Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/323830343a313764383a3a2f33322d3438203d3e203631393139.roa
File:                     323830343a313764383a3a2f33322d3438203d3e203631393139.roa (raw, json)
Hash identifier:          r0oGQEBCC7ePivwZIvsye6xdhU1WfftGrZSCk9AwLHI=
Subject key identifier:   9D:A4:60:7B:AF:27:E6:A9:99:90:FA:D7:94:AC:F1:4A:B2:16:A3:32
Certificate issuer:       /CN=A90D3FFAF243378899C8E9EEDD7F6F846604CB82
Certificate serial:       486110CEFCDAE15AE161FC83C5006C26F27100C0
Authority key identifier: A9:0D:3F:FA:F2:43:37:88:99:C8:E9:EE:DD:7F:6F:84:66:04:CB:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/323830343a313764383a3a2f33322d3438203d3e203631393139.roa
Signing time:             Thu 22 Oct 2026 18:24:49 +0000
ROA not before:           Thu 22 Oct 2026 18:19:49 +0000
ROA not after:            Thu 21 Oct 2027 18:24:49 +0000
asID:                     61919
IP address blocks:        2804:17d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.crl
                          rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 16:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:61:10:ce:fc:da:e1:5a:e1:61:fc:83:c5:00:6c:26:f2:71:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D3FFAF243378899C8E9EEDD7F6F846604CB82
        Validity
            Not Before: Oct 22 18:19:49 2026 GMT
            Not After : Oct 21 18:24:49 2027 GMT
        Subject: CN=9DA4607BAF27E6A99990FAD794ACF14AB216A332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:20:17:e7:ce:50:d9:70:92:c2:2d:5a:b8:
                    3e:7c:9c:de:49:d0:d1:fe:80:c9:bf:00:39:d0:d0:
                    99:8b:6d:74:da:d2:78:32:4f:64:73:b9:27:73:0b:
                    94:51:3b:8b:b8:2b:b2:c7:f5:d4:5c:b6:d5:c5:f5:
                    4d:12:eb:df:5b:6b:96:10:9e:92:83:23:e5:23:0b:
                    38:9f:0b:2b:03:ef:b9:4e:7e:db:ee:1a:fb:62:6c:
                    0c:35:20:b3:0b:6e:09:d9:89:b8:d2:19:ed:2e:48:
                    ec:e9:a1:58:67:9b:37:44:32:68:87:8e:a7:f1:59:
                    d4:dd:65:5e:56:27:79:bd:c6:88:d2:3d:3a:6f:47:
                    a9:0a:b8:27:15:82:2e:f6:b1:c0:7f:75:cc:ee:e4:
                    db:dc:7f:b5:8f:a0:b8:d2:43:94:ac:01:26:3e:76:
                    75:0b:b1:16:91:1e:8b:a6:45:cc:60:46:59:8e:04:
                    b1:00:c9:10:7a:02:59:0d:44:87:fb:fe:75:84:87:
                    2f:40:1c:18:b7:ca:8b:cd:81:39:67:54:1c:56:e0:
                    90:30:b0:00:a5:cb:31:71:10:d2:a5:c5:c7:86:09:
                    18:88:3a:18:32:84:3e:f3:cc:1f:7c:39:32:29:63:
                    5a:e3:f5:05:b8:9a:33:3f:da:bd:24:f3:cc:ea:83:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A4:60:7B:AF:27:E6:A9:99:90:FA:D7:94:AC:F1:4A:B2:16:A3:32
            X509v3 Authority Key Identifier:
                keyid:A9:0D:3F:FA:F2:43:37:88:99:C8:E9:EE:DD:7F:6F:84:66:04:CB:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/323830343a313764383a3a2f33322d3438203d3e203631393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:55:d0:f2:84:4e:c4:f5:43:e0:d3:2d:80:2b:45:9c:1f:
         59:d4:eb:ca:1f:3f:a5:6a:04:29:ec:29:7b:0e:5f:27:03:47:
         5d:64:80:bd:c1:6d:d9:9f:1d:f9:cf:95:72:cd:86:77:66:12:
         35:3c:09:c8:e3:47:00:b8:cf:16:c1:59:1b:7d:72:19:2c:82:
         a0:36:a4:c1:2f:d8:cb:35:6d:3e:f4:f5:52:4d:0a:31:c6:2d:
         2d:17:8f:10:59:92:dd:f4:bc:6f:dd:7f:56:bb:fc:e0:0d:c4:
         66:da:9e:b2:c3:47:aa:c3:28:c0:84:b2:d7:d9:9a:4f:82:fe:
         3f:ec:28:68:c1:a4:a1:ba:11:c9:2c:29:e2:df:01:2f:5d:06:
         8c:21:f1:99:23:94:db:b6:a7:e4:77:a0:b3:bb:1a:c3:b6:03:
         20:f2:cf:76:a1:53:b8:6a:03:d8:c2:88:95:a0:d5:9d:d5:2f:
         08:72:97:1f:d6:b9:9f:4a:27:56:43:10:cb:88:bc:94:f6:17:
         cd:3c:a3:78:d4:34:e7:0b:10:66:dc:36:7a:29:37:7e:bb:8d:
         14:84:6e:e5:fe:43:f6:a8:34:61:4c:0f:30:45:24:35:ed:76:
         33:1c:52:4a:95:9c:d6:60:a3:54:4c:43:0f:06:50:8c:bd:66:
         99:c6:20:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 20:10:36 2026 by rpki-client