Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/323830343a326534303a3a2f33322d313238203d3e20323632353933.roa
File:                     323830343a326534303a3a2f33322d313238203d3e20323632353933.roa (raw, json)
Hash identifier:          xfMOZ+WTJ5HQSN0zdPRXFXoNXVgYMABeJ4PGfGOLlyg=
Subject key identifier:   64:F2:B6:3E:0D:8C:B9:37:FB:3E:BD:A4:C4:0D:B2:BD:4E:E5:A0:40
Certificate issuer:       /CN=DB1151FCAAB88186E460D045F58E61DEF333046D
Certificate serial:       2C6E68649F29F949652D5677459D50713A527B69
Authority key identifier: DB:11:51:FC:AA:B8:81:86:E4:60:D0:45:F5:8E:61:DE:F3:33:04:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1151FCAAB88186E460D045F58E61DEF333046D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/323830343a326534303a3a2f33322d313238203d3e20323632353933.roa
Signing time:             Fri 18 Sep 2026 22:20:38 +0000
ROA not before:           Fri 18 Sep 2026 22:15:38 +0000
ROA not after:            Fri 17 Sep 2027 22:20:38 +0000
asID:                     262593
IP address blocks:        2804:2e40::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/DB1151FCAAB88186E460D045F58E61DEF333046D.crl
                          rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/DB1151FCAAB88186E460D045F58E61DEF333046D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1151FCAAB88186E460D045F58E61DEF333046D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 09:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6e:68:64:9f:29:f9:49:65:2d:56:77:45:9d:50:71:3a:52:7b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB1151FCAAB88186E460D045F58E61DEF333046D
        Validity
            Not Before: Sep 18 22:15:38 2026 GMT
            Not After : Sep 17 22:20:38 2027 GMT
        Subject: CN=64F2B63E0D8CB937FB3EBDA4C40DB2BD4EE5A040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:cc:53:67:b8:d2:2f:f4:b3:e0:7b:24:e0:
                    dc:43:04:d3:27:7e:34:eb:07:e6:51:5c:f2:38:d4:
                    cb:df:fe:8f:79:fc:f0:c3:58:82:70:0f:0c:0f:7d:
                    5c:7c:41:ec:e3:24:34:0c:55:1c:c9:f6:3d:65:d2:
                    cd:84:48:5e:e1:1e:2b:de:cd:ab:58:3e:09:d3:02:
                    4d:a6:2d:e9:46:63:a3:b5:c9:b9:2a:26:c0:17:26:
                    b3:02:93:c8:19:3c:7f:d2:9c:86:f3:bf:0a:e6:d0:
                    0e:6e:ba:e8:9b:1d:c1:35:9d:3e:4d:a2:09:a0:df:
                    ee:f1:79:9f:d2:c1:e0:6c:08:98:3f:db:9c:23:6c:
                    94:e4:8e:e4:b5:a5:c0:73:4c:5e:37:05:c6:e8:5a:
                    3a:bb:4e:10:48:b5:cf:b9:0a:73:63:ae:60:ab:95:
                    9a:a9:ae:2f:0e:05:c6:6f:6d:87:22:45:37:1c:ab:
                    be:61:8b:50:31:21:ea:69:7d:e3:b8:41:6e:16:04:
                    a3:2a:5a:e2:34:13:47:7d:3b:70:f2:2b:04:a5:b7:
                    85:31:a1:29:b4:ad:3c:f4:7c:82:5c:5d:4b:8a:88:
                    a9:cd:8e:de:3c:4e:4e:e4:af:6b:40:7f:78:e4:3f:
                    d5:52:3e:d3:75:92:53:07:9b:c5:8c:28:f0:2c:50:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:B6:3E:0D:8C:B9:37:FB:3E:BD:A4:C4:0D:B2:BD:4E:E5:A0:40
            X509v3 Authority Key Identifier:
                keyid:DB:11:51:FC:AA:B8:81:86:E4:60:D0:45:F5:8E:61:DE:F3:33:04:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/DB1151FCAAB88186E460D045F58E61DEF333046D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1151FCAAB88186E460D045F58E61DEF333046D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/323830343a326534303a3a2f33322d313238203d3e20323632353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:04:b4:9f:48:e5:32:95:55:8c:8f:ec:84:31:d7:d7:3d:bc:
         a1:62:45:ae:09:94:bc:62:b1:82:49:8c:93:63:d0:3e:e1:00:
         f5:78:28:d3:b9:10:c1:f1:19:23:3f:1a:92:19:25:5c:a6:88:
         85:40:77:e1:4b:33:93:8d:94:55:1c:ab:dd:48:36:5c:5e:20:
         d2:13:b0:9b:bc:6d:b7:90:92:0d:39:99:3e:9b:78:d8:15:08:
         4d:9b:4a:82:b8:16:b5:b6:7e:45:04:2a:fb:3d:cc:12:3a:12:
         fa:fc:66:32:45:dd:46:d6:62:58:bd:87:84:79:62:44:8e:00:
         c5:19:14:09:62:dd:8b:d0:1a:2f:ea:50:79:e5:07:27:56:6e:
         51:95:86:a9:8d:2a:60:9b:8b:6e:cb:45:9e:a9:50:1a:0c:dc:
         e5:8b:c4:e7:4b:5e:8d:6c:a6:87:c1:60:34:01:d5:d9:8c:a4:
         94:f8:f6:5d:a7:f1:54:b3:2c:36:28:08:3d:c2:9b:d7:92:6f:
         98:a6:11:cd:ae:f6:44:da:91:a7:4d:ef:71:d1:fd:de:dc:30:
         f1:8b:39:38:d2:dc:0e:74:14:9a:cd:ed:c6:4c:f9:6d:d8:84:
         88:39:b7:90:f4:0a:5f:71:e1:ce:85:b5:f1:6f:56:84:3f:1c:
         a5:ff:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:41:18 2026 by rpki-client