Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33322d3438203d3e20323638373037.roa
File:                     323830343a353938343a3a2f33322d3438203d3e20323638373037.roa (raw, json)
Hash identifier:          9okqFIjeUFUekUistUHv0M6HERMdAS4BgDIozT20vzk=
Subject key identifier:   77:E8:8B:93:10:7A:6F:F0:2B:5F:44:BF:05:AD:1D:65:A0:B6:6A:23
Certificate issuer:       /CN=C35549FD881F7AAE59D817159EC9B19049B93616
Certificate serial:       38085A0D0206C7BD44AD48517C36005979105EB5
Authority key identifier: C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33322d3438203d3e20323638373037.roa
Signing time:             Sun 06 Sep 2026 22:47:00 +0000
ROA not before:           Sun 06 Sep 2026 22:42:00 +0000
ROA not after:            Sun 05 Sep 2027 22:47:00 +0000
asID:                     268707
IP address blocks:        2804:5984::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Sep 2026 20:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:08:5a:0d:02:06:c7:bd:44:ad:48:51:7c:36:00:59:79:10:5e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35549FD881F7AAE59D817159EC9B19049B93616
        Validity
            Not Before: Sep  6 22:42:00 2026 GMT
            Not After : Sep  5 22:47:00 2027 GMT
        Subject: CN=77E88B93107A6FF02B5F44BF05AD1D65A0B66A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:0a:0d:22:0e:1e:91:dd:ce:14:a1:8a:d9:
                    a7:47:5f:43:d8:ba:6a:3f:12:67:f0:09:a8:ac:c5:
                    d7:e0:2a:96:3c:57:a2:f5:7e:7a:7d:54:7b:1c:11:
                    bd:b6:6b:0f:da:0e:a2:9a:75:12:3d:c6:ac:09:3c:
                    09:1b:77:c7:23:89:01:5d:7e:62:f5:a3:00:7d:dd:
                    58:ea:84:64:49:34:10:6e:7b:6d:9f:44:be:c2:2d:
                    d9:98:19:16:28:8e:d5:13:77:bd:cd:ea:c4:d4:b6:
                    1c:06:4d:c0:c2:dd:f9:24:15:8d:7e:b1:62:44:1e:
                    cc:ba:d0:17:f8:83:ff:4e:6a:a3:42:41:8a:a0:07:
                    17:4c:11:b7:e8:f8:b0:73:8b:fc:66:ec:c2:c8:9e:
                    db:56:bf:37:16:c4:77:cb:7a:b5:83:8a:c8:c5:a7:
                    7a:f1:5d:29:a7:e7:32:f4:20:b8:34:55:ac:a0:92:
                    79:9b:41:3c:ba:b3:71:b5:01:6c:cb:70:c5:9c:22:
                    11:f4:a2:25:a6:2d:81:0b:51:8d:46:2e:48:6d:10:
                    db:dc:d9:27:14:07:f7:f3:6c:99:87:97:19:dc:2b:
                    9b:53:ed:de:1d:ba:1e:34:8a:37:13:b5:ee:30:89:
                    ce:0f:bb:6a:37:e6:f7:14:37:fd:7b:af:d3:67:7a:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E8:8B:93:10:7A:6F:F0:2B:5F:44:BF:05:AD:1D:65:A0:B6:6A:23
            X509v3 Authority Key Identifier:
                keyid:C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33322d3438203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:53:89:7b:7b:eb:19:40:22:64:d7:c1:a2:40:16:06:db:bc:
         2b:04:c3:de:c2:c1:ee:f2:e5:0c:e4:64:76:ab:6c:b9:7c:fa:
         f6:a8:6c:c0:a1:d2:f1:bc:aa:6d:08:01:7d:a2:64:0b:24:e1:
         b5:13:07:8b:8b:f0:06:6d:d0:dd:ec:fe:cc:53:f0:83:0d:d8:
         52:5b:66:bd:46:6c:83:7c:92:b0:66:e6:00:ed:94:58:58:66:
         81:93:5a:62:8f:43:00:40:7d:34:91:fa:f3:ed:7c:a8:91:e3:
         ea:67:b7:d2:4c:5f:9a:76:5b:a0:8c:cd:18:e5:62:01:97:5f:
         ac:74:e3:d8:91:81:b0:db:02:fe:f2:3f:7e:cd:e0:db:d0:4a:
         1d:e4:20:9e:98:61:99:aa:f0:88:73:3b:13:05:75:bf:94:45:
         32:8e:20:8a:c5:c8:27:1e:0e:9d:c6:80:0e:84:48:f5:03:cd:
         a3:db:cf:60:41:41:b9:06:4f:31:23:ab:63:b0:fe:9c:1d:b1:
         42:77:e2:6b:4f:3f:0f:3f:3b:aa:04:98:4f:12:28:58:6f:c2:
         1b:71:9d:c1:0c:da:35:67:1e:d5:84:21:f8:4a:c5:ec:99:47:
         47:0a:49:3d:81:60:2b:8e:33:a3:0e:e8:dc:ad:58:15:86:fd:
         4b:a6:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:54 2026 by rpki-client