Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a38303a3a2f34342d3434203d3e20323730323835.roa
File:                     323830343a363962303a38303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier:          FsFry5ebsUtYuhgBI+7Bd0Zx13C/druFkuF1EqOB7aM=
Subject key identifier:   5E:D7:E1:0D:79:CD:D1:85:6B:0B:3A:A1:53:91:34:C6:25:88:96:37
Certificate issuer:       /CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Certificate serial:       3741CCF1A12114DD2DE6447EE3097FEF3B3BB12E
Authority key identifier: 68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a38303a3a2f34342d3434203d3e20323730323835.roa
Signing time:             Mon 10 Aug 2026 19:08:09 +0000
ROA not before:           Mon 10 Aug 2026 19:03:09 +0000
ROA not after:            Mon 09 Aug 2027 19:08:09 +0000
asID:                     270285
IP address blocks:        2804:69b0:80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:41:cc:f1:a1:21:14:dd:2d:e6:44:7e:e3:09:7f:ef:3b:3b:b1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
        Validity
            Not Before: Aug 10 19:03:09 2026 GMT
            Not After : Aug  9 19:08:09 2027 GMT
        Subject: CN=5ED7E10D79CDD1856B0B3AA1539134C625889637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:0d:de:e6:07:c6:a0:a6:eb:b5:75:48:ab:
                    23:b2:02:0e:09:5a:a4:36:c3:62:56:dc:52:45:9f:
                    71:a5:01:ca:75:3d:ba:0a:28:5d:1d:8f:fa:4b:14:
                    98:5f:c8:78:d0:eb:fb:50:c8:e8:3c:04:b8:ef:7e:
                    4f:91:00:eb:7e:ed:e7:b2:54:87:83:ed:61:94:98:
                    ac:8f:b5:a5:8b:22:56:64:9c:7a:10:88:c1:eb:2d:
                    6c:b6:9f:24:35:6e:71:ae:aa:8c:6d:39:29:08:ad:
                    1d:0e:f0:5b:0c:5c:3e:b0:66:3e:87:25:33:50:82:
                    44:dc:72:34:22:b1:f3:15:c1:72:f0:82:c7:43:62:
                    7f:73:f4:47:a6:b9:81:a0:1b:ee:ba:57:5b:46:48:
                    18:41:ec:84:85:4d:8c:9f:29:32:7c:4f:f5:18:00:
                    ba:ce:e6:ca:5b:63:5e:6e:e0:c7:dc:e2:55:3d:13:
                    a7:0f:d9:1c:80:14:c2:9d:c8:3d:56:63:3e:2b:4f:
                    58:3e:af:0f:2b:42:3d:79:f9:09:f6:82:b3:40:88:
                    08:a3:8a:68:dc:88:5c:e9:42:ed:d7:1d:53:2f:ee:
                    2f:7c:a0:7d:97:35:82:b9:25:2f:c8:4c:68:9d:fa:
                    3d:67:46:41:cf:69:55:73:b0:32:b5:14:90:8c:98:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D7:E1:0D:79:CD:D1:85:6B:0B:3A:A1:53:91:34:C6:25:88:96:37
            X509v3 Authority Key Identifier:
                keyid:68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a38303a3a2f34342d3434203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b0:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:85:61:99:74:b0:ef:15:64:4c:d6:ab:21:c1:cd:06:84:f6:
         5e:f1:d2:16:47:45:0e:a5:b0:e0:d7:62:36:d7:34:fc:12:a4:
         16:e4:6a:68:63:b7:31:d4:54:27:10:e5:52:1d:17:c9:49:e8:
         08:76:c3:fe:e7:9a:15:a1:e9:bb:9e:13:92:4a:55:ed:7b:df:
         e4:24:d5:a3:67:1f:fd:f1:5b:6a:d0:98:27:8c:0d:fa:0b:8d:
         a0:ed:29:de:1e:19:ea:c6:ae:7d:1c:62:62:24:64:47:8e:26:
         3d:07:a4:9d:0b:e1:3b:2a:a0:d4:54:0d:b9:39:c8:60:d4:d6:
         7c:f8:c2:cd:59:d7:07:16:e0:2f:97:d3:5c:c8:93:12:0c:67:
         95:f3:8f:22:0a:0c:fa:1e:bf:50:b6:92:8d:ed:6f:6c:2d:b7:
         8a:e4:57:04:8c:68:6c:39:7b:31:5e:bd:5e:69:ae:fa:10:fb:
         2f:bd:4c:15:37:39:ab:23:d3:f1:d2:ac:15:ca:8d:c8:28:bc:
         14:61:5d:58:64:0a:ef:52:63:ba:f4:aa:de:bb:fd:bc:90:d8:
         e3:60:d6:ed:3a:73:8e:86:72:cb:bd:38:a7:f5:d9:59:85:5b:
         4d:78:0e:96:43:9c:ad:7f:08:47:15:28:97:e8:1b:99:19:ab:
         14:60:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:37:05 2026 by rpki-client