Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/323830343a353364383a633030303a3a2f33342d3334203d3e20323638363130.roa
File:                     323830343a353364383a633030303a3a2f33342d3334203d3e20323638363130.roa (raw, json)
Hash identifier:          zlr0iiLu9h+xCbfNxkDALiEJlq33y+gXqwkqF1OaIA8=
Subject key identifier:   99:6A:E7:C9:75:C5:84:6D:25:AE:DF:1D:11:54:39:24:8A:B9:73:1F
Certificate issuer:       /CN=0D1A4974C46426C2F298D2049A60840923ED886E
Certificate serial:       2F13A5B849F5C6DA73C3E97BDBE18D7B91B7B5BD
Authority key identifier: 0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/323830343a353364383a633030303a3a2f33342d3334203d3e20323638363130.roa
Signing time:             Tue 11 Aug 2026 12:45:51 +0000
ROA not before:           Tue 11 Aug 2026 12:40:51 +0000
ROA not after:            Tue 10 Aug 2027 12:45:51 +0000
asID:                     268610
IP address blocks:        2804:53d8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl
                          rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 03:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:13:a5:b8:49:f5:c6:da:73:c3:e9:7b:db:e1:8d:7b:91:b7:b5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1A4974C46426C2F298D2049A60840923ED886E
        Validity
            Not Before: Aug 11 12:40:51 2026 GMT
            Not After : Aug 10 12:45:51 2027 GMT
        Subject: CN=996AE7C975C5846D25AEDF1D115439248AB9731F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:91:77:58:66:c9:76:68:a2:84:c1:40:fb:
                    4b:7e:2b:d9:0b:cb:66:f8:e4:06:21:0f:d5:37:97:
                    df:bf:40:f3:71:bc:b6:e9:33:f6:2c:7a:77:f7:df:
                    d8:0e:d1:8c:69:41:f6:4a:35:0e:79:3e:ce:0e:78:
                    0e:7b:45:50:2c:c4:b7:14:90:eb:8b:ae:63:d7:2c:
                    20:24:79:01:12:2c:0d:d4:5c:8a:6c:9c:1e:2d:f2:
                    b8:64:d5:45:bc:1e:bb:03:89:a2:8b:35:08:2a:e7:
                    fc:83:b6:98:fe:0a:d9:ee:8b:89:e8:e6:75:e4:bc:
                    4f:91:31:10:6a:7a:00:7d:e5:08:90:41:b7:a4:79:
                    24:11:21:2b:56:4c:c2:8f:4c:61:37:63:09:17:42:
                    3e:c8:37:cd:75:b4:5e:93:0d:f1:08:17:fc:94:4a:
                    9a:c5:de:84:3f:99:c4:93:c9:eb:a4:12:4f:8f:1c:
                    98:a7:27:fd:b6:e8:8d:c9:35:aa:d5:68:3c:98:ff:
                    2b:0f:f0:aa:bb:e6:e1:1f:a9:a9:54:96:81:a0:61:
                    bf:25:88:67:7a:fe:39:86:30:0f:4b:37:77:dd:c8:
                    8a:9c:95:d5:d5:7b:25:da:83:6c:9b:e2:13:bb:56:
                    c8:81:47:ef:c3:50:cf:f8:28:3d:d2:20:b3:38:d1:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6A:E7:C9:75:C5:84:6D:25:AE:DF:1D:11:54:39:24:8A:B9:73:1F
            X509v3 Authority Key Identifier:
                keyid:0D:1A:49:74:C4:64:26:C2:F2:98:D2:04:9A:60:84:09:23:ED:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/0D1A4974C46426C2F298D2049A60840923ED886E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1A4974C46426C2F298D2049A60840923ED886E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmLnoMe1bzjjKzzeTSUxDoQ6LyewYFffe33ryUXXv3SL/0/323830343a353364383a633030303a3a2f33342d3334203d3e20323638363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53d8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:8f:a9:63:f7:34:fd:d9:94:e7:b4:83:bd:f6:07:02:53:62:
         cd:f7:d2:71:36:3b:34:a6:2b:25:2c:ea:08:64:8d:62:90:7e:
         47:c4:8e:67:2b:b9:06:3a:07:80:c5:a1:2c:53:0b:95:b3:75:
         f3:a4:77:81:6c:bb:7c:67:f0:42:5c:00:22:64:a4:df:e5:2c:
         29:b2:57:d6:02:c0:18:e9:71:e8:51:95:79:13:fa:11:40:f1:
         5c:72:7a:f9:69:cf:c8:2c:35:08:9b:f4:ad:b4:c7:9a:e4:25:
         f5:45:e3:28:8b:6e:1d:d0:6d:5a:d9:0a:61:fd:50:20:dc:df:
         a6:10:4b:2d:a2:bc:fb:65:3e:31:fa:c0:81:4f:83:61:a6:09:
         b2:da:2e:cd:79:d7:eb:cb:c4:d2:8a:32:32:14:6b:8f:fe:bb:
         e7:1b:a0:73:75:1e:0e:cc:0e:e1:8c:fe:4d:8f:25:fa:11:7c:
         81:3d:f3:d7:11:2c:52:7c:67:31:05:d8:31:01:00:7a:73:9f:
         97:b7:c0:47:34:cb:5a:fe:ff:01:20:3e:f6:82:8e:ac:5c:42:
         e4:30:29:e6:8b:f7:cc:4f:fc:60:3c:17:d3:19:93:bb:73:9e:
         ef:6e:3f:9b:55:3f:40:5a:ce:d8:da:9a:a8:55:3e:54:68:2b:
         07:2a:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:48:38 2026 by rpki-client