Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          De2c3+rHCfWcALGG+lp9JkFUVcTSxppIuoZx+mPsoQo=
Subject key identifier:   50:A4:66:CE:0F:19:A4:5C:82:C0:85:7F:4D:81:91:48:96:AC:BB:32
Certificate issuer:       /CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Certificate serial:       3B11990C953F7F0F7D97FA36D600D376914997E2
Authority key identifier: 01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Mon 28 Sep 2026 15:07:46 +0000
ROA not before:           Mon 28 Sep 2026 15:02:46 +0000
ROA not after:            Mon 27 Sep 2027 15:07:46 +0000
asID:                     268296
IP address blocks:        2804:4efc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:11:99:0c:95:3f:7f:0f:7d:97:fa:36:d6:00:d3:76:91:49:97:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
        Validity
            Not Before: Sep 28 15:02:46 2026 GMT
            Not After : Sep 27 15:07:46 2027 GMT
        Subject: CN=50A466CE0F19A45C82C0857F4D81914896ACBB32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cc:3a:dd:01:d8:68:8d:d9:ac:de:4f:bb:e2:
                    55:13:15:68:d1:b9:3f:21:cb:87:56:d1:62:40:d9:
                    f5:20:12:27:76:9f:50:f2:b5:d5:94:10:4f:13:44:
                    5b:50:36:5b:16:e7:11:40:95:98:79:70:0d:f9:33:
                    1b:2f:a9:15:cb:46:2c:90:fd:14:bb:1f:17:a0:c9:
                    b1:83:3d:48:5b:eb:d6:ef:f4:61:29:bd:10:5f:bf:
                    59:7f:8c:1c:6e:fd:a7:0d:cd:13:a1:28:ef:69:1c:
                    a8:30:26:00:f3:27:66:36:22:c6:88:2a:38:c7:39:
                    71:d5:fc:5a:94:d0:95:91:48:f0:6c:09:5b:09:08:
                    2d:31:f2:11:e7:5c:49:19:ee:c8:15:90:41:a9:8c:
                    13:b1:40:31:70:18:43:47:66:73:b7:57:0b:2f:e3:
                    96:3c:13:d9:e5:25:a5:a1:36:40:06:10:d1:cf:f2:
                    ff:0d:81:bc:e8:bf:fe:81:06:1d:2e:95:b7:1e:eb:
                    f7:5f:1f:cb:51:c4:d2:6d:cb:26:10:24:b5:ac:7b:
                    68:04:35:d4:b2:30:ce:48:84:68:87:18:36:42:89:
                    90:ed:c0:f4:4a:ad:51:7b:bd:82:12:72:30:7c:8b:
                    b5:bb:93:ec:dc:5f:37:22:3e:0a:a9:01:21:f0:a9:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A4:66:CE:0F:19:A4:5C:82:C0:85:7F:4D:81:91:48:96:AC:BB:32
            X509v3 Authority Key Identifier:
                keyid:01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         19:45:c2:7c:8f:ec:ee:a4:37:29:be:70:46:50:30:a9:e3:42:
         3f:c9:3c:98:bf:ff:d4:ca:58:12:fe:52:c3:e4:a0:a6:35:93:
         40:28:b8:9b:c5:79:ba:c0:d6:4a:e9:b8:94:d3:28:d9:dc:b5:
         d5:c6:ec:7e:fc:15:57:b0:d2:a2:fa:89:b5:ef:90:cb:73:95:
         a2:5a:c6:1e:a4:a6:e0:7c:3d:3a:67:d7:be:d3:7f:2d:8b:03:
         c2:c6:88:0a:b2:da:4f:cc:f4:9f:1e:13:12:2f:0d:39:af:9a:
         2e:96:a2:20:bc:58:92:2a:9f:99:b2:38:be:f2:ec:87:aa:7e:
         67:80:e6:5a:03:7c:6f:7c:71:d9:81:42:f1:ba:81:5f:cd:4a:
         7b:e5:e5:74:8e:07:89:4a:fd:6f:f0:3f:c6:6c:0b:59:83:ae:
         78:56:e5:b4:b6:64:55:37:38:8e:88:3d:28:01:51:4f:ec:d2:
         23:56:19:7f:ad:45:ac:1c:e6:e6:ae:00:e8:b0:0e:bd:09:e4:
         a7:b5:4a:7b:28:5a:fc:11:a8:e6:37:5b:43:1b:53:b1:57:5b:
         58:3c:c7:2a:3c:b5:22:81:ed:e0:5c:e6:65:4f:f0:19:7b:e1:
         82:85:56:11:63:9b:65:19:7a:0a:2c:3d:f7:ff:02:2a:2d:72:
         93:3f:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:25:33 2026 by rpki-client