Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/323830343a336166383a3a2f33342d3334203d3e20323636313231.roa
File:                     323830343a336166383a3a2f33342d3334203d3e20323636313231.roa (raw, json)
Hash identifier:          1mlFK4Y9ves7G25wDLCy8tJNvrIwZv32MNDAwR4xS0g=
Subject key identifier:   85:C5:E1:23:6B:10:36:EB:CA:E8:FA:A0:E4:5A:F0:D5:C1:BC:E6:84
Certificate issuer:       /CN=4483FC94AC3AF616894064AA3508F70A4814E8F0
Certificate serial:       21B987577A65AAB1710F261E89C7F582FA6327E5
Authority key identifier: 44:83:FC:94:AC:3A:F6:16:89:40:64:AA:35:08:F7:0A:48:14:E8:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/323830343a336166383a3a2f33342d3334203d3e20323636313231.roa
Signing time:             Fri 18 Sep 2026 13:56:26 +0000
ROA not before:           Fri 18 Sep 2026 13:51:26 +0000
ROA not after:            Fri 17 Sep 2027 13:56:26 +0000
asID:                     266121
IP address blocks:        2804:3af8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.crl
                          rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b9:87:57:7a:65:aa:b1:71:0f:26:1e:89:c7:f5:82:fa:63:27:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4483FC94AC3AF616894064AA3508F70A4814E8F0
        Validity
            Not Before: Sep 18 13:51:26 2026 GMT
            Not After : Sep 17 13:56:26 2027 GMT
        Subject: CN=85C5E1236B1036EBCAE8FAA0E45AF0D5C1BCE684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:93:7d:06:b5:05:3e:5d:e9:ae:5a:ad:15:81:
                    dc:0f:5a:96:ba:f8:14:79:4b:95:6f:66:fa:de:23:
                    ff:95:8d:70:ae:59:5a:b2:3b:a6:1f:4f:d7:92:c3:
                    2f:9f:34:80:75:a4:eb:23:17:7f:0a:81:37:11:54:
                    2d:a2:1b:40:67:1b:41:af:d9:ee:99:ad:5c:85:51:
                    cd:ef:51:fc:e9:13:11:61:26:7d:8d:3c:a8:00:b4:
                    17:c3:d2:aa:d6:a5:28:25:40:a2:3b:c4:ca:fc:8e:
                    af:7f:d6:ae:49:b1:ba:c5:ad:ae:c6:cb:92:0d:0b:
                    76:d7:55:57:eb:b1:5b:22:81:9b:4a:3f:64:6f:8f:
                    9e:1e:74:13:cd:49:2b:e0:2f:7d:1e:5b:67:ff:d1:
                    37:25:8e:b7:2f:52:62:f7:64:b6:81:27:86:e2:e1:
                    9a:22:d8:0d:56:ca:5b:a8:6d:91:f7:ab:9c:b4:d1:
                    f7:d1:0b:cc:4a:63:0b:8a:ec:fc:14:2e:35:2d:4d:
                    4a:ab:d4:e6:34:2b:26:58:4b:d9:fb:12:6f:f3:fa:
                    72:8c:28:f5:d1:70:da:2a:48:f7:95:20:64:81:49:
                    69:28:31:76:5e:5e:2c:43:b3:7e:b3:ea:6f:70:18:
                    83:e2:56:91:cb:c0:81:3b:11:5b:47:6f:e0:3e:89:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C5:E1:23:6B:10:36:EB:CA:E8:FA:A0:E4:5A:F0:D5:C1:BC:E6:84
            X509v3 Authority Key Identifier:
                keyid:44:83:FC:94:AC:3A:F6:16:89:40:64:AA:35:08:F7:0A:48:14:E8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/323830343a336166383a3a2f33342d3334203d3e20323636313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3af8::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:2c:72:55:c8:56:dd:66:79:64:76:61:ca:7b:6f:17:d7:95:
         83:c2:d5:1a:17:68:69:43:9c:5b:f1:9b:f5:d9:94:e1:58:61:
         ee:9b:2e:53:30:4c:5d:ef:59:64:5e:2d:20:6a:64:70:96:27:
         aa:80:31:ec:15:97:b6:41:d3:50:15:5b:35:c4:d1:bd:43:11:
         1a:e1:4e:57:6e:de:a2:d5:78:03:bd:55:e6:cf:69:69:b4:08:
         5d:62:52:08:f2:d7:76:8c:4a:2f:b5:a9:62:53:e2:13:ba:ad:
         a7:3f:c0:f2:a8:10:16:cc:b4:b6:27:f0:6d:d6:68:d1:36:18:
         9d:00:0d:64:66:fd:d3:26:03:b9:75:26:76:09:f7:5e:1b:7c:
         f0:2b:fe:1b:c1:c5:f3:7a:70:da:e2:0f:57:62:5b:25:3d:7e:
         8f:02:9b:11:6a:c4:5c:77:f9:ac:c4:a4:0e:37:ae:2e:3b:da:
         30:5b:bb:7d:ec:7a:e6:25:ea:21:29:26:1e:db:a2:ae:40:53:
         1f:10:fe:0b:60:ae:a7:68:65:3f:46:2f:89:fb:ae:83:f4:69:
         cd:21:e2:d1:49:64:e4:ba:30:6d:77:57:48:b9:17:39:52:18:
         48:45:d3:f9:2e:27:61:50:2e:1b:3d:3b:b7:ea:d5:d8:5a:3d:
         f5:ce:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:57:39 2026 by rpki-client