Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/1/323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa
File:                     323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa (raw, json)
Hash identifier:          udhvizkRlyi5HdrXUpWibKl/EseaSrDnu5nl0z1oUvo=
Subject key identifier:   89:F7:77:72:80:05:68:77:B3:BC:62:8D:D3:68:11:FB:5C:D9:0E:13
Certificate issuer:       /CN=36726B630365E000269D09F903DB6652BE634B5D
Certificate serial:       680AFD0FA1A9D3FB8BE12638EE274F11086D1D32
Authority key identifier: 36:72:6B:63:03:65:E0:00:26:9D:09:F9:03:DB:66:52:BE:63:4B:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36726B630365E000269D09F903DB6652BE634B5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/1/323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa
Signing time:             Sun 06 Sep 2026 22:50:16 +0000
ROA not before:           Sun 06 Sep 2026 22:45:16 +0000
ROA not after:            Sun 05 Sep 2027 22:50:16 +0000
asID:                     272195
IP address blocks:        2804:8364:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/1/36726B630365E000269D09F903DB6652BE634B5D.crl
                          rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/1/36726B630365E000269D09F903DB6652BE634B5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36726B630365E000269D09F903DB6652BE634B5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 15:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0a:fd:0f:a1:a9:d3:fb:8b:e1:26:38:ee:27:4f:11:08:6d:1d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36726B630365E000269D09F903DB6652BE634B5D
        Validity
            Not Before: Sep  6 22:45:16 2026 GMT
            Not After : Sep  5 22:50:16 2027 GMT
        Subject: CN=89F7777280056877B3BC628DD36811FB5CD90E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:1f:94:cc:72:dc:26:2e:e7:3b:61:76:07:
                    31:01:d6:d0:b4:40:e2:15:ac:fd:c4:44:40:03:5b:
                    6e:ae:5c:8a:ae:f8:49:85:c2:59:96:b9:88:ef:85:
                    ea:d7:44:90:7d:7d:b6:98:2b:6d:67:a8:62:b1:d9:
                    64:0c:01:91:1f:de:88:90:dc:10:e1:50:8f:86:a2:
                    a0:05:7a:4a:23:63:21:ce:89:2b:bb:55:af:0b:a0:
                    d4:f1:1b:8a:89:bd:91:e5:e4:9f:93:19:e3:fc:2c:
                    d7:e7:69:9d:c8:82:32:74:9d:13:3e:66:64:fe:d1:
                    2c:50:84:cf:37:08:6c:5e:a0:b6:03:af:66:02:4a:
                    cd:dd:68:d3:ee:de:8d:64:79:fa:f8:cc:f7:49:8b:
                    e9:bf:c3:02:df:bf:48:a4:19:00:ae:21:bc:41:69:
                    19:e9:12:ad:80:a5:9c:9b:66:91:a3:b7:3e:bb:ae:
                    57:72:d2:be:b2:57:d4:19:63:4c:ad:17:f9:63:93:
                    65:61:13:87:7b:2f:65:00:30:87:37:14:ed:eb:1d:
                    4b:9f:9e:93:39:cf:79:00:e0:d2:74:a9:1f:bd:d4:
                    ae:f4:f0:4e:fc:bd:19:b1:3d:ef:79:71:c3:66:56:
                    fb:c9:f9:42:1a:5b:31:28:40:a9:65:83:7a:f5:2e:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F7:77:72:80:05:68:77:B3:BC:62:8D:D3:68:11:FB:5C:D9:0E:13
            X509v3 Authority Key Identifier:
                keyid:36:72:6B:63:03:65:E0:00:26:9D:09:F9:03:DB:66:52:BE:63:4B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/1/36726B630365E000269D09F903DB6652BE634B5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36726B630365E000269D09F903DB6652BE634B5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/1/323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8364:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:c1:e6:81:86:2e:d8:46:66:d9:65:32:03:c4:4a:54:a0:6b:
         c5:93:06:e1:38:08:3c:d2:d6:f6:ac:96:14:0a:bb:1c:ba:b4:
         9d:bd:96:05:f1:9f:e9:80:48:7d:72:97:61:a8:e4:50:75:a6:
         b8:d1:0a:9f:fc:1d:01:9e:8b:de:86:a7:f9:ae:cb:e0:ad:c8:
         58:5f:70:5a:34:18:28:15:bb:b0:09:e9:11:ac:c9:b7:8b:4a:
         60:26:42:13:1d:5d:a6:98:40:78:ee:bd:c5:f0:4d:2f:f9:eb:
         ce:fe:23:f4:e3:7c:5d:3c:9f:1d:6c:b9:a8:dc:cc:d2:9b:3f:
         50:8b:88:4f:84:db:ee:f4:4a:74:06:65:a1:7d:4c:58:26:26:
         a9:54:8d:d6:ea:95:66:1d:66:0d:61:b3:62:d5:b8:5f:c9:fb:
         40:5f:51:d8:1f:47:9d:8d:fc:31:01:c3:2a:09:22:fb:fd:aa:
         19:4f:b4:5d:bc:53:eb:60:e6:b6:ee:92:73:3c:8a:81:da:45:
         17:12:0b:9e:80:16:11:50:13:12:17:a1:db:dc:c1:35:1f:56:
         6f:c3:95:91:b4:61:dd:0c:c8:61:4b:4e:d0:f6:b9:31:be:9c:
         69:6c:02:4b:0a:cc:1b:4c:1e:25:8f:3b:18:b4:a4:6f:07:77:
         cd:d3:cd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:59:23 2026 by rpki-client