Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/323830343a353364383a343030303a3a2f33342d3334203d3e20323638363130.roa
File:                     323830343a353364383a343030303a3a2f33342d3334203d3e20323638363130.roa (raw, json)
Hash identifier:          XRCUMmQbPH/4GNY24jSS0Ta1r+cOGySQMNIkTcoAtkI=
Subject key identifier:   8B:F9:FB:33:6D:A9:88:24:D8:77:FC:D7:8C:1D:7F:B2:63:3B:B3:07
Certificate issuer:       /CN=0D1A4974C46426C2F298D2049A60840923ED886E
Certificate serial:       05ED481F98129B8B021A762496E76F9F4A955EE3
Authority key identifier: 0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/323830343a353364383a343030303a3a2f33342d3334203d3e20323638363130.roa
Signing time:             Tue 11 Aug 2026 12:45:51 +0000
ROA not before:           Tue 11 Aug 2026 12:40:51 +0000
ROA not after:            Tue 10 Aug 2027 12:45:51 +0000
asID:                     268610
IP address blocks:        2804:53d8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl
                          rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 03:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ed:48:1f:98:12:9b:8b:02:1a:76:24:96:e7:6f:9f:4a:95:5e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1A4974C46426C2F298D2049A60840923ED886E
        Validity
            Not Before: Aug 11 12:40:51 2026 GMT
            Not After : Aug 10 12:45:51 2027 GMT
        Subject: CN=8BF9FB336DA98824D877FCD78C1D7FB2633BB307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:2d:ed:ec:2a:a0:40:35:27:29:bd:9f:0c:
                    46:10:3c:e4:97:c4:bb:5f:8f:3c:0f:c1:70:40:b0:
                    cb:a5:8b:bf:f8:5a:c3:79:49:f8:eb:83:2c:57:05:
                    bf:bb:ca:87:67:13:5e:a6:9c:ef:81:64:03:6d:23:
                    ed:5f:39:20:7c:38:c6:99:14:8b:e2:d1:39:61:b2:
                    c1:ba:3d:44:79:ef:09:56:57:f7:4e:ac:cc:84:37:
                    4a:51:a8:85:96:93:8a:37:78:23:23:e3:e9:21:07:
                    6b:41:a2:05:e3:32:dc:10:73:07:49:f7:1a:a5:d0:
                    84:6e:b1:cc:43:16:8d:93:d9:5f:4a:00:c1:74:00:
                    ee:13:d8:37:16:f8:15:26:19:30:1b:2e:cc:82:38:
                    fa:79:62:de:7d:96:20:a5:d1:d5:ec:34:c4:74:fd:
                    31:96:fd:5b:be:93:e3:1b:2c:ab:0f:78:fe:f1:91:
                    d4:5f:88:f2:99:4b:40:3b:aa:77:a8:5e:cc:4f:39:
                    37:2f:e7:a7:3d:fe:5e:59:2c:cb:0d:6b:6e:d4:e8:
                    1f:55:92:83:02:32:ca:48:59:9e:44:5f:6c:91:28:
                    de:c9:a0:3e:ed:f7:d8:0f:bc:a7:8b:7f:65:d3:3d:
                    90:7e:94:9e:d0:50:08:ca:7d:6b:82:ef:7b:a4:bf:
                    93:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F9:FB:33:6D:A9:88:24:D8:77:FC:D7:8C:1D:7F:B2:63:3B:B3:07
            X509v3 Authority Key Identifier:
                keyid:0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/323830343a353364383a343030303a3a2f33342d3334203d3e20323638363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53d8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:86:53:73:b2:06:18:45:c2:e8:33:38:eb:b9:d3:55:65:
         96:6f:08:87:61:1c:40:ea:8a:58:bf:81:68:98:9d:dd:a9:1e:
         3d:9a:60:d0:92:fa:35:9e:ce:73:54:e4:b4:5f:b2:5c:f3:a0:
         8e:e0:ba:56:cd:66:72:27:1f:70:08:b4:31:8a:97:6c:1b:ee:
         58:3c:83:45:72:cb:aa:e1:4b:71:4c:83:d6:7a:38:0e:4e:34:
         c2:95:92:d5:e0:4c:b0:c3:c2:03:c8:02:76:b9:dc:26:5f:ef:
         04:3c:e7:d0:11:0e:b8:92:16:1f:5f:f6:88:27:cc:10:77:2a:
         d8:e4:9f:65:5c:62:b8:fc:84:d7:67:47:79:29:80:51:fd:5a:
         25:d5:a0:88:c0:ed:b2:96:10:cf:2a:3e:a4:27:82:58:4a:8c:
         39:0f:a4:18:45:b3:2d:33:f6:b3:b1:42:78:06:21:31:c1:a2:
         e8:9f:91:ef:b2:b3:83:ce:b1:0c:40:8e:54:ff:d3:9e:f5:cc:
         06:15:73:bd:eb:8d:b6:26:b8:73:06:9e:2e:15:87:a7:83:2b:
         1a:2c:3e:65:ce:3f:cc:25:5e:67:fd:68:93:74:f4:90:eb:07:
         a0:76:5a:04:c0:dc:6e:87:4e:57:df:35:41:81:16:9c:23:30:
         9a:e5:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:48:38 2026 by rpki-client