Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a633030303a3a2f33342d3334203d3e203631373734.roa
File:                     323830343a313932343a633030303a3a2f33342d3334203d3e203631373734.roa (raw, json)
Hash identifier:          fy3/LmWmriFCklkwzW9l2BnaPB79rimI7h6cCgrXzc4=
Subject key identifier:   9F:D9:21:34:0A:19:38:7A:E9:8C:4D:5C:4E:25:4E:DD:D5:68:14:52
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       5DD7EC49DD485FC8758A1E6B6F151AF302E82050
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a633030303a3a2f33342d3334203d3e203631373734.roa
Signing time:             Tue 15 Sep 2026 14:35:38 +0000
ROA not before:           Tue 15 Sep 2026 14:30:38 +0000
ROA not after:            Tue 14 Sep 2027 14:35:38 +0000
asID:                     61774
IP address blocks:        2804:1924:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d7:ec:49:dd:48:5f:c8:75:8a:1e:6b:6f:15:1a:f3:02:e8:20:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Sep 15 14:30:38 2026 GMT
            Not After : Sep 14 14:35:38 2027 GMT
        Subject: CN=9FD921340A19387AE98C4D5C4E254EDDD5681452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7c:4f:0b:e0:ae:ea:bb:59:b3:4b:2b:0f:b3:
                    9e:c5:fd:78:f8:c9:1a:7d:62:ef:a9:4b:fa:57:4b:
                    f4:16:c5:08:05:62:fd:b5:60:1a:6c:f6:21:c9:12:
                    7f:24:e7:1d:7a:77:25:7c:37:fa:a5:af:9d:e7:7c:
                    87:c6:9d:47:7c:4a:90:03:24:fe:bf:09:30:4d:59:
                    88:8e:9f:06:17:4e:cf:04:9e:91:dc:df:d3:52:4e:
                    ce:97:bf:a4:9d:35:6f:3e:bb:88:d7:74:b1:6c:88:
                    ef:b6:59:1f:ce:5f:d0:5a:50:b7:49:4e:8f:6e:6a:
                    92:2a:e9:00:05:9d:a1:b3:1f:69:af:9c:a1:58:63:
                    03:13:cb:95:c9:66:79:51:d0:64:e9:62:e6:47:84:
                    62:6e:85:f5:93:59:9c:68:15:e9:9e:49:2b:c3:bd:
                    9f:1d:75:ee:95:1e:57:4e:15:9a:53:87:fe:ed:dc:
                    8b:85:de:8c:27:52:65:0d:3a:11:d0:ea:9f:94:a4:
                    a2:13:60:02:e5:31:26:97:25:d1:79:99:57:c0:f0:
                    d0:44:b5:c9:63:83:65:b7:44:a4:be:84:68:ea:ad:
                    b7:c2:11:a9:bb:29:cb:bd:ec:5f:58:c8:59:93:7f:
                    5f:9f:a8:9f:69:49:bb:eb:48:b5:6a:60:dc:04:38:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D9:21:34:0A:19:38:7A:E9:8C:4D:5C:4E:25:4E:DD:D5:68:14:52
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a633030303a3a2f33342d3334203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1924:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:f8:ea:8e:7c:0a:13:2b:06:9f:e2:4e:9c:b6:40:3a:41:88:
         02:25:fd:39:33:47:6b:f3:de:7d:a2:0f:35:37:64:02:75:d6:
         17:76:7f:0f:bf:60:4c:e0:3b:28:79:ff:5b:0c:55:a2:4a:90:
         15:59:04:0b:c7:e6:6d:ae:01:d2:f7:3e:9f:0c:4f:b5:47:fb:
         33:a4:10:ed:ae:f1:e9:45:7f:5a:e4:9a:46:5a:d0:0c:91:44:
         2e:49:09:3b:2e:2c:a4:50:46:64:b3:dd:42:b1:48:ac:97:6a:
         47:34:53:c9:22:94:61:28:c5:e4:1c:f2:77:9c:70:b8:ad:fa:
         06:80:da:67:d3:dd:17:24:6e:34:85:50:48:ce:50:b7:2e:0b:
         88:7c:18:8e:8a:f9:84:88:c0:14:91:f3:60:ff:d7:58:82:97:
         4e:ce:f8:ba:d0:56:9b:80:5b:88:8a:90:91:e1:1b:5d:11:e3:
         06:52:ab:9c:16:45:16:ba:28:cb:73:7e:f4:ee:3b:35:9f:db:
         fa:80:26:b8:e4:ed:1e:99:55:05:df:69:28:eb:a5:2c:28:83:
         6f:9b:d5:37:7f:e5:b3:5b:d9:e8:13:3b:da:fd:5e:62:48:f1:
         26:95:53:b9:1e:72:04:a0:44:7d:26:41:a6:0b:be:9c:e6:70:
         0e:95:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:29:14 2026 by rpki-client