Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
File:                     323830343a356161343a3a2f33322d313238203d3e20323638373836.roa (raw, json)
Hash identifier:          v5vArxZDf7UI6uV7nD+R76vXtSoJjxIPgwy5wX0aIc8=
Subject key identifier:   74:AB:CB:00:B8:3B:3A:FD:2D:76:E1:FE:6A:5D:D6:31:F6:98:F5:A6
Certificate issuer:       /CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
Certificate serial:       53CFBDB2068106E2AC2D71C1832CCA4B6DE0A7FD
Authority key identifier: 81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
Signing time:             Thu 08 Oct 2026 18:37:56 +0000
ROA not before:           Thu 08 Oct 2026 18:32:56 +0000
ROA not after:            Thu 07 Oct 2027 18:37:56 +0000
asID:                     268786
IP address blocks:        2804:5aa4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 10:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cf:bd:b2:06:81:06:e2:ac:2d:71:c1:83:2c:ca:4b:6d:e0:a7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
        Validity
            Not Before: Oct  8 18:32:56 2026 GMT
            Not After : Oct  7 18:37:56 2027 GMT
        Subject: CN=74ABCB00B83B3AFD2D76E1FE6A5DD631F698F5A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:02:87:52:81:07:86:b3:9c:99:3d:bf:f5:
                    44:86:dc:c8:7f:75:15:9e:f0:f9:85:88:e6:6c:00:
                    51:d2:16:2f:62:d7:11:30:29:08:45:16:7c:ce:52:
                    81:fe:67:3b:03:42:9a:c3:28:b9:d2:29:0a:92:fa:
                    51:ee:ac:22:b7:bc:a4:dd:f9:13:a5:34:19:b5:c2:
                    84:a0:7f:70:bb:3d:7c:90:09:d6:e9:3d:d5:49:df:
                    52:30:11:42:93:3b:7e:6f:5e:38:23:cc:ff:a6:ba:
                    7c:9a:40:7c:48:a5:38:85:1e:16:17:7e:41:45:84:
                    94:d6:55:87:ce:e8:7c:ff:4a:34:49:1c:32:24:7b:
                    e1:67:fc:64:b1:9f:9c:58:ab:28:8e:ce:c7:dc:15:
                    54:4d:18:c5:9e:bc:48:45:f4:e2:17:a1:b2:f1:db:
                    ba:52:9d:dd:21:03:57:e2:83:8b:27:53:b8:1a:8e:
                    f2:8c:99:f1:6d:33:99:0c:fd:15:ff:f1:d3:dd:86:
                    5f:b3:1e:65:9d:a9:3a:88:57:67:e0:4d:97:9a:56:
                    92:53:11:cd:28:d4:63:d9:43:5f:cc:9d:1f:16:ac:
                    ce:8b:a9:ee:b8:e8:29:01:25:c6:96:b5:c7:d4:f1:
                    15:05:22:68:fe:51:a7:d0:12:fc:b3:de:f5:4b:35:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:CB:00:B8:3B:3A:FD:2D:76:E1:FE:6A:5D:D6:31:F6:98:F5:A6
            X509v3 Authority Key Identifier:
                keyid:81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:ff:c6:80:3f:a7:19:b4:4b:14:8f:5a:7f:9e:2e:d2:4e:
         e6:8f:45:36:e4:a4:1d:74:b3:85:a0:65:6b:6d:68:1a:48:8d:
         98:2b:73:17:fe:41:52:99:cc:cf:1c:05:e5:e9:61:d7:84:f1:
         7c:28:e9:71:ca:c4:29:17:c0:0a:71:7b:d0:92:cc:b7:29:d3:
         ec:7c:c9:66:69:48:9f:aa:0b:50:41:94:5c:a9:e8:f5:3e:11:
         ce:e2:30:71:52:ff:0f:fe:b1:84:9d:5e:67:62:02:8e:56:44:
         f9:1b:19:51:13:c5:51:29:e1:dc:08:30:d1:03:c3:40:32:74:
         80:25:4b:df:ac:58:13:eb:79:a6:ab:64:64:0a:b9:38:0a:b3:
         2e:78:8a:4e:70:56:9c:fa:5f:f4:6d:2b:e4:00:3f:34:56:d3:
         15:72:2e:a8:75:6d:af:0b:61:bd:de:9e:de:87:99:07:3e:ae:
         0a:a9:b4:9d:29:74:9a:b2:1f:1d:2b:b6:70:7a:cf:d4:63:8f:
         b5:42:7e:fe:af:cb:36:ab:7b:70:4d:76:de:e4:12:05:a6:ba:
         fb:59:c1:db:44:c3:fc:56:17:8e:29:e5:2f:cf:ef:07:c3:4e:
         05:17:45:0f:2f:b7:9b:4e:4d:42:f4:7e:f7:fe:b3:ab:1a:fd:
         b1:f1:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 20:05:49 2026 by rpki-client