Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          CLABbxtpsh38i2Ntt813On22XVKqbBmSkrGNP37pA8Y=
Subject key identifier:   41:63:F5:73:1A:7E:A6:7E:52:31:70:EF:1D:13:6E:52:AD:AE:56:52
Certificate issuer:       /CN=9300478022D5A08516D4A8091528E3CE35ECFE43
Certificate serial:       0E7093AC78BD56F664BF77D5100537DE51049BE5
Authority key identifier: 93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Mon 28 Sep 2026 16:58:36 +0000
ROA not before:           Mon 28 Sep 2026 16:53:36 +0000
ROA not after:            Mon 27 Sep 2027 16:58:36 +0000
asID:                     267991
IP address blocks:        2804:5654:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:70:93:ac:78:bd:56:f6:64:bf:77:d5:10:05:37:de:51:04:9b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9300478022D5A08516D4A8091528E3CE35ECFE43
        Validity
            Not Before: Sep 28 16:53:36 2026 GMT
            Not After : Sep 27 16:58:36 2027 GMT
        Subject: CN=4163F5731A7EA67E523170EF1D136E52ADAE5652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:8c:d7:6e:9b:79:94:3a:58:4d:d5:d4:00:
                    a3:20:9b:53:0d:54:c7:76:6b:70:9e:2f:c7:6e:c1:
                    0e:a0:59:50:66:d0:5a:9e:fb:64:b2:fc:00:7d:2b:
                    03:65:e3:26:ff:68:fe:e6:c1:e1:96:19:ef:d5:53:
                    75:cf:db:be:31:d9:44:a4:02:db:1c:4d:1d:2d:7c:
                    85:75:40:8b:73:2f:2c:f1:93:69:60:35:6f:ae:7e:
                    7f:4a:76:2f:54:a0:bc:2a:2e:15:39:ef:01:40:74:
                    90:d0:60:32:34:c8:01:d1:42:aa:af:90:f3:c8:9e:
                    62:8e:55:ce:7f:91:73:c6:d6:32:a8:4c:a8:02:d8:
                    b7:eb:b8:22:d7:29:95:b1:11:22:52:59:87:86:f7:
                    72:0b:44:cb:2a:90:e7:d1:02:07:e5:61:b9:e3:d4:
                    b8:c8:c5:e3:f6:d9:ba:7d:fb:0d:1e:5e:fe:61:cd:
                    77:19:d4:4e:c3:d3:eb:d6:4f:ae:7f:10:b4:d6:69:
                    9f:eb:0a:5e:13:67:3c:53:34:68:cf:70:e0:ac:33:
                    aa:89:ed:fd:85:f1:1f:75:dc:09:42:e6:c2:cd:02:
                    fa:53:cc:87:54:54:c2:27:a7:41:81:3b:4c:bf:50:
                    df:ed:08:d4:7d:e4:a4:0b:57:5d:69:2d:93:26:ef:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:63:F5:73:1A:7E:A6:7E:52:31:70:EF:1D:13:6E:52:AD:AE:56:52
            X509v3 Authority Key Identifier:
                keyid:93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:cc:69:15:18:60:ff:1e:a8:01:61:d2:c3:b6:ef:21:cd:b1:
         6f:9f:6f:f6:99:61:54:5d:3c:2c:4b:ae:31:a0:3b:af:7d:ed:
         91:e0:6b:03:58:50:f8:a5:85:8d:a3:59:dc:c9:08:55:7c:d4:
         0c:c0:d6:63:f2:f4:ce:ea:83:1e:f1:28:b3:d2:48:75:00:9f:
         9a:be:86:ba:76:3f:87:7e:21:8e:4e:24:08:c1:ec:f2:c6:97:
         5e:35:85:4c:7b:dc:ae:04:93:13:6d:64:85:ab:48:41:a7:e7:
         3a:75:ad:09:a9:14:e9:a0:3c:4b:4e:9f:7a:9c:f4:2c:ec:40:
         0d:ca:c1:44:2a:5b:55:39:95:c8:91:a4:ac:61:32:61:98:00:
         b4:28:62:8b:8a:6d:e2:55:ad:73:00:3d:70:da:b7:4b:31:f6:
         d9:82:e2:ea:30:43:b2:45:c7:ee:5f:e9:1c:aa:da:4d:11:21:
         df:f6:d1:9b:32:f3:13:80:ed:88:80:b2:56:65:db:f4:01:5e:
         1c:39:b9:6f:cb:78:6b:73:dc:7e:5a:d9:c6:9d:66:02:eb:01:
         b8:54:b4:d8:27:3a:88:d6:99:59:c6:00:4d:e8:97:10:0d:42:
         c8:51:1a:f7:5b:18:47:38:cb:db:e3:ef:7e:d2:61:de:de:2e:
         b1:cf:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:14:43 2026 by rpki-client