Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3332203d3e20323637343239.roa
File:                     323830343a343136303a3a2f33322d3332203d3e20323637343239.roa (raw, json)
Hash identifier:          KgUEVuX3bn3VRfbT5q+JJVKtzD2O6x6g9bByMh4rwVQ=
Subject key identifier:   B2:78:80:8E:A5:1F:48:A2:6E:19:E8:A4:DB:08:D8:C3:CE:40:2E:C3
Certificate issuer:       /CN=6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF
Certificate serial:       5B26DB5D1341BBB93BEE17D11C100F60893FC689
Authority key identifier: 6B:D6:13:29:CC:9F:31:3A:9A:21:BD:E8:18:B6:8C:5D:BB:7B:EB:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3332203d3e20323637343239.roa
Signing time:             Tue 15 Sep 2026 17:31:34 +0000
ROA not before:           Tue 15 Sep 2026 17:26:34 +0000
ROA not after:            Tue 14 Sep 2027 17:31:34 +0000
asID:                     267429
IP address blocks:        2804:4160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.crl
                          rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 04:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:26:db:5d:13:41:bb:b9:3b:ee:17:d1:1c:10:0f:60:89:3f:c6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF
        Validity
            Not Before: Sep 15 17:26:34 2026 GMT
            Not After : Sep 14 17:31:34 2027 GMT
        Subject: CN=B278808EA51F48A26E19E8A4DB08D8C3CE402EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:54:00:18:4b:01:35:53:87:15:56:4c:c6:
                    5d:35:0b:bb:c1:27:43:a7:9c:3a:7e:98:3e:08:67:
                    a1:74:a7:01:4c:de:ae:46:60:48:3c:07:ed:11:92:
                    35:dc:87:69:c2:73:6c:70:d0:e2:b1:9f:fb:4e:b5:
                    29:86:89:05:fa:bd:4e:6d:ef:b7:73:be:fe:21:3e:
                    b2:0f:82:aa:7a:eb:d5:f9:15:96:2c:65:f9:3a:28:
                    61:0c:f1:72:a8:1a:3b:4d:41:8e:4b:73:28:0c:b8:
                    a9:05:24:93:69:1d:78:fd:8e:14:1d:d6:c2:af:e5:
                    7f:85:e9:74:ae:c9:74:80:8b:ce:f9:48:34:72:43:
                    df:9c:38:77:74:09:03:d1:7f:b1:45:11:7b:ab:1c:
                    e7:c9:f2:e7:a8:e9:19:2a:f7:e1:e2:c0:a1:7e:eb:
                    8c:20:83:74:9b:03:29:ef:59:0d:02:4c:de:59:a2:
                    c0:78:e4:8c:e4:08:80:ac:79:fb:e0:6f:94:31:82:
                    3e:49:fa:71:ba:da:1f:c9:e4:cf:a6:89:ba:15:b4:
                    b9:d1:2e:e9:c6:2a:6d:e7:f1:77:2c:8a:3b:ee:95:
                    a4:34:7e:c8:9a:f2:03:56:67:1b:19:76:21:e0:cd:
                    48:fa:f4:fd:77:16:f9:d2:be:a5:e5:27:44:aa:b7:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:78:80:8E:A5:1F:48:A2:6E:19:E8:A4:DB:08:D8:C3:CE:40:2E:C3
            X509v3 Authority Key Identifier:
                keyid:6B:D6:13:29:CC:9F:31:3A:9A:21:BD:E8:18:B6:8C:5D:BB:7B:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3332203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4160::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:2b:c0:fb:91:37:26:2c:96:9e:cc:80:2a:bc:36:87:c1:59:
         64:e6:94:6a:2e:9b:55:1d:90:1d:40:ec:8a:89:86:7f:28:69:
         ab:ea:f1:cb:b9:0f:2e:18:fb:99:8f:6e:21:a2:2f:5a:1b:32:
         36:d8:d6:1f:4e:2d:5a:03:c5:b6:a1:97:fe:00:c8:91:9a:08:
         4a:11:15:34:bf:de:13:bd:52:71:6b:bb:4c:50:64:97:d3:50:
         48:45:a5:be:52:9a:42:8a:34:eb:69:2d:67:b6:e8:97:ff:4b:
         a2:7d:8c:da:5b:1a:52:97:b0:d6:98:a3:30:6f:94:4b:bc:63:
         79:96:ce:41:47:d1:64:3d:a7:7d:6f:54:43:2c:55:8f:28:3d:
         0a:06:ec:d2:6d:9c:29:c5:4b:b3:49:37:22:8c:99:f7:fd:9a:
         1f:5e:f2:5d:19:11:74:12:9a:24:76:2e:11:17:94:be:00:49:
         f8:ef:c0:d9:a8:15:91:ab:cd:07:e5:00:f6:69:ba:3e:08:ea:
         53:08:9c:26:10:0a:f1:0f:ef:49:19:b8:40:4e:d7:56:61:44:
         d8:2d:51:cf:06:70:70:31:c3:b0:2b:64:c0:f1:ea:e8:46:2d:
         19:10:ae:b0:fd:de:96:a1:1e:82:d4:ee:0e:8e:ba:5d:23:5d:
         6b:11:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 19:17:38 2026 by rpki-client