Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33322d3332203d3e20323638323936.roa
File:                     323830343a346566633a3a2f33322d3332203d3e20323638323936.roa (raw, json)
Hash identifier:          n0XclfOtpJniW4EWOruZSSEWmCVVOz6gy7e3gDqf5gk=
Subject key identifier:   B2:AB:EC:1E:53:90:DA:50:FF:2F:8D:B0:C2:62:E8:D9:66:9B:10:68
Certificate issuer:       /CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Certificate serial:       0136AA5C3F0FDCC4E871D7DE9C6D9A21AA341E93
Authority key identifier: 01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33322d3332203d3e20323638323936.roa
Signing time:             Mon 28 Sep 2026 15:07:46 +0000
ROA not before:           Mon 28 Sep 2026 15:02:46 +0000
ROA not after:            Mon 27 Sep 2027 15:07:46 +0000
asID:                     268296
IP address blocks:        2804:4efc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:36:aa:5c:3f:0f:dc:c4:e8:71:d7:de:9c:6d:9a:21:aa:34:1e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
        Validity
            Not Before: Sep 28 15:02:46 2026 GMT
            Not After : Sep 27 15:07:46 2027 GMT
        Subject: CN=B2ABEC1E5390DA50FF2F8DB0C262E8D9669B1068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:7d:4e:34:c6:f6:14:bb:6c:58:1c:c5:5c:
                    03:cf:cd:d9:93:8e:c0:b2:17:14:36:14:17:02:f7:
                    6c:ec:8e:7f:13:3c:9e:b2:61:29:38:72:61:ac:8b:
                    3e:2b:06:7c:c9:43:16:a2:fd:77:0b:10:e8:cf:6d:
                    96:9f:13:90:2f:5b:9a:e2:a2:e8:19:8c:22:d0:b1:
                    46:4d:88:69:29:ed:3b:ba:15:96:fa:51:c3:72:a9:
                    79:9d:5b:e0:f9:06:76:b9:5d:c6:3f:e3:47:6c:49:
                    6e:3d:ae:3f:a7:e7:7c:44:73:69:69:a6:83:f3:8a:
                    90:ce:b4:01:ec:aa:11:68:ff:b2:9b:8d:bd:3f:5e:
                    fd:fa:82:6b:3f:5d:17:fa:9e:3b:e9:63:b6:8f:fc:
                    11:e9:8e:4e:d6:9c:de:74:2c:56:e9:c2:15:3e:66:
                    93:47:d2:b4:7a:16:87:81:55:32:49:2b:0f:c6:2f:
                    fb:90:ce:dc:96:2f:14:96:a5:99:e0:5a:3c:76:07:
                    55:2f:bd:28:b0:42:28:79:5e:36:eb:93:78:46:5f:
                    cc:ae:7b:8f:34:b4:46:94:14:b0:01:43:10:32:96:
                    8c:30:6f:f1:9b:36:48:6e:f5:17:eb:4e:14:42:1d:
                    0b:49:a8:06:c0:5b:ca:ec:54:d0:ad:bd:47:bb:5c:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AB:EC:1E:53:90:DA:50:FF:2F:8D:B0:C2:62:E8:D9:66:9B:10:68
            X509v3 Authority Key Identifier:
                keyid:01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33322d3332203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:46:95:2b:b3:2e:5e:67:fa:70:0b:86:dd:7b:76:c3:cc:d9:
         d8:1e:16:18:d0:7c:87:ae:56:03:20:c9:c9:40:1e:0f:33:58:
         1e:d3:38:74:7b:03:d6:41:41:fc:d1:b0:48:8f:47:ee:16:1a:
         4f:93:21:f2:2e:32:30:99:8d:6d:27:b4:52:74:0d:72:df:b5:
         a0:8a:79:20:e6:57:fb:08:85:fb:e5:5b:f6:52:6e:56:1d:89:
         01:05:8a:c3:bb:fd:b1:25:0d:d0:38:70:81:a4:b1:70:43:ef:
         42:6a:09:c7:61:10:ee:d5:29:77:e8:81:2a:40:ea:a0:f7:b5:
         d3:d7:7a:16:a3:40:73:c3:e4:d3:b3:ab:e8:7d:88:a0:1f:1d:
         58:5f:4c:4f:08:1a:36:ad:2b:48:ee:9a:a9:38:7e:75:44:73:
         b3:a6:3a:82:47:de:9f:cd:49:b6:a9:ee:67:51:23:51:a3:d7:
         9b:a7:e4:fd:4f:9a:e9:8a:75:f7:2a:36:8e:b8:dd:3f:d2:00:
         20:b4:c1:7a:dc:d0:2c:5e:30:57:01:22:a7:29:35:95:4f:dd:
         9d:62:6b:69:04:68:50:03:68:5e:cd:74:28:ad:89:11:6e:7a:
         e2:86:8f:ac:01:0e:94:c2:f3:68:26:64:82:51:88:4d:25:b7:
         d7:94:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:26:54 2026 by rpki-client