Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/323830343a363966633a3a2f33322d313238203d3e20323730333034.roa
File:                     323830343a363966633a3a2f33322d313238203d3e20323730333034.roa (raw, json)
Hash identifier:          mYh45PsUka7vaMgbHktL4eoIzVlQrTi/CGNJ4MZikaQ=
Subject key identifier:   F7:FC:4C:9A:9E:4E:0B:28:8C:D3:4D:94:8D:11:81:D5:95:AB:0D:D7
Certificate issuer:       /CN=48EEC50085368583F962B191BC4F35BDB80ED093
Certificate serial:       3E4B282F1923FF3006DBB6E5C8E163359B9EEA19
Authority key identifier: 48:EE:C5:00:85:36:85:83:F9:62:B1:91:BC:4F:35:BD:B8:0E:D0:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EEC50085368583F962B191BC4F35BDB80ED093.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/323830343a363966633a3a2f33322d313238203d3e20323730333034.roa
Signing time:             Tue 27 Oct 2026 13:47:38 +0000
ROA not before:           Tue 27 Oct 2026 13:42:38 +0000
ROA not after:            Tue 26 Oct 2027 13:47:38 +0000
asID:                     270304
IP address blocks:        2804:69fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/48EEC50085368583F962B191BC4F35BDB80ED093.crl
                          rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/48EEC50085368583F962B191BC4F35BDB80ED093.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EEC50085368583F962B191BC4F35BDB80ED093.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 06:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4b:28:2f:19:23:ff:30:06:db:b6:e5:c8:e1:63:35:9b:9e:ea:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EEC50085368583F962B191BC4F35BDB80ED093
        Validity
            Not Before: Oct 27 13:42:38 2026 GMT
            Not After : Oct 26 13:47:38 2027 GMT
        Subject: CN=F7FC4C9A9E4E0B288CD34D948D1181D595AB0DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:d1:5f:22:2e:26:53:ac:3c:02:2f:0d:34:
                    a9:53:aa:89:86:61:26:96:3d:b4:d9:cd:34:a4:88:
                    99:cb:4e:d9:32:4e:30:70:7f:e0:c8:d4:45:c4:c5:
                    de:aa:e7:26:0a:67:de:85:86:f9:d2:b6:62:cd:d1:
                    4c:a3:e7:66:3d:b6:69:59:12:d4:51:79:c6:f1:45:
                    e4:56:77:56:50:f7:f7:95:b5:9d:2c:4f:30:f1:6b:
                    0b:1f:ad:f4:b3:85:8f:4e:4d:62:40:6a:5a:8d:aa:
                    4c:ce:f4:04:cc:9e:8f:f5:20:2e:9a:16:63:87:7e:
                    a6:81:04:e4:a4:7e:04:59:26:4e:ce:d1:6b:62:50:
                    f7:66:0c:72:96:71:e6:41:02:2a:d5:cd:b6:fe:24:
                    05:91:64:43:08:4b:4b:0e:3c:9b:11:32:60:c8:8b:
                    48:54:22:a3:56:a3:b5:35:dd:06:41:77:05:c7:73:
                    99:2a:e7:eb:6f:7e:19:af:88:e0:5f:2e:84:3c:f6:
                    7b:61:48:86:0d:aa:9d:c1:fc:bd:72:a4:43:9e:31:
                    fc:00:42:9f:fe:98:bf:40:03:8b:c1:5a:73:49:04:
                    fc:67:76:84:66:52:67:33:f8:0b:5b:58:31:03:26:
                    c3:8d:0e:e4:59:90:21:6f:46:86:1b:08:9a:15:a9:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FC:4C:9A:9E:4E:0B:28:8C:D3:4D:94:8D:11:81:D5:95:AB:0D:D7
            X509v3 Authority Key Identifier:
                keyid:48:EE:C5:00:85:36:85:83:F9:62:B1:91:BC:4F:35:BD:B8:0E:D0:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/48EEC50085368583F962B191BC4F35BDB80ED093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EEC50085368583F962B191BC4F35BDB80ED093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/323830343a363966633a3a2f33322d313238203d3e20323730333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:e0:3a:51:ba:6f:1e:09:a4:e5:8b:f9:c5:f9:21:eb:9b:fa:
         0d:bf:29:33:d5:84:5a:a2:dc:05:cd:9f:0e:61:49:26:62:21:
         df:fb:65:72:4e:4f:ed:be:a0:12:2f:35:bd:2d:dc:4e:d6:7f:
         53:b3:ce:9b:5a:bd:84:02:ac:8d:2c:a0:26:e5:53:61:87:0b:
         d7:ee:57:05:62:8c:9b:93:bc:8e:0c:e1:2e:65:4d:43:89:6c:
         c0:52:67:02:fb:fc:3f:e5:fa:f6:82:dd:a4:81:aa:d1:be:9e:
         7a:9f:41:23:22:a9:8c:fe:05:0f:4f:a8:ca:8a:82:87:9b:a2:
         eb:d5:a7:ce:c0:21:b5:56:ff:20:59:4c:9a:ec:cc:c4:ad:c5:
         ec:fe:bf:52:8a:b2:0a:94:d6:7e:11:58:48:e7:a1:7d:4e:64:
         e8:d9:d8:5a:99:c5:db:a3:3f:04:e1:a8:46:98:b8:30:b1:ad:
         0f:3c:5b:33:f4:eb:08:14:94:7b:43:82:68:02:a0:bd:44:e8:
         5c:97:12:a3:7f:04:e0:31:81:d7:73:91:99:8c:27:9a:ad:d2:
         e1:f3:b9:ba:40:ff:6d:77:63:da:d7:67:72:39:6f:15:d0:85:
         c0:fd:da:29:ba:dc:12:95:9f:62:cd:31:7b:10:85:37:ec:11:
         da:cf:0c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:06:41 2026 by rpki-client