Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a323037303a3a2f34382d3438203d3e20323633353835.roa
File:                     323830343a6636633a323037303a3a2f34382d3438203d3e20323633353835.roa (raw, json)
Hash identifier:          cadTdaTYkMSj0hwoo/FZ7wq4+JMs6/NA6ZvOMO8mug4=
Subject key identifier:   5C:D2:D8:E1:6F:49:D9:C4:4C:A8:39:80:D0:CC:C3:0C:60:D9:B9:65
Certificate issuer:       /CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
Certificate serial:       49093723E4DC167FF5259DAE20CA97891ECBE06F
Authority key identifier: 94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a323037303a3a2f34382d3438203d3e20323633353835.roa
Signing time:             Fri 07 Aug 2026 00:10:54 +0000
ROA not before:           Fri 07 Aug 2026 00:05:54 +0000
ROA not after:            Fri 06 Aug 2027 00:10:54 +0000
asID:                     263585
IP address blocks:        2804:f6c:2070::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:09:37:23:e4:dc:16:7f:f5:25:9d:ae:20:ca:97:89:1e:cb:e0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83
        Validity
            Not Before: Aug  7 00:05:54 2026 GMT
            Not After : Aug  6 00:10:54 2027 GMT
        Subject: CN=5CD2D8E16F49D9C44CA83980D0CCC30C60D9B965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:85:c1:f4:d0:5d:91:22:b4:b8:d4:44:8f:
                    1d:04:40:c2:73:e7:e5:fb:c8:65:35:26:c5:f8:06:
                    11:10:fe:59:9d:36:1b:b5:9e:f3:91:b6:b3:5b:82:
                    09:a2:b9:33:66:33:ac:b1:86:98:50:1a:2a:16:a8:
                    65:95:ea:e3:ca:b5:56:3b:86:33:4c:9a:4e:46:1a:
                    fa:b1:73:5c:06:61:93:0c:f8:eb:00:2a:ac:ec:de:
                    e5:94:b9:dd:9c:8a:1a:4d:05:2c:34:44:4a:3b:43:
                    13:e8:64:f4:fa:1d:78:88:9c:b4:d2:26:df:1a:27:
                    8e:2f:e9:77:16:06:5f:02:7a:90:a7:44:91:e8:1d:
                    d5:ab:33:f4:79:2c:9e:51:15:5c:39:35:f6:b1:f8:
                    19:22:f0:aa:d1:5c:c2:58:1a:c2:41:10:33:77:ff:
                    56:ff:75:28:e0:dc:3f:66:a2:57:bc:dc:7f:8c:17:
                    8a:2d:be:81:48:4a:31:88:15:3f:a4:70:7f:32:2c:
                    17:fe:ed:3f:04:97:bd:62:c2:c7:a7:e5:c0:d8:1f:
                    a7:bf:cf:ff:19:e3:a1:cd:d3:b6:02:98:e1:e4:ce:
                    88:2d:c1:1f:8d:ce:1d:dc:b5:a4:4a:b0:6e:00:65:
                    94:79:74:57:22:f3:e9:5d:1e:76:c7:b6:99:25:c5:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D2:D8:E1:6F:49:D9:C4:4C:A8:39:80:D0:CC:C3:0C:60:D9:B9:65
            X509v3 Authority Key Identifier:
                keyid:94:25:E3:22:0B:C8:DC:A8:CC:BE:DE:F7:45:2C:43:32:1F:B5:EE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9425E3220BC8DCA8CCBEDEF7452C43321FB5EE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a323037303a3a2f34382d3438203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c:2070::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:4c:6c:93:a4:c9:0d:a9:07:bb:37:7b:c7:9b:94:8f:d9:3a:
         4f:5a:13:31:d4:48:66:ac:34:34:89:cd:33:f2:53:0e:ec:32:
         6e:2c:61:d2:2f:7b:95:bc:09:84:c2:cd:27:ac:bc:66:93:8c:
         1b:74:5e:7e:f4:14:50:92:f1:90:e5:c7:11:59:f8:f0:74:b7:
         35:3e:de:31:f8:24:a4:39:79:9b:8f:d7:8a:04:d5:5c:5c:39:
         ea:c0:97:c9:72:2c:cd:42:bf:0a:ff:79:7e:42:49:e1:81:eb:
         bf:76:01:56:89:46:9b:9b:94:f8:02:0e:cc:15:51:0f:e4:98:
         6d:c3:44:ce:b2:77:f5:f7:c2:cc:6e:09:d9:69:82:93:42:aa:
         1b:9e:67:1d:14:ef:cd:ee:ec:65:7d:89:3d:9f:b4:49:d2:e9:
         c1:ba:73:5e:9f:02:83:21:bd:e9:b4:67:c9:f1:97:d6:e6:ba:
         29:56:42:9f:d0:7b:15:07:c5:4a:fe:82:23:8b:99:82:88:fa:
         9e:58:c9:b5:d2:ec:0c:e3:82:01:27:ec:29:38:8e:bf:0d:53:
         9d:e9:84:2f:3e:a5:37:54:d1:26:e7:a5:45:03:97:af:19:86:
         88:c0:a9:15:58:15:0f:93:8e:37:41:81:5e:97:4c:65:7f:f5:
         1e:de:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:11:44 2026 by rpki-client