Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33332d3333203d3e20323637343239.roa
File:                     323830343a343136303a3a2f33332d3333203d3e20323637343239.roa (raw, json)
Hash identifier:          FSN3bdd1eheB9cEiQgSWFS1He4b4lGb0oI4uGHa5Wcg=
Subject key identifier:   88:AF:94:F9:C2:A1:38:9E:75:2C:3C:A2:47:BE:1D:DF:8C:CC:5A:78
Certificate issuer:       /CN=6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF
Certificate serial:       5343893E227C09E147F311CD72E6B822A7A96672
Authority key identifier: 6B:D6:13:29:CC:9F:31:3A:9A:21:BD:E8:18:B6:8C:5D:BB:7B:EB:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33332d3333203d3e20323637343239.roa
Signing time:             Tue 15 Sep 2026 17:31:35 +0000
ROA not before:           Tue 15 Sep 2026 17:26:35 +0000
ROA not after:            Tue 14 Sep 2027 17:31:35 +0000
asID:                     267429
IP address blocks:        2804:4160::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.crl
                          rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:43:89:3e:22:7c:09:e1:47:f3:11:cd:72:e6:b8:22:a7:a9:66:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF
        Validity
            Not Before: Sep 15 17:26:35 2026 GMT
            Not After : Sep 14 17:31:35 2027 GMT
        Subject: CN=88AF94F9C2A1389E752C3CA247BE1DDF8CCC5A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:23:61:20:e4:59:d1:f0:4f:ce:3c:78:17:
                    84:f4:08:80:68:6d:7c:05:98:7a:a7:70:c7:fe:e5:
                    53:36:66:d3:35:8d:84:ea:de:a1:6b:47:c0:fb:00:
                    12:e5:ca:5e:ce:dd:01:54:9b:9e:ee:74:d1:5f:9d:
                    6b:66:30:01:f1:d1:2b:54:12:17:78:a1:cc:5a:2f:
                    2b:b6:0c:12:0c:c3:87:fe:01:0f:bc:cb:0e:77:ab:
                    69:76:bf:6c:df:c2:88:ea:4e:e1:ff:37:12:e3:9d:
                    60:a6:6a:dc:0e:03:fc:fe:bc:97:be:4f:26:12:30:
                    24:b6:4e:98:02:0e:ed:d5:fc:f5:56:26:8b:51:85:
                    77:34:a5:54:c5:62:c7:a2:98:58:57:9a:4b:b2:e1:
                    33:f5:2b:8d:6f:0f:0c:11:fb:29:7e:72:e8:b3:31:
                    51:49:92:c8:89:2e:be:1c:bf:03:34:35:77:5a:b5:
                    47:8c:ea:ab:83:21:c8:02:26:36:3c:5e:83:16:82:
                    4e:c7:e3:e2:ec:33:ef:50:7b:96:01:bc:68:65:e9:
                    a5:76:f9:43:35:ca:91:6c:0e:36:01:49:b6:cb:79:
                    3b:c0:e4:8c:a1:26:aa:cf:a9:b4:c2:81:86:77:08:
                    6f:47:e7:32:ff:9d:81:8a:96:ab:9d:71:68:59:53:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AF:94:F9:C2:A1:38:9E:75:2C:3C:A2:47:BE:1D:DF:8C:CC:5A:78
            X509v3 Authority Key Identifier:
                keyid:6B:D6:13:29:CC:9F:31:3A:9A:21:BD:E8:18:B6:8C:5D:BB:7B:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33332d3333203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4160::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:93:be:dc:d2:41:90:33:d6:ea:8c:a3:63:7b:e8:20:72:06:
         d7:0a:a2:35:da:cf:62:25:71:e8:bd:e1:be:2b:16:2b:e3:e5:
         8e:db:a5:5e:8c:d4:34:a6:b4:27:47:2e:44:c1:fa:b3:b1:b5:
         a5:a5:26:1c:e8:5a:7f:74:72:84:14:8d:94:5f:f7:a3:fa:da:
         e9:0f:3e:63:b0:e5:f8:8d:c8:6a:b0:69:cd:4a:41:20:aa:5f:
         1c:ce:e0:51:28:24:1b:48:d2:bc:92:50:41:c1:49:e2:03:01:
         20:7e:0e:c2:8f:50:96:94:3b:5f:c4:80:3c:dd:7b:18:e0:f1:
         72:0d:e1:f6:6a:c1:8b:76:77:74:e1:5d:20:35:2b:bf:14:79:
         75:21:69:50:a0:38:7f:4d:dc:01:8a:b7:39:c4:c5:0a:3a:0f:
         c0:62:3a:b4:f5:d6:5c:d2:1d:82:ce:b5:35:0d:ff:de:65:da:
         a1:26:1b:50:35:f2:21:24:21:0e:87:55:83:ab:3d:55:7b:6d:
         08:c8:7d:70:cd:e3:d3:ea:b4:2e:e7:9a:70:9c:5d:1d:3f:23:
         c6:73:f3:dc:a1:01:13:d4:b3:eb:37:c0:c4:d0:94:ac:9f:a1:
         ff:cc:de:cb:9e:8e:48:fa:55:8e:9e:ca:5e:ce:46:f0:48:0c:
         b2:ab:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:14:45 2026 by rpki-client