Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/323830343a366333383a3a2f33322d3336203d3e20323730343533.roa
File:                     323830343a366333383a3a2f33322d3336203d3e20323730343533.roa (raw, json)
Hash identifier:          wVHPljiiEW3Cvz/WMjj6xJb4dIrx7hvljk/2vzNncZM=
Subject key identifier:   AF:C1:99:02:5D:67:35:88:81:D5:8C:A9:B7:F9:5A:9B:84:48:AC:5B
Certificate issuer:       /CN=485E7F50E3258EF645A2CCD232BD5C691723A049
Certificate serial:       1B4C65447CCFA93DE6AF354B47389CFFE5A6A358
Authority key identifier: 48:5E:7F:50:E3:25:8E:F6:45:A2:CC:D2:32:BD:5C:69:17:23:A0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/485E7F50E3258EF645A2CCD232BD5C691723A049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/323830343a366333383a3a2f33322d3336203d3e20323730343533.roa
Signing time:             Wed 16 Sep 2026 12:30:12 +0000
ROA not before:           Wed 16 Sep 2026 12:25:12 +0000
ROA not after:            Wed 15 Sep 2027 12:30:12 +0000
asID:                     270453
IP address blocks:        2804:6c38::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/485E7F50E3258EF645A2CCD232BD5C691723A049.crl
                          rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/485E7F50E3258EF645A2CCD232BD5C691723A049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/485E7F50E3258EF645A2CCD232BD5C691723A049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 02:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4c:65:44:7c:cf:a9:3d:e6:af:35:4b:47:38:9c:ff:e5:a6:a3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485E7F50E3258EF645A2CCD232BD5C691723A049
        Validity
            Not Before: Sep 16 12:25:12 2026 GMT
            Not After : Sep 15 12:30:12 2027 GMT
        Subject: CN=AFC199025D67358881D58CA9B7F95A9B8448AC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:3e:67:ee:c6:9a:b5:df:35:ee:a9:d4:69:
                    f7:89:71:55:2a:2b:f5:07:80:b1:86:2a:af:ac:1e:
                    87:64:d9:75:3c:6f:25:6e:57:77:34:66:c3:3a:67:
                    ca:58:36:66:a0:28:ae:65:ab:2b:13:20:30:bd:77:
                    00:8d:f3:c7:05:77:ca:d8:bb:ad:2e:72:a0:86:36:
                    70:7e:23:67:f0:30:6e:34:3f:a8:6c:6b:13:c0:a0:
                    7b:e7:a6:cf:fc:e3:92:cb:38:5b:a1:e9:8a:c2:f1:
                    46:26:b6:a5:b5:88:04:6d:72:5d:22:e6:74:76:21:
                    9b:22:85:04:28:e4:e6:26:ff:7f:08:f1:11:6a:c5:
                    5a:c8:cc:82:9c:1f:a4:f0:b7:7d:08:d8:07:07:de:
                    0f:1f:40:33:4b:77:c1:66:16:ad:6a:f4:3c:c8:94:
                    b6:b7:e1:4c:17:e8:01:6a:b1:26:48:8a:f3:72:b9:
                    ec:32:f5:47:d9:c5:9d:34:87:ff:71:e8:95:94:54:
                    03:a8:51:84:7a:67:7a:ed:9f:76:e2:0b:fa:05:f6:
                    7f:a3:91:ea:3e:15:30:f8:fe:d6:42:60:58:ea:23:
                    43:81:45:39:98:0c:ff:bb:46:a1:52:4f:ae:92:b3:
                    ea:3c:3a:43:f4:32:aa:91:06:d6:3a:63:79:4d:b5:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C1:99:02:5D:67:35:88:81:D5:8C:A9:B7:F9:5A:9B:84:48:AC:5B
            X509v3 Authority Key Identifier:
                keyid:48:5E:7F:50:E3:25:8E:F6:45:A2:CC:D2:32:BD:5C:69:17:23:A0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/485E7F50E3258EF645A2CCD232BD5C691723A049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/485E7F50E3258EF645A2CCD232BD5C691723A049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/323830343a366333383a3a2f33322d3336203d3e20323730343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:b1:f5:01:c9:06:f2:db:64:82:43:50:fd:4d:dd:89:33:
         8a:a0:ca:aa:1c:25:07:8b:29:61:40:73:67:8f:0e:19:99:32:
         8c:7b:d6:7f:73:1d:95:ca:75:40:40:a0:bd:57:1c:02:e4:88:
         78:90:3e:01:e0:a5:6a:80:d1:31:35:1c:79:5d:2e:9a:83:5a:
         3c:3c:49:25:0b:62:af:0b:56:d5:25:3f:8d:3b:ed:8e:89:b6:
         73:a3:d9:d5:9e:f3:c8:6d:2e:dc:8b:fc:e0:60:58:a6:9c:6f:
         29:08:dd:ac:19:ef:c2:11:3b:21:f4:b6:eb:98:fb:4f:48:bc:
         91:3f:d0:19:9c:e8:f4:88:61:78:cb:aa:52:8a:56:7e:e5:36:
         fe:05:2d:66:92:c9:d5:5b:24:05:9b:30:f0:0f:8a:73:50:c9:
         2a:7c:1a:da:73:a1:ea:d9:b0:a7:a7:07:75:3c:bb:09:8b:f0:
         ca:6f:92:53:a8:4d:a0:2c:73:e8:b7:5a:bc:46:71:98:b3:5f:
         d6:99:3b:3a:70:44:a6:a4:ce:4b:c2:bb:81:b3:3f:1c:4d:ba:
         0c:07:fe:24:60:00:6a:97:3d:41:40:39:97:33:67:f3:8c:99:
         06:ce:28:b4:6d:02:d4:9f:c9:10:69:8b:5f:a3:fa:a7:b7:d0:
         b3:16:ee:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:51:11 2026 by rpki-client