Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a343030303a3a2f33342d3334203d3e20323637303234.roa
File:                     323830343a343666633a343030303a3a2f33342d3334203d3e20323637303234.roa (raw, json)
Hash identifier:          UjzVu1pyt8ZZfsAK23JRpKp3DxvIl58Nre9xDam5OLY=
Subject key identifier:   19:7C:19:57:46:AB:50:EE:A0:57:6F:29:E6:B5:E8:5D:1E:78:2A:D6
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       223B96C663B0C2C6694C1BFA35F074FAC33A6BB5
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a343030303a3a2f33342d3334203d3e20323637303234.roa
Signing time:             Tue 28 Jul 2026 12:17:42 +0000
ROA not before:           Tue 28 Jul 2026 12:12:42 +0000
ROA not after:            Tue 27 Jul 2027 12:17:42 +0000
asID:                     267024
IP address blocks:        2804:46fc:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 22:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3b:96:c6:63:b0:c2:c6:69:4c:1b:fa:35:f0:74:fa:c3:3a:6b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Jul 28 12:12:42 2026 GMT
            Not After : Jul 27 12:17:42 2027 GMT
        Subject: CN=197C195746AB50EEA0576F29E6B5E85D1E782AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:5e:8f:b6:cb:8c:41:9f:db:d3:1f:5d:08:
                    1b:8d:4f:7b:f8:e6:00:a9:7f:ed:4d:a9:80:a5:3e:
                    2a:b6:72:1e:88:15:9c:02:a1:9f:9c:e0:6e:dd:d1:
                    76:e8:19:e8:99:f1:7e:fd:fa:6f:00:5d:c6:4b:f3:
                    c4:17:34:23:ba:ff:0c:73:c6:a6:e0:dd:6e:76:d9:
                    a2:de:41:c9:7e:7e:5d:f9:02:01:9b:ec:03:1a:7e:
                    a1:1d:5f:c3:2c:55:01:b8:0a:54:d3:1d:a2:24:86:
                    0a:e3:02:53:9f:39:48:19:a6:eb:fa:55:c0:31:15:
                    8a:a3:a7:de:92:8d:82:e0:6d:96:99:6c:5a:56:94:
                    4f:6d:52:34:86:15:5c:8e:e9:09:f5:ee:64:79:25:
                    12:80:24:64:8d:47:c5:58:3d:e9:08:c4:d9:e4:4e:
                    42:87:27:59:93:d0:93:a2:55:dc:cf:bb:74:08:ab:
                    f0:61:e2:c2:44:e0:75:a6:52:6d:f8:d5:c1:ef:57:
                    6b:e1:16:7c:9c:b9:b8:d7:d9:f1:5a:80:27:30:32:
                    17:60:56:7f:7e:e6:fb:a1:72:36:d7:42:0e:e7:ae:
                    cb:88:cd:5e:f8:55:83:81:60:a1:f6:91:aa:a5:69:
                    33:de:2d:60:a5:ff:70:3b:cd:25:99:e9:3e:40:b7:
                    cf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7C:19:57:46:AB:50:EE:A0:57:6F:29:E6:B5:E8:5D:1E:78:2A:D6
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a343030303a3a2f33342d3334203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:c6:8b:77:b2:30:67:cb:4e:6d:19:fb:91:f5:c8:34:62:
         8d:80:7a:56:7d:f0:a1:42:bb:34:60:a0:d7:82:dc:1a:5d:45:
         69:ad:05:2b:50:33:90:e7:31:e7:a4:ea:13:9f:64:d6:1d:46:
         67:2b:92:db:b1:17:88:7b:b0:27:24:22:8f:0b:0d:23:f7:69:
         0a:d8:4a:34:f9:8d:39:12:31:04:d5:27:28:84:4b:c0:d5:e2:
         7a:a1:08:50:8d:30:3b:8a:e7:5e:8e:4f:6d:44:03:b2:79:ae:
         78:59:53:a2:3f:2e:64:51:fe:ad:f3:45:84:a0:d1:34:d4:1c:
         2d:77:58:ba:29:af:91:a9:0a:e0:0b:47:63:e3:71:16:a9:cd:
         02:1d:2c:fb:54:9c:f1:69:56:4f:73:e1:f8:3b:11:d8:77:29:
         27:60:27:fd:c0:a8:26:e9:3a:3f:73:7b:21:a4:14:00:23:b2:
         e1:0b:70:67:7c:d6:bd:be:59:2e:1a:df:09:9a:5f:c3:f3:33:
         d8:c6:dd:58:72:a1:e4:34:2b:1c:d1:5e:de:27:09:f8:02:65:
         de:4f:90:aa:a3:25:7c:ad:5c:08:8a:74:9a:15:60:4d:95:a9:
         5f:94:2e:19:8f:ee:3c:87:b3:4e:3b:8a:4b:28:fa:38:1e:57:
         ad:b2:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:03:57 2026 by rpki-client