Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393030303a3a2f34302d3430203d3e20323632353033.roa
File:                     323830343a326265303a393030303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier:          BJoug4b/hgQV7l6B6Ciy10c0lhL1ckKBsRrX+wKr8rk=
Subject key identifier:   BA:FC:70:FF:3F:00:0F:2A:56:54:08:DF:97:02:1C:B3:21:84:5F:84
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       67AD36575173FEEDE1CD93EA3EA329FE4270575D
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393030303a3a2f34302d3430203d3e20323632353033.roa
Signing time:             Sun 18 Oct 2026 13:33:46 +0000
ROA not before:           Sun 18 Oct 2026 13:28:46 +0000
ROA not after:            Sun 17 Oct 2027 13:33:46 +0000
asID:                     262503
IP address blocks:        2804:2be0:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 01:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ad:36:57:51:73:fe:ed:e1:cd:93:ea:3e:a3:29:fe:42:70:57:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Oct 18 13:28:46 2026 GMT
            Not After : Oct 17 13:33:46 2027 GMT
        Subject: CN=BAFC70FF3F000F2A565408DF97021CB321845F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:e8:bf:63:b6:89:9d:7a:87:11:87:ed:e4:
                    75:85:13:ad:a7:97:30:f6:0d:c6:a5:fe:81:0a:4b:
                    e7:a7:d5:f4:1f:fc:d3:c7:be:1d:64:cd:5c:59:a6:
                    fa:2b:71:22:8c:e8:c7:10:33:cd:93:56:29:bc:b6:
                    f7:aa:57:94:27:e6:0f:e5:cc:05:42:67:bb:2d:f5:
                    60:2e:60:72:19:73:de:2a:ed:f0:86:10:dd:44:be:
                    2b:3a:7f:2d:aa:e3:79:ff:cb:d1:ab:dd:42:9e:0d:
                    dd:3b:e1:99:90:b6:6c:dc:7b:6b:b7:93:8c:b2:06:
                    ea:d8:68:c5:ec:04:49:64:3d:cc:a3:55:67:e6:07:
                    11:9b:db:22:4e:59:c1:8b:03:b2:f0:dd:4d:33:3d:
                    1d:4c:4e:8e:59:75:0b:0e:74:10:6d:d5:a6:d5:9c:
                    6a:60:f3:15:b1:f6:f4:59:cc:30:de:51:b5:04:1f:
                    49:ea:59:0f:01:b1:8c:4d:0e:bd:85:1e:a1:5c:4e:
                    07:e9:3c:c0:de:b1:a4:8f:d7:49:2c:50:dd:c2:5a:
                    8c:7e:cd:0e:e3:14:c4:d0:77:8d:5d:9f:c4:41:47:
                    fc:70:ae:97:06:cc:78:f9:27:32:6b:ea:16:13:49:
                    ee:c2:35:59:57:5a:1e:13:96:29:bc:a9:9b:db:06:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FC:70:FF:3F:00:0F:2A:56:54:08:DF:97:02:1C:B3:21:84:5F:84
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393030303a3a2f34302d3430203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be0:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:22:84:7e:69:b0:74:82:ce:e7:79:67:09:d9:00:3c:cf:
         1a:f4:59:b7:1d:22:37:6b:65:70:d7:01:42:f6:00:7e:0d:80:
         49:8a:78:fb:95:63:ff:e7:58:d7:fd:b7:bc:ad:66:ae:d6:81:
         6a:cf:cc:bc:26:5a:db:a2:67:39:5d:68:46:14:9a:d8:30:a8:
         c5:2e:4b:02:49:0e:29:ee:ee:22:79:dc:74:98:d4:46:c5:10:
         45:19:b8:d0:ee:8e:71:de:4f:98:b8:51:d4:b9:7f:df:22:f6:
         30:13:a7:75:27:29:a6:52:c4:c5:6c:11:fb:4a:ce:e0:e5:55:
         9d:3f:68:85:57:db:f7:46:4d:6d:4a:45:96:0c:e5:8a:35:70:
         0f:b0:27:ed:ee:48:03:5b:5d:81:64:8f:87:af:d4:60:95:35:
         08:51:2b:0b:4c:f5:91:eb:cf:9a:ac:c1:db:ad:7f:0b:4b:c4:
         6d:84:8c:93:97:5b:8a:c6:dd:f0:cf:cd:33:a5:29:7a:4a:f8:
         b1:50:86:c4:e0:7f:06:50:fb:af:41:98:7a:60:c8:38:cc:8b:
         32:9c:07:d3:a8:e3:10:57:02:2d:07:80:c2:15:37:7b:1c:00:
         90:2a:06:c0:0f:0e:3c:39:22:3b:dd:ff:48:4d:ef:6f:c2:67:
         97:28:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:09:26 2026 by rpki-client