Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/323830343a366266343a3a2f33322d313238203d3e20323730343336.roa
File:                     323830343a366266343a3a2f33322d313238203d3e20323730343336.roa (raw, json)
Hash identifier:          9UK0f5xcrEtCE42VQMVPjwuTZLh8my765V2Hc1XCcvs=
Subject key identifier:   CA:B4:44:BC:C2:D0:23:0D:BC:CE:73:ED:0E:00:18:2B:41:5B:A7:AA
Certificate issuer:       /CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
Certificate serial:       6E57A4D4BBCDBA68A2FA2DA618D16F6F698083EF
Authority key identifier: B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/323830343a366266343a3a2f33322d313238203d3e20323730343336.roa
Signing time:             Fri 14 Aug 2026 00:04:26 +0000
ROA not before:           Thu 13 Aug 2026 23:59:26 +0000
ROA not after:            Fri 13 Aug 2027 00:04:26 +0000
asID:                     270436
IP address blocks:        2804:6bf4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl
                          rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 10:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:57:a4:d4:bb:cd:ba:68:a2:fa:2d:a6:18:d1:6f:6f:69:80:83:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
        Validity
            Not Before: Aug 13 23:59:26 2026 GMT
            Not After : Aug 13 00:04:26 2027 GMT
        Subject: CN=CAB444BCC2D0230DBCCE73ED0E00182B415BA7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:fd:c3:e9:e0:e3:4a:2f:57:f1:fc:c0:d0:
                    9f:17:15:8d:69:f9:4d:08:80:29:85:a7:cb:67:7c:
                    fe:88:c2:d4:f2:8f:7d:f7:d2:81:fe:60:38:55:95:
                    9a:5b:79:2c:4f:18:6b:ad:01:7b:75:00:62:74:f3:
                    0e:e6:9d:08:ab:9d:5a:20:d3:14:eb:10:74:ef:8b:
                    79:97:a0:a0:e8:66:9a:a1:17:5c:69:26:bf:e4:66:
                    09:46:bc:3f:cc:33:64:b6:ab:40:b4:8d:76:33:4d:
                    6a:12:d6:d4:05:a0:9c:03:04:a6:db:b0:9b:69:f5:
                    4b:1d:a9:e9:80:c0:1a:71:ba:36:1d:e4:d5:23:45:
                    01:1e:7f:34:c5:ee:d4:c2:19:d9:c7:88:7a:54:63:
                    ca:50:bf:7c:0c:3c:c1:f2:9c:35:b7:25:cb:a6:91:
                    4d:53:b3:0b:3e:0d:5c:75:77:b2:7b:d5:a7:cc:25:
                    8e:01:52:6b:bb:20:c1:7c:fa:d4:a7:04:73:8d:7c:
                    0a:35:ba:9f:d7:20:0d:b8:ce:a8:a1:d2:22:fa:96:
                    8f:38:d7:5f:68:f1:b1:c5:11:ad:fc:ba:10:64:3b:
                    fd:4a:a1:e5:07:0e:a2:d2:06:05:ed:98:5d:80:7b:
                    df:93:b9:97:ca:56:ae:76:bc:27:c1:15:1e:60:2f:
                    04:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B4:44:BC:C2:D0:23:0D:BC:CE:73:ED:0E:00:18:2B:41:5B:A7:AA
            X509v3 Authority Key Identifier:
                keyid:B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/323830343a366266343a3a2f33322d313238203d3e20323730343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bf4::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:5f:91:f7:fe:66:5f:4e:ea:ad:61:9b:91:2c:40:a6:00:13:
         4d:bf:45:a7:55:56:03:0c:c2:22:38:8d:4a:0c:ef:19:4e:fe:
         8a:00:10:ba:5f:18:b2:80:1c:8e:6d:74:f7:85:3c:7f:f3:22:
         af:d4:ec:9b:46:d0:02:c5:a7:75:7c:42:03:80:52:c2:87:20:
         91:d8:17:e9:89:df:9e:81:62:74:f6:c6:20:3b:15:46:c5:72:
         30:f7:7c:3a:be:40:67:43:33:79:de:8d:e0:ed:ea:00:c6:89:
         1d:fa:c9:15:69:84:83:3d:e2:f0:1e:9c:ac:18:f7:63:5d:34:
         1d:4c:e4:b2:45:3d:cf:1e:ca:10:12:c5:67:5b:ff:6c:39:0b:
         03:bc:21:09:6a:f3:51:55:29:43:cc:7b:4a:36:7d:45:3f:12:
         33:e5:58:0f:8e:ca:1d:3d:d6:96:4e:17:99:ab:c7:47:99:ac:
         47:d4:b5:d9:7a:5f:ea:0d:10:83:44:f2:e1:5d:ea:3a:28:10:
         de:f0:b5:10:94:eb:46:99:01:61:84:47:6f:99:b0:91:6e:1f:
         29:7d:ba:bd:d9:33:8f:22:1f:e2:20:13:ac:ad:3d:48:b4:59:
         70:e1:bb:69:77:13:06:02:70:e7:e1:39:5d:91:fc:33:52:f5:
         9e:ec:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:35:21 2026 by rpki-client