Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/323830343a336262383a3a2f33322d313238203d3e20323636313637.roa
File:                     323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (raw, json)
Hash identifier:          ZInYg7jqewEvQkwJvNCn92OaggGmd7qb4tfy4R3Gyow=
Subject key identifier:   36:A1:09:8F:32:1C:15:FF:5D:96:24:99:DF:D0:ED:57:E5:08:CE:CE
Certificate issuer:       /CN=00919FBAF655D273EAE59D0112D34FC8AA7B5F60
Certificate serial:       3F37AFA39B7C77B1A29D2F0A3B94D86D7E200B87
Authority key identifier: 00:91:9F:BA:F6:55:D2:73:EA:E5:9D:01:12:D3:4F:C8:AA:7B:5F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00919FBAF655D273EAE59D0112D34FC8AA7B5F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/323830343a336262383a3a2f33322d313238203d3e20323636313637.roa
Signing time:             Mon 17 Aug 2026 18:27:41 +0000
ROA not before:           Mon 17 Aug 2026 18:22:41 +0000
ROA not after:            Mon 16 Aug 2027 18:27:41 +0000
asID:                     266167
IP address blocks:        2804:3bb8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/00919FBAF655D273EAE59D0112D34FC8AA7B5F60.crl
                          rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/00919FBAF655D273EAE59D0112D34FC8AA7B5F60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00919FBAF655D273EAE59D0112D34FC8AA7B5F60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:37:af:a3:9b:7c:77:b1:a2:9d:2f:0a:3b:94:d8:6d:7e:20:0b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00919FBAF655D273EAE59D0112D34FC8AA7B5F60
        Validity
            Not Before: Aug 17 18:22:41 2026 GMT
            Not After : Aug 16 18:27:41 2027 GMT
        Subject: CN=36A1098F321C15FF5D962499DFD0ED57E508CECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:e8:b5:a2:54:5e:c4:02:6a:72:f3:2c:10:
                    95:9e:25:10:b3:30:45:e3:52:81:12:3c:34:ba:49:
                    fe:f1:b9:b6:ec:d0:58:6b:4e:27:ba:4b:5a:4c:f3:
                    34:51:d0:6b:9c:6d:38:01:d8:f8:30:d3:dd:b6:1a:
                    b5:8e:1f:76:fc:eb:b5:3c:37:e0:44:1f:f7:b7:a4:
                    a5:75:7e:ef:4a:c3:f5:06:3c:45:10:71:a2:d0:24:
                    bb:9b:ed:ce:e6:3d:d3:37:bc:cd:3b:0c:07:16:67:
                    d4:8b:8b:40:1b:27:85:dd:82:3d:8b:22:80:e8:c4:
                    e2:0a:33:4b:56:c3:2b:a2:13:ee:8d:b2:c7:56:10:
                    30:ff:3d:87:6f:10:12:72:0c:59:b0:12:35:5e:65:
                    62:05:d3:5d:ff:e4:f1:9f:a2:2b:7f:50:c9:d3:5f:
                    3f:4e:e2:03:40:b1:1a:27:2e:b6:d4:77:39:91:39:
                    fd:81:fc:d2:30:cc:f4:e3:28:10:f0:84:24:06:d7:
                    44:21:49:36:2e:0d:dd:96:cc:57:8d:ca:9d:8d:2e:
                    6d:2a:14:05:98:1a:a6:f7:50:b9:03:86:ee:26:10:
                    64:d5:ce:32:bb:9e:74:96:fd:b8:13:6b:61:d7:bc:
                    42:cb:20:96:61:f7:c7:33:3a:eb:34:9c:9f:8c:5d:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:09:8F:32:1C:15:FF:5D:96:24:99:DF:D0:ED:57:E5:08:CE:CE
            X509v3 Authority Key Identifier:
                keyid:00:91:9F:BA:F6:55:D2:73:EA:E5:9D:01:12:D3:4F:C8:AA:7B:5F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/00919FBAF655D273EAE59D0112D34FC8AA7B5F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00919FBAF655D273EAE59D0112D34FC8AA7B5F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/323830343a336262383a3a2f33322d313238203d3e20323636313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:27:6d:3f:f6:88:2f:4a:79:44:71:d1:fc:34:59:6e:4a:49:
         7a:3d:4d:dd:ca:e7:45:d5:9d:9e:ab:07:a6:ad:f2:21:e1:7d:
         e6:2f:c1:32:17:d1:65:9f:3a:1d:69:48:c4:40:e9:08:1f:17:
         18:51:65:cb:34:bf:66:ec:da:1d:30:4b:ac:75:6f:18:b1:8d:
         b5:15:98:50:7f:bc:62:02:2d:29:3b:a6:81:dd:3f:4f:45:bc:
         3e:cc:ca:8f:6f:f0:4b:3b:54:fb:8f:00:d0:df:38:4f:eb:7c:
         fc:17:ae:ca:03:b4:ba:b4:c2:b3:84:70:c7:89:df:80:21:e9:
         8e:09:2c:c7:c2:a4:8a:31:97:4e:76:63:c9:6a:fe:f5:88:61:
         a5:bd:66:03:d1:c0:41:98:d5:29:dd:28:3e:e5:dd:5a:4f:23:
         c2:d7:20:bb:e1:53:23:09:c8:68:38:2b:19:4b:37:46:4c:80:
         d5:09:8e:06:a9:22:66:cc:e1:b2:a9:62:9b:2e:2b:47:12:95:
         9f:9b:49:bc:f9:fb:f7:0c:03:08:4e:5c:3c:e8:2e:e6:00:02:
         c6:a6:bc:e5:2a:04:53:6a:20:d0:71:03:8e:7a:d2:3a:97:e1:
         78:c4:fb:06:05:98:c5:3a:46:d7:f4:84:92:a2:cb:2b:00:de:
         3f:d5:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 16:45:37 2026 by rpki-client