Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a383030303a3a2f33342d3334203d3e20323733353232.roa
File:                     323830343a386665633a383030303a3a2f33342d3334203d3e20323733353232.roa (raw, json)
Hash identifier:          YbIay9e7L5hbPGwfrJPn8Yxt+sv2p2M3LRTKSxeL3y0=
Subject key identifier:   ED:48:07:3A:21:F6:5D:61:1E:CA:F7:34:E3:CC:90:C3:30:8C:6F:B3
Certificate issuer:       /CN=DC57055B0B41158846DE94BC370510769375E362
Certificate serial:       4318CF737C43E7357381F69742E4B478A5B0F1F3
Authority key identifier: DC:57:05:5B:0B:41:15:88:46:DE:94:BC:37:05:10:76:93:75:E3:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC57055B0B41158846DE94BC370510769375E362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a383030303a3a2f33342d3334203d3e20323733353232.roa
Signing time:             Thu 17 Sep 2026 19:23:05 +0000
ROA not before:           Thu 17 Sep 2026 19:18:05 +0000
ROA not after:            Thu 16 Sep 2027 19:23:05 +0000
asID:                     273522
IP address blocks:        2804:8fec:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/DC57055B0B41158846DE94BC370510769375E362.crl
                          rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/DC57055B0B41158846DE94BC370510769375E362.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC57055B0B41158846DE94BC370510769375E362.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 23:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:18:cf:73:7c:43:e7:35:73:81:f6:97:42:e4:b4:78:a5:b0:f1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC57055B0B41158846DE94BC370510769375E362
        Validity
            Not Before: Sep 17 19:18:05 2026 GMT
            Not After : Sep 16 19:23:05 2027 GMT
        Subject: CN=ED48073A21F65D611ECAF734E3CC90C3308C6FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:82:53:46:8c:08:df:98:8c:04:a3:ea:f3:
                    6e:b3:52:d0:69:22:0f:c4:22:a3:fe:2a:d4:7f:aa:
                    d9:30:f3:0e:e0:58:68:6e:59:ba:49:2e:6c:03:69:
                    19:9f:44:06:ce:a5:84:28:94:e5:a1:6c:22:dc:5d:
                    58:e2:57:50:db:4d:d3:28:f5:54:52:a2:04:88:20:
                    af:dc:53:84:67:79:d0:d8:ed:43:eb:82:cc:f8:d9:
                    a4:93:cd:df:c0:28:89:e4:22:7c:c4:44:b0:bc:90:
                    25:92:84:ab:a8:2d:0f:8b:fd:81:68:7d:59:94:5c:
                    13:77:28:19:6c:24:22:b1:01:51:c9:24:2f:f8:bc:
                    31:41:8f:f8:fe:85:87:1c:d1:d3:09:7f:ff:7a:14:
                    a0:1e:3b:8d:b7:39:30:a1:48:bf:6c:7a:2a:07:3d:
                    67:e4:1a:72:87:16:1c:74:2c:fb:ff:c1:6f:d9:9b:
                    9c:7c:21:7f:12:5a:c8:42:94:54:f9:29:be:35:e4:
                    a8:c9:23:7d:35:cc:27:bc:ab:79:a1:3b:69:97:fd:
                    0e:cf:cf:80:bc:b4:cf:fc:04:3a:ba:09:9f:b0:73:
                    30:b3:b1:0c:73:c3:00:32:e8:0c:38:98:96:7f:55:
                    57:dd:0d:a0:73:16:d4:f1:ac:6a:f1:bd:c3:f4:f2:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:48:07:3A:21:F6:5D:61:1E:CA:F7:34:E3:CC:90:C3:30:8C:6F:B3
            X509v3 Authority Key Identifier:
                keyid:DC:57:05:5B:0B:41:15:88:46:DE:94:BC:37:05:10:76:93:75:E3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/DC57055B0B41158846DE94BC370510769375E362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC57055B0B41158846DE94BC370510769375E362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a383030303a3a2f33342d3334203d3e20323733353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fec:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:74:34:f6:7e:41:f9:10:11:d4:95:85:e6:eb:f5:af:fd:05:
         ae:5d:fc:dc:89:fd:c9:c2:02:43:6c:11:11:3c:97:ee:7d:e3:
         d3:72:7c:ac:a4:0b:86:c3:f5:7f:ad:21:50:55:a3:87:34:16:
         f5:00:b0:89:f4:72:e5:43:a9:7f:b4:0d:b7:cc:e4:48:89:75:
         f6:31:db:aa:6b:e0:59:6a:2e:0e:5b:d0:8a:6a:b4:47:35:15:
         e1:37:62:92:55:8e:cb:32:0d:da:01:c9:40:a0:37:08:f3:1a:
         0d:6d:15:23:35:e6:07:aa:bf:ce:e4:ce:4d:75:d7:ac:43:91:
         38:d0:81:2d:c2:4c:43:2e:08:ae:58:2b:61:81:ed:59:ba:0f:
         29:10:4a:dc:3a:3b:1e:20:b7:6d:74:f8:c1:68:96:01:1f:dd:
         de:c8:46:b3:7f:58:7c:39:b7:04:5e:c8:e2:99:6e:f5:85:6e:
         8e:e1:fb:f5:37:a3:63:b6:fb:af:de:76:9a:95:1d:1b:dc:a8:
         01:2f:3b:75:18:eb:b2:c0:b3:0d:be:75:55:ac:e7:c5:44:16:
         d9:86:7d:de:3c:61:31:86:66:a6:91:47:81:5a:4a:bd:b7:f2:
         34:37:74:03:80:49:c2:33:e9:a8:6f:47:20:78:f6:7d:1b:08:
         18:75:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:14 2026 by rpki-client