Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          Fbtw4AKtx9fx9LJkDAgPkHkC8XlYNXt/95Jqt1NwMWo=
Subject key identifier:   E5:1F:59:79:EE:5F:2A:F2:98:FB:E5:13:1E:15:40:E2:8F:D8:64:05
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       2F39C89AE0AC5AA5CA714F655CDD4A00C2B72706
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:42 +0000
ROA not before:           Tue 13 Oct 2026 15:17:42 +0000
ROA not after:            Tue 12 Oct 2027 15:22:42 +0000
asID:                     268296
IP address blocks:        2804:4efc:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:39:c8:9a:e0:ac:5a:a5:ca:71:4f:65:5c:dd:4a:00:c2:b7:27:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:42 2026 GMT
            Not After : Oct 12 15:22:42 2027 GMT
        Subject: CN=E51F5979EE5F2AF298FBE5131E1540E28FD86405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:b0:54:b9:67:77:62:aa:a4:43:3e:f8:c9:
                    bb:83:07:44:f5:07:3c:bc:69:3b:02:17:8e:1d:7b:
                    1a:1f:a1:d0:17:87:fe:ae:64:80:a4:21:ac:4d:ff:
                    17:b8:5d:a4:06:1b:4c:44:c1:d2:9f:5b:a3:77:10:
                    01:88:91:e6:81:68:3f:c9:ba:c4:93:6e:6a:9e:9b:
                    c0:59:f8:16:69:35:c0:ed:44:17:21:b0:1a:b5:94:
                    7a:2d:5c:db:57:16:49:a6:ee:ba:82:25:6a:96:e4:
                    52:e4:65:7a:82:42:69:f2:9c:0c:9a:39:66:44:a5:
                    e8:03:03:33:60:1f:f0:80:af:04:fc:db:96:66:39:
                    c5:ff:ee:34:32:1b:c4:63:fd:07:dc:bb:b2:91:91:
                    8d:05:5b:67:6a:e2:32:af:c2:a6:35:7e:a1:eb:66:
                    1d:7c:f6:ce:8f:12:6c:e6:49:16:1d:f8:01:cf:bf:
                    ca:b1:90:f3:6c:21:9c:21:17:14:8a:c9:fc:26:b4:
                    57:44:f9:d7:40:cd:69:84:33:e0:07:73:14:2b:d0:
                    1a:f8:a4:2c:1d:be:80:1a:32:17:6f:46:04:cd:73:
                    75:c6:33:84:ef:25:a1:3e:a6:ac:be:74:fb:e5:bc:
                    cd:95:37:6f:23:25:ba:16:db:a0:bf:d6:21:95:2f:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1F:59:79:EE:5F:2A:F2:98:FB:E5:13:1E:15:40:E2:8F:D8:64:05
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:66:4e:b1:53:b7:d2:8a:1f:c5:b2:ad:f4:83:63:45:78:78:
         03:6a:d7:45:00:2e:4a:54:9f:58:de:2c:ea:58:b6:56:b4:d3:
         2e:43:ff:97:f8:67:cb:46:9c:d3:2f:25:6a:7e:7d:20:95:58:
         42:4e:0b:01:6d:97:c0:d4:2b:72:a6:37:48:e5:68:32:be:44:
         f2:9b:8f:a9:a5:9d:94:26:de:80:05:a6:b8:ff:b4:49:e8:54:
         62:9f:41:3b:8b:ae:06:97:d4:20:bf:4c:0c:6e:4e:74:1b:40:
         75:34:f5:50:a3:77:d5:ee:5c:b2:42:38:c5:b1:cb:4f:7c:9a:
         6f:4a:0a:36:3d:79:9e:e7:3d:d7:1a:93:28:45:ab:65:61:ed:
         29:b8:66:5d:31:9a:10:1b:31:c2:6a:16:34:35:b6:9c:95:59:
         a8:88:63:d0:0a:98:ed:c0:5f:d8:9b:9b:95:ed:dd:f7:ac:78:
         ac:ec:e1:ee:d1:b9:fc:dd:42:10:30:43:2d:6c:14:08:5a:b9:
         c2:62:39:c4:1c:d1:e2:19:38:ea:75:c4:a3:cb:db:dc:c4:6f:
         5f:85:e5:9f:4f:a0:3c:8f:fc:88:d7:38:50:fd:48:21:2d:91:
         68:60:3c:9a:f1:df:7b:bb:7a:cb:2b:a6:ba:de:f6:3b:04:8a:
         c7:66:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:53:20 2026 by rpki-client