EFF93C0C7F3208E4EA9
Authority key identifier: 05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a383030323a3a2f34382d3438203d3e20323639353238.roa
Signing time:             Fri 14 Aug 2026 21:46:50 +0000
ROA not before:           Fri 14 Aug 2026 21:41:50 +0000
ROA not after:            Fri 13 Aug 2027 21:46:50 +0000
asID:                     269528
IP address blocks:        2804:6604:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:08:04:58:0f:ca:05:db:30:b2:3e:ff:93:c0:c7:f3:20:8e:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0536254B395E744767A170B2A9041042916EF407
        Validity
            Not Before: Aug 14 21:41:50 2026 GMT
            Not After : Aug 13 21:46:50 2027 GMT
        Subject: CN=D7EBA11696B1F00F8A15ECB3130C5F9DDE5E696C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:66:ca:8d:f2:67:24:0e:ae:f1:c0:32:ea:
                    d3:c6:41:4d:4b:39:e3:92:70:b9:9f:e9:50:ed:3d:
                    9c:e3:32:d8:2a:a8:74:4d:57:3e:9b:b7:6e:2c:4e:
                    5e:40:ef:cb:2e:6f:03:c6:40:4f:ea:1e:19:a9:f4:
                    1c:e5:74:ae:bb:ea:21:ef:10:49:c5:18:0e:c9:79:
                    19:6f:fd:7f:5e:00:cc:5e:37:83:2f:9d:e9:05:41:
                    fe:28:5c:2f:72:92:13:06:1e:a8:f4:51:9d:8f:98:
                    0f:01:5d:ba:c9:05:55:0b:35:71:4f:56:e2:40:60:
                    34:d2:20:c1:6e:51:e5:8f:cc:3a:11:bf:e1:6c:8a:
                    27:4d:13:7c:d9:1f:93:0c:a4:9e:54:b5:a3:f2:e7:
                    9d:c8:e6:ba:5b:ee:19:60:3f:aa:4c:e5:52:02:c9:
                    50:88:35:05:8d:7a:f0:4f:25:45:5b:8d:47:df:36:
                    51:0f:a1:a2:b0:9c:2b:60:83:ba:f7:01:15:d3:97:
                    2e:b2:46:82:d8:08:a5:45:7c:7b:9a:09:9c:ba:60:
                    21:44:eb:34:63:95:0b:57:3d:4e:c2:ef:17:d2:59:
                    56:e8:2e:55:52:73:90:65:8a:ea:d7:7e:77:4c:d6:
                    cd:88:f4:cc:92:bd:23:7e:f9:47:b9:a5:12:0c:9b:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EB:A1:16:96:B1:F0:0F:8A:15:EC:B3:13:0C:5F:9D:DE:5E:69:6C
            X509v3 Authority Key Identifier:
                keyid:05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a383030323a3a2f34382d3438203d3e20323639353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6604:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:df:79:37:62:b6:49:1a:7b:34:f3:b9:14:6f:34:b2:0a:
         b8:14:37:8d:5f:1b:15:3d:50:a7:8e:f2:ef:a1:64:bf:42:c7:
         6c:55:1c:21:52:d1:f3:6e:57:0c:d2:e4:24:1e:ef:bc:cd:c2:
         f2:36:57:8c:0a:a7:2a:5d:1e:33:2f:17:f9:3f:f6:6b:a8:48:
         bc:37:67:7d:81:5b:c8:0b:cd:54:c8:a6:8d:db:ca:d2:62:a0:
         fd:78:23:a1:df:3f:f2:39:6b:a9:71:4d:8f:bf:00:ec:9e:24:
         09:da:e7:ee:be:80:ef:fd:d4:8b:12:49:d6:56:f7:88:d3:72:
         c9:6d:e1:11:dd:2e:53:e1:dc:76:c1:eb:f6:19:a0:64:91:a6:
         67:b4:82:36:ba:63:44:b9:f0:8d:73:c5:cd:b8:97:d9:7b:48:
         18:72:72:96:d2:4a:20:67:c0:c3:78:7e:cd:00:db:31:05:6f:
         18:0c:f5:51:f2:fe:51:36:45:52:57:9d:3e:0b:74:7d:6b:50:
         00:80:0b:4e:30:e9:c8:a2:15:8d:01:44:fa:ce:41:3b:c7:54:
         c4:86:25:b0:a5:ba:6c:35:6e:41:5b:b4:c6:a5:a0:2e:5d:db:
         c9:a3:0a:f0:01:7e:92:7d:ab:46:56:e0:df:85:c8:4e:3e:a3:
         6b:74:00:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 13:20:53 2026 by rpki-client