Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/323830343a373739633a3a2f33322d313238203d3e20323731313839.roa
File:                     323830343a373739633a3a2f33322d313238203d3e20323731313839.roa (raw, json)
Hash identifier:          ttIN3goA8GnAWL0gcSQB+o8dz/J9nNZCt+cCcaBjCRI=
Subject key identifier:   E3:D7:2C:17:18:AD:F0:D0:18:5B:A1:90:0C:CE:88:5E:E9:B3:CC:1D
Certificate issuer:       /CN=0A964427D4213D4E03FCAA84837EAABAF7B964D7
Certificate serial:       76107829A5FC442974E5D0AE7606B7EAC03D7CC5
Authority key identifier: 0A:96:44:27:D4:21:3D:4E:03:FC:AA:84:83:7E:AA:BA:F7:B9:64:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A964427D4213D4E03FCAA84837EAABAF7B964D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/323830343a373739633a3a2f33322d313238203d3e20323731313839.roa
Signing time:             Thu 27 Aug 2026 18:16:37 +0000
ROA not before:           Thu 27 Aug 2026 18:11:37 +0000
ROA not after:            Thu 26 Aug 2027 18:16:37 +0000
asID:                     271189
IP address blocks:        2804:779c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl
                          rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A964427D4213D4E03FCAA84837EAABAF7B964D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:10:78:29:a5:fc:44:29:74:e5:d0:ae:76:06:b7:ea:c0:3d:7c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A964427D4213D4E03FCAA84837EAABAF7B964D7
        Validity
            Not Before: Aug 27 18:11:37 2026 GMT
            Not After : Aug 26 18:16:37 2027 GMT
        Subject: CN=E3D72C1718ADF0D0185BA1900CCE885EE9B3CC1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:f8:a1:13:39:6f:3a:89:82:b7:64:be:10:
                    68:52:cf:dd:d1:a9:33:1a:5d:f9:1f:41:05:99:10:
                    ff:7c:2e:b9:28:fd:8e:d9:17:e1:bd:49:7b:cd:d7:
                    00:37:f1:67:23:73:4c:66:7d:55:72:16:6a:ce:e1:
                    15:0b:61:30:f7:14:71:1c:f4:d1:71:8f:d2:f9:ea:
                    f1:02:df:32:2a:9d:8d:a4:b1:f5:ff:9c:0d:9a:33:
                    56:dd:0c:b7:9f:97:cb:72:bc:8f:c0:bd:6e:2c:4d:
                    58:db:ba:24:10:6d:da:b9:bd:ff:82:5d:f3:ae:31:
                    7a:a7:d1:65:53:41:f0:47:9c:f0:66:43:e1:37:98:
                    51:22:50:31:81:70:4a:10:f7:8a:63:27:08:19:7a:
                    26:29:ee:38:67:f1:b3:3e:55:4b:f6:75:2c:dd:cd:
                    fd:a3:30:8e:98:9e:2c:d0:43:f8:92:54:96:03:2b:
                    a1:7c:ca:bb:74:72:e8:ea:32:96:b1:4f:87:b5:15:
                    a5:ed:9c:e4:15:79:01:96:ef:f8:a8:29:a4:2b:49:
                    0b:43:f6:f2:59:f0:d8:47:da:ee:e4:64:4d:2e:1a:
                    a4:46:6b:6f:21:6b:cc:3d:3c:df:fd:85:75:de:81:
                    a7:b7:da:39:bb:fb:d4:a6:fc:88:1d:f4:96:4e:5d:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:2C:17:18:AD:F0:D0:18:5B:A1:90:0C:CE:88:5E:E9:B3:CC:1D
            X509v3 Authority Key Identifier:
                keyid:0A:96:44:27:D4:21:3D:4E:03:FC:AA:84:83:7E:AA:BA:F7:B9:64:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A964427D4213D4E03FCAA84837EAABAF7B964D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/323830343a373739633a3a2f33322d313238203d3e20323731313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:779c::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:f4:48:e5:6e:b1:f8:b1:10:a9:0b:f8:d1:08:64:c8:a0:d0:
         a1:f9:84:dd:9a:64:6c:a0:9a:e7:b4:48:7a:aa:3b:6a:c6:90:
         27:c3:98:d5:8e:81:5f:4b:ac:fc:04:f2:4c:d6:71:54:cf:86:
         61:4e:cd:30:32:05:19:ab:7c:0b:15:1f:f7:97:69:41:bf:88:
         92:7e:95:ad:2d:5f:c3:6f:69:7b:b3:73:b2:ee:57:0f:f9:da:
         f4:cc:c5:fc:8e:cd:bf:f3:fe:42:2e:ce:0c:04:56:61:f5:39:
         3c:8e:99:98:19:ae:df:6b:10:a5:47:ad:21:9e:c0:a3:82:58:
         a6:10:d1:e7:68:7f:fb:dc:d3:00:af:b0:d5:42:4c:e0:a0:e6:
         da:06:19:92:45:90:a7:f9:ed:09:62:d5:47:a6:3f:b8:d4:92:
         9d:28:17:06:88:0e:ed:7b:52:c8:56:39:cf:d2:1a:11:6a:6c:
         77:52:f7:36:f8:3b:27:0e:63:c9:ce:62:d3:0f:cf:71:7c:0c:
         d8:64:69:ba:55:92:5a:2c:0f:06:0b:26:62:16:f5:dc:14:c0:
         26:c8:ee:24:78:2c:2b:40:1f:3f:7e:50:1d:a3:a6:e1:f3:2f:
         e9:9b:68:e8:6c:18:81:c3:5e:1e:54:8a:9a:42:be:94:6c:6b:
         d2:85:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----