Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6535303a3a2f33322d3438203d3e203533303637.roa
File:                     323830343a6535303a3a2f33322d3438203d3e203533303637.roa (raw, json)
Hash identifier:          41N0SbSd5HkAmIjGxAbZyMi746GgB8+E6Anbtg/xmf8=
Subject key identifier:   98:9B:87:09:F2:40:14:4A:00:D5:35:15:59:15:E3:2D:26:FC:35:D2
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       7681844B9D1C5706BC8A2246A6DB9E06DC478624
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6535303a3a2f33322d3438203d3e203533303637.roa
Signing time:             Mon 26 Oct 2026 02:38:24 +0000
ROA not before:           Mon 26 Oct 2026 02:33:24 +0000
ROA not after:            Mon 25 Oct 2027 02:38:24 +0000
asID:                     53067
IP address blocks:        2804:e50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 17:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:81:84:4b:9d:1c:57:06:bc:8a:22:46:a6:db:9e:06:dc:47:86:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:24 2026 GMT
            Not After : Oct 25 02:38:24 2027 GMT
        Subject: CN=989B8709F240144A00D535155915E32D26FC35D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:8d:95:bd:b8:eb:a0:67:e7:84:23:bd:f4:
                    dd:65:d4:6d:ca:79:de:01:92:39:af:45:6c:6a:74:
                    07:83:fb:28:ae:b9:8c:74:e6:cd:19:ce:9a:64:a4:
                    70:19:f7:f7:9f:b1:a4:02:6a:ec:90:25:5f:13:88:
                    66:32:0a:3b:8d:25:ad:e5:18:32:df:89:e1:fd:d7:
                    1e:ff:29:a2:ff:9f:79:19:a5:7a:65:ac:b9:9b:a4:
                    a0:fd:d0:e2:cc:f3:3f:28:d7:f6:8b:36:94:e7:12:
                    0a:8e:2b:ae:72:cc:27:09:1a:39:93:90:ab:d3:2c:
                    9c:de:0c:f6:32:98:92:ef:52:4c:e2:71:b5:ca:75:
                    e5:09:73:f0:43:1a:86:ea:f9:63:0e:e1:7a:47:5a:
                    a4:db:3f:ff:d2:1e:c5:10:56:62:29:0a:20:0b:23:
                    83:f3:0f:0f:c1:d2:a1:a7:25:cb:42:9a:60:e2:b4:
                    09:27:c9:d8:8a:f8:16:09:4b:ad:de:cc:6d:86:32:
                    3e:07:a7:5d:c7:20:da:9a:19:09:d4:9d:d5:2c:31:
                    6a:3f:59:1a:6d:c8:2c:cf:bf:a4:30:53:d9:9c:cc:
                    32:f8:f9:e7:39:29:47:7b:6f:33:25:f0:cd:1b:51:
                    8c:f9:ed:ef:91:3f:7c:23:bc:fc:c4:23:cc:86:59:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9B:87:09:F2:40:14:4A:00:D5:35:15:59:15:E3:2D:26:FC:35:D2
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6535303a3a2f33322d3438203d3e203533303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:86:b7:77:7b:fb:85:14:21:c5:8b:6e:09:fa:45:60:17:
         e7:a3:3f:ba:0e:1b:8c:bf:8a:6c:e6:c2:4e:77:70:1e:24:c9:
         88:9a:e3:8d:86:87:d7:a8:dc:9f:2e:cb:ef:42:20:79:9c:45:
         45:bc:1b:20:27:0f:ed:e6:cd:54:0a:df:78:f3:51:b2:e0:d3:
         57:09:8a:2c:a1:55:ca:ff:0a:25:a6:9f:56:f1:82:79:94:0f:
         07:6f:0b:63:18:01:a7:ed:fe:fc:03:23:6f:bb:e7:63:ce:0a:
         0c:6d:2b:98:f8:5f:ed:ac:59:f5:7c:50:2d:64:2e:f8:1b:56:
         a4:67:70:2b:a8:0a:10:ad:77:eb:88:2e:a8:23:11:68:74:84:
         6f:e7:3a:1b:56:4f:c5:54:4e:07:fb:79:90:e5:d3:38:e0:a8:
         ce:bb:b3:bb:c5:35:50:72:00:42:3c:11:43:7b:a9:e2:ed:c3:
         ff:7b:60:88:e1:de:20:d0:a5:0d:29:ff:ea:4d:e0:49:e3:fa:
         f9:69:67:ab:14:08:60:97:c0:6d:99:cc:ff:c8:b1:4f:80:e9:
         d3:12:0d:72:f8:bb:b9:88:f5:45:5d:a5:91:c6:65:24:ff:88:
         45:c7:38:7c:4c:60:a9:49:6c:96:00:e9:aa:db:59:88:a4:82:
         03:5e:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:10:28 2026 by rpki-client