Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/323830343a326636383a3a2f33322d313238203d3e20323634383839.roa
File:                     323830343a326636383a3a2f33322d313238203d3e20323634383839.roa (raw, json)
Hash identifier:          SelNCK+n7byE6x3SkITTF46op56QPsSXAXJb+Wg0J/I=
Subject key identifier:   0A:34:AC:E1:93:36:58:CF:33:E6:C4:A0:2B:96:46:D1:7D:0E:28:49
Certificate issuer:       /CN=02841926F957B15864E9B2B024AD350B3F57EC78
Certificate serial:       7E4ABFC021DF2E32C84EC8B32F4B23F6AC14153C
Authority key identifier: 02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/323830343a326636383a3a2f33322d313238203d3e20323634383839.roa
Signing time:             Tue 25 Aug 2026 13:28:52 +0000
ROA not before:           Tue 25 Aug 2026 13:23:52 +0000
ROA not after:            Tue 24 Aug 2027 13:28:52 +0000
asID:                     264889
IP address blocks:        2804:2f68::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl
                          rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 07:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4a:bf:c0:21:df:2e:32:c8:4e:c8:b3:2f:4b:23:f6:ac:14:15:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02841926F957B15864E9B2B024AD350B3F57EC78
        Validity
            Not Before: Aug 25 13:23:52 2026 GMT
            Not After : Aug 24 13:28:52 2027 GMT
        Subject: CN=0A34ACE1933658CF33E6C4A02B9646D17D0E2849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:19:be:a8:34:0a:e6:cd:92:9a:5e:32:99:
                    23:b8:a6:27:3b:05:02:68:a4:f7:c0:ad:e2:99:57:
                    30:62:9f:fb:23:d6:0d:6d:f5:8f:43:37:58:14:fc:
                    28:24:69:e6:7e:1e:83:52:30:e5:ba:b2:fa:b4:66:
                    aa:c1:0c:68:c0:0e:8c:50:31:e1:26:a7:bf:f9:88:
                    32:ec:83:65:59:04:4b:ba:27:dd:0c:0b:2f:df:33:
                    16:a2:67:47:b3:d4:37:d9:de:74:b0:e4:c5:3e:15:
                    02:65:72:d2:de:bb:ec:d2:28:4a:ec:9c:71:f6:21:
                    2e:54:41:77:56:87:e3:5a:9f:d6:36:21:1e:ed:3c:
                    68:74:28:ba:36:61:af:24:bf:80:bb:2b:57:4e:e0:
                    49:12:a9:e3:ae:09:1b:51:cf:59:f8:92:5f:99:c2:
                    e7:9b:58:22:37:7c:42:bf:23:d0:09:2b:19:5f:f4:
                    e4:56:69:e1:8d:c1:10:c6:c8:ab:0d:9d:d2:33:8e:
                    6f:46:6a:dc:8a:69:bb:00:fc:8f:d8:88:65:e8:fe:
                    56:5d:18:ae:2f:39:d7:0e:43:90:33:fa:ec:35:0a:
                    05:fb:f0:e6:3b:06:cf:c5:92:6a:32:73:80:c4:63:
                    a5:58:68:df:8d:43:8c:d3:53:7d:96:38:30:45:95:
                    e2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:34:AC:E1:93:36:58:CF:33:E6:C4:A0:2B:96:46:D1:7D:0E:28:49
            X509v3 Authority Key Identifier:
                keyid:02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/323830343a326636383a3a2f33322d313238203d3e20323634383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f68::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:a3:80:65:c9:fe:63:87:92:dd:20:5d:a2:15:1d:e8:8d:e7:
         58:dc:88:8b:1c:14:9d:0a:60:da:74:d8:3b:77:34:f3:13:e6:
         30:7d:2c:bb:19:8e:bb:35:58:d8:b4:42:d1:d7:1f:1f:43:64:
         c2:6b:3e:22:eb:d1:5b:2f:53:cc:95:bc:03:37:d3:75:12:01:
         72:cf:0c:75:19:1b:97:23:8b:96:ee:ca:9c:6a:40:db:af:01:
         34:86:46:96:d9:5d:10:89:0e:34:8f:f6:bb:ad:c6:69:ed:b6:
         43:b4:b5:2d:a1:28:ce:08:2e:ac:78:3c:64:c0:63:7e:85:be:
         bb:a7:78:20:fe:5b:96:ad:50:1b:63:82:37:7e:78:07:73:b4:
         bd:1f:0d:2b:d8:7c:f4:2c:d7:52:4d:78:dc:4a:b5:f9:a1:0c:
         c4:1b:93:b5:91:9f:49:b1:9a:56:27:3e:2a:c7:63:90:46:0b:
         f7:a1:8c:e1:5e:8d:79:1b:41:2d:f0:8d:99:ca:9b:da:86:1d:
         81:c0:49:b4:b6:69:f4:35:36:24:de:43:ac:ee:cb:04:47:48:
         ae:90:b7:3f:1d:16:e7:7b:0d:95:50:2c:78:45:e1:f7:10:8b:
         16:39:b9:70:b5:6f:a3:fc:f6:23:d1:e7:69:1d:46:e9:ac:8e:
         da:20:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----