Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa
File:                     323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa (raw, json)
Hash identifier:          3xKg7kMXzvB4D6xff3b1N1f8wI0h26MsORcRVOWRt2c=
Subject key identifier:   4F:01:73:9E:B0:D2:DF:9C:0C:20:0B:E2:83:53:23:2A:71:B7:2D:CD
Certificate issuer:       /CN=C35549FD881F7AAE59D817159EC9B19049B93616
Certificate serial:       05BF0BC9B4D18B95DC28399701D455181FEFF29C
Authority key identifier: C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa
Signing time:             Sun 06 Sep 2026 20:12:58 +0000
ROA not before:           Sun 06 Sep 2026 20:07:58 +0000
ROA not after:            Sun 05 Sep 2027 20:12:58 +0000
asID:                     270966
IP address blocks:        2804:5984:b400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 13:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bf:0b:c9:b4:d1:8b:95:dc:28:39:97:01:d4:55:18:1f:ef:f2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35549FD881F7AAE59D817159EC9B19049B93616
        Validity
            Not Before: Sep  6 20:07:58 2026 GMT
            Not After : Sep  5 20:12:58 2027 GMT
        Subject: CN=4F01739EB0D2DF9C0C200BE28353232A71B72DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:55:40:a2:62:19:e4:07:5c:09:ca:e2:76:
                    22:49:16:1a:f6:e5:89:89:c4:aa:f6:c8:7c:d7:e7:
                    89:3c:09:79:00:08:92:1b:c8:dc:40:04:bd:16:fd:
                    76:ab:ed:39:e4:39:1b:58:71:f4:30:59:7e:db:20:
                    38:3d:09:2b:41:7e:fc:1b:00:a3:ab:7f:b9:56:0c:
                    e3:1d:4f:56:69:68:4f:62:ed:6d:cd:7d:18:1a:fd:
                    2c:84:19:a7:92:4d:23:87:1b:0a:a0:5a:58:17:72:
                    81:0b:7e:7f:e0:b2:e1:9a:a8:71:46:d8:2f:f7:13:
                    a9:02:5a:20:e4:d2:41:e5:62:17:a3:64:8a:fe:58:
                    a0:bf:bd:21:71:d4:36:5e:c2:dc:9f:33:61:97:c3:
                    42:0f:95:56:da:97:d5:04:df:af:0f:2f:9b:34:ea:
                    e4:44:0e:72:ec:e6:42:07:02:79:22:bd:65:8a:ee:
                    99:af:49:6b:9b:2f:d1:5f:cb:25:41:b5:31:9c:ea:
                    60:e3:1a:83:2f:c3:4e:5c:15:a0:1d:13:ec:a2:23:
                    c4:b7:d5:3d:a0:81:7d:a1:be:05:12:70:5a:f4:be:
                    de:84:25:e7:10:c5:0b:0f:34:a4:b8:12:21:64:23:
                    d8:47:98:31:42:d8:e0:cc:90:df:85:0c:74:7d:39:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:73:9E:B0:D2:DF:9C:0C:20:0B:E2:83:53:23:2A:71:B7:2D:CD
            X509v3 Authority Key Identifier:
                keyid:C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:b400::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:73:fe:39:98:ca:d1:61:be:8a:c4:0b:09:59:ea:a7:9e:23:
         ec:ca:2d:21:e9:f2:37:19:40:37:52:20:a0:b6:6c:dc:af:d8:
         70:83:59:59:8d:26:58:27:c3:0a:6e:07:f9:47:37:75:0c:13:
         57:91:b6:b6:44:38:59:f8:67:04:5d:ff:a1:9a:7e:43:74:d6:
         6b:25:ec:41:fa:8d:29:f0:d9:fe:b0:7c:c8:70:5d:9b:f6:75:
         b9:e9:b6:65:2b:c2:4f:02:32:a5:d9:04:50:43:26:48:4f:03:
         28:ae:c1:20:4b:f5:ee:e2:9e:c2:15:d5:1a:d0:fc:42:a4:ef:
         ec:8a:8a:e9:3b:4a:7e:11:75:27:47:82:90:5d:e9:cf:c5:e7:
         9c:75:73:ae:2f:71:5c:ab:02:80:55:61:e0:57:31:84:a6:e5:
         9f:d4:5b:1d:df:8d:8c:75:1d:aa:53:9a:40:fb:10:9f:78:fd:
         d6:81:62:f1:8c:a6:ef:fc:74:40:cb:73:fd:ef:7c:9b:d8:a9:
         f6:ee:b9:c1:b0:35:e7:f5:2e:1b:8e:58:df:35:e1:08:6d:66:
         6a:1a:45:51:f7:25:3f:e8:8a:9d:26:73:89:f4:a4:7b:3c:df:
         9d:3b:aa:4f:70:67:d3:7e:4c:d0:c6:6d:07:49:d8:a5:8c:4c:
         ee:58:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 05:39:57 2026 by rpki-client