Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/323830343a336434383a3a2f33322d3438203d3e20323636323635.roa
File:                     323830343a336434383a3a2f33322d3438203d3e20323636323635.roa (raw, json)
Hash identifier:          kgZaqTwG4E8BxgsFhJEhzXMbYRSaSug47Cb8mllxLHI=
Subject key identifier:   3C:BC:03:AC:C6:E1:9E:C0:A6:85:25:17:28:83:74:62:B8:12:21:0F
Certificate issuer:       /CN=87D404F5945CF1D559678B8A2FCA53F3BE1789B6
Certificate serial:       5AD956FFB005C2629E96A6CB43EBEE8D9EC47048
Authority key identifier: 87:D4:04:F5:94:5C:F1:D5:59:67:8B:8A:2F:CA:53:F3:BE:17:89:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/323830343a336434383a3a2f33322d3438203d3e20323636323635.roa
Signing time:             Tue 18 Aug 2026 16:23:59 +0000
ROA not before:           Tue 18 Aug 2026 16:18:59 +0000
ROA not after:            Tue 17 Aug 2027 16:23:59 +0000
asID:                     266265
IP address blocks:        2804:3d48::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.crl
                          rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d9:56:ff:b0:05:c2:62:9e:96:a6:cb:43:eb:ee:8d:9e:c4:70:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87D404F5945CF1D559678B8A2FCA53F3BE1789B6
        Validity
            Not Before: Aug 18 16:18:59 2026 GMT
            Not After : Aug 17 16:23:59 2027 GMT
        Subject: CN=3CBC03ACC6E19EC0A685251728837462B812210F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:40:59:29:4b:da:f5:b9:f1:12:e7:24:71:
                    50:6b:a6:0a:e6:bd:7f:aa:0e:96:19:30:3f:0c:10:
                    ae:3c:e6:c5:65:d5:34:8c:1e:d2:5c:4e:cd:b2:5a:
                    60:d4:46:ce:a4:59:54:bd:94:3e:1a:28:c8:91:8e:
                    9e:42:02:e6:35:a2:60:df:d7:65:22:82:98:e9:fb:
                    e9:bc:32:12:99:34:a6:62:df:e0:89:f1:a7:98:e1:
                    37:d2:28:16:77:b6:0e:5f:2c:4c:bd:21:26:23:3b:
                    01:61:94:26:b7:84:c4:9f:b1:80:15:4b:69:93:16:
                    d4:f2:2a:22:1f:a6:e7:0f:00:fd:ec:d5:a6:11:b3:
                    d3:43:24:0c:b0:85:94:2f:82:d7:42:17:0b:aa:8e:
                    e8:6f:63:6d:c2:d2:b0:f0:85:48:db:5c:1f:48:38:
                    ef:de:aa:3d:b0:a7:52:1b:f6:30:a5:e5:8e:ba:d5:
                    fd:73:4c:06:1c:f9:5a:43:b7:ef:cb:0f:6d:ca:34:
                    37:16:11:cf:8a:de:6a:f4:4d:eb:ae:1b:e5:77:20:
                    97:ec:41:f6:00:dc:43:17:c7:c7:ac:eb:a5:7a:1a:
                    ec:5c:68:cd:bc:4d:83:55:9c:d7:76:39:2a:ff:5d:
                    19:73:50:d4:3e:76:11:6b:16:4b:8f:57:e8:9d:54:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BC:03:AC:C6:E1:9E:C0:A6:85:25:17:28:83:74:62:B8:12:21:0F
            X509v3 Authority Key Identifier:
                keyid:87:D4:04:F5:94:5C:F1:D5:59:67:8B:8A:2F:CA:53:F3:BE:17:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D404F5945CF1D559678B8A2FCA53F3BE1789B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/323830343a336434383a3a2f33322d3438203d3e20323636323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d48::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:9d:7f:a1:35:fa:1f:42:e6:0f:e7:71:8d:d2:07:3f:08:f5:
         13:fb:91:ef:a9:ac:70:8e:96:52:27:5e:0c:28:97:33:bb:c0:
         c1:4b:21:db:45:8c:54:9a:e1:f9:65:a6:a5:05:31:38:d0:29:
         90:10:aa:51:29:32:10:46:2a:37:af:e4:ab:4f:a7:55:c3:3a:
         8d:db:28:ff:d3:ce:33:c3:d4:b0:85:3e:ea:db:6e:49:e7:d2:
         a0:a6:d9:f0:39:b6:93:00:92:74:8a:a9:67:8c:e8:1e:2d:c3:
         1c:b5:0d:f8:ac:a3:45:82:9e:70:3e:34:1d:a4:bd:b2:ad:c2:
         49:cb:6b:38:31:0a:a7:7a:f8:f8:20:54:2e:84:7c:b9:66:a6:
         30:08:8b:28:4d:05:b5:66:80:6b:fd:13:14:7d:3e:f5:10:a5:
         8b:52:aa:bb:31:47:70:16:89:49:bd:1f:3f:fc:2a:d8:d2:35:
         e2:04:93:55:00:45:27:1a:67:e3:78:14:c5:a8:35:1b:ea:f2:
         0c:21:d3:fa:24:f3:0f:9f:c5:f8:2d:71:f3:7d:4f:ed:88:a1:
         91:41:20:ca:6e:1c:ef:42:fc:2e:8c:0c:1f:a5:cc:47:3c:56:
         b5:5e:2f:55:59:5a:5e:97:eb:5e:df:1b:2c:1f:84:61:b3:c9:
         d2:82:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:32:01 2026 by rpki-client