Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d3332203d3e20323637393931.roa
File:                     323830343a353635343a3a2f33322d3332203d3e20323637393931.roa (raw, json)
Hash identifier:          /mFfBTpXl8bnSbuANEQjLWlVsVqb38IqqEMleLWJs60=
Subject key identifier:   F9:FD:AF:54:4B:81:E7:3E:B0:6B:5C:18:A1:E8:48:3F:A9:6E:D9:C8
Certificate issuer:       /CN=9300478022D5A08516D4A8091528E3CE35ECFE43
Certificate serial:       4798BF476DA662D2CA6AC3BDD38AD60AFD86A641
Authority key identifier: 93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d3332203d3e20323637393931.roa
Signing time:             Mon 28 Sep 2026 16:58:32 +0000
ROA not before:           Mon 28 Sep 2026 16:53:32 +0000
ROA not after:            Mon 27 Sep 2027 16:58:32 +0000
asID:                     267991
IP address blocks:        2804:5654::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 10:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:98:bf:47:6d:a6:62:d2:ca:6a:c3:bd:d3:8a:d6:0a:fd:86:a6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9300478022D5A08516D4A8091528E3CE35ECFE43
        Validity
            Not Before: Sep 28 16:53:32 2026 GMT
            Not After : Sep 27 16:58:32 2027 GMT
        Subject: CN=F9FDAF544B81E73EB06B5C18A1E8483FA96ED9C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:dc:4c:7d:a6:02:56:bc:e5:33:cf:16:4a:
                    8d:9c:dd:07:0b:c4:e5:40:4d:8a:e8:b3:9e:94:9b:
                    0f:5f:b9:c6:8a:7e:de:8b:4d:79:45:3c:ca:3b:f1:
                    52:7e:c1:3d:9b:07:f0:f0:bb:fb:40:7b:9c:29:44:
                    14:d7:5d:39:be:85:1f:5c:4a:84:99:0e:85:d8:72:
                    74:ab:38:ed:04:e5:a9:27:91:bc:6a:bb:c7:e6:d5:
                    51:35:87:79:52:05:55:b9:f6:15:a9:71:25:39:b1:
                    ca:ca:2d:a0:ff:54:d1:19:3a:a3:e5:20:05:b7:97:
                    32:ee:08:e8:1a:a8:64:da:1b:d7:27:1c:c7:ab:34:
                    88:2f:b1:ed:12:44:bf:dd:cb:91:9e:62:49:cc:09:
                    0f:27:71:7f:1c:06:86:5c:73:aa:ad:18:ae:74:b6:
                    0f:9c:d0:c3:6a:95:ff:47:66:d7:5e:b2:cb:e3:45:
                    2a:4e:a6:3c:08:ff:d8:94:55:4d:4e:4c:a9:b4:57:
                    b6:d6:b9:f8:08:04:ab:9d:b3:2d:de:fd:b7:7c:a4:
                    fd:5c:98:f6:ad:c5:28:59:28:1e:08:b1:69:d9:1b:
                    c1:c8:3c:f4:49:4f:21:45:53:a0:af:59:bd:78:64:
                    b8:7d:14:94:17:03:dc:cb:08:86:58:7d:84:f0:17:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:AF:54:4B:81:E7:3E:B0:6B:5C:18:A1:E8:48:3F:A9:6E:D9:C8
            X509v3 Authority Key Identifier:
                keyid:93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d3332203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:96:4b:0a:36:8d:7d:d3:66:4d:df:8c:ff:ff:c5:7e:81:
         12:76:55:4e:ca:1b:69:18:72:cd:ad:e6:cb:9a:37:af:f4:1c:
         f7:c6:e8:db:6d:2d:5c:68:b3:67:17:c6:c2:9c:12:8a:71:b9:
         8a:4c:b9:50:8b:75:c1:5b:ef:59:17:bc:85:5a:13:98:26:0d:
         14:61:b1:8f:21:0e:00:9a:38:1f:c9:99:56:de:5f:59:f6:90:
         19:0f:1a:05:ff:ad:99:29:8f:42:e4:04:95:5f:78:27:e8:d3:
         e8:e8:f0:fc:fb:92:e0:ad:80:52:8a:c7:59:d6:cb:cb:b2:78:
         f9:75:c0:05:56:c3:7c:fc:00:97:e3:e1:67:b9:90:cd:0f:e2:
         e5:a5:83:4c:66:c9:5a:05:ec:83:35:30:b0:10:7d:c2:a6:f5:
         84:68:c1:c5:d7:7d:09:ca:d7:e7:e8:71:2d:a8:83:c4:cb:65:
         1c:31:82:c5:9f:68:5f:7c:f5:84:63:50:88:a7:6e:73:24:2d:
         ba:40:59:49:e4:b1:5d:f5:3f:23:98:1b:21:44:ad:bc:df:74:
         b7:1a:b9:39:9d:f9:40:a9:4b:bb:9a:24:81:42:47:28:72:02:
         ae:64:1f:4f:9f:d5:46:56:c9:d7:00:0f:37:6b:f8:fa:ee:40:
         c7:03:72:94
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUR5i/R22mYtLKasO904rWCv2GpkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwMDQ3ODAyMkQ1QTA4NTE2RDRBODA5MTUyOEUzQ0Uz
NUVDRkU0MzAeFw0yNjA5MjgxNjUzMzJaFw0yNzA5MjcxNjU4MzJaMDMxMTAvBgNV
BAMTKEY5RkRBRjU0NEI4MUU3M0VCMDZCNUMxOEExRTg0ODNGQTk2RUQ5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhtxMfaYCVrzlM88WSo2c3QcL
xOVATYros56Umw9fucaKft6LTXlFPMo78VJ+wT2bB/Dwu/tAe5wpRBTXXTm+hR9c
SoSZDoXYcnSrOO0E5aknkbxqu8fm1VE1h3lSBVW59hWpcSU5scrKLaD/VNEZOqPl
IAW3lzLuCOgaqGTaG9cnHMerNIgvse0SRL/dy5GeYknMCQ8ncX8cBoZcc6qtGK50
tg+c0MNqlf9HZtdessvjRSpOpjwI/9iUVU1OTKm0V7bWufgIBKudsy3e/bd8pP1c
mPatxShZKB4IsWnZG8HIPPRJTyFFU6CvWb14ZLh9FJQXA9zLCIZYfYTwF/8dAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+f2vVEuB5z6wa1wYoehIP6lu2cgwHwYDVR0j
BBgwFoAUkwBHgCLVoIUW1KgJFSjjzjXs/kMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC85MzAwNDc4MDIyRDVBMDg1MTZENEE4MDkxNTI4RTNDRTM1RUNGRTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzMDA0NzgwMjJENUEwODUx
NkQ0QTgwOTE1MjhFM0NFMzVFQ0ZFNDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzIzODMwMzQzYTM1MzYzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWVDANBgkqhkiG9w0BAQsFAAOCAQEAaIqWSwo2
jX3TZk3fjP//xX6BEnZVTsobaRhyza3my5o3r/Qc98bo220tXGizZxfGwpwSinG5
iky5UIt1wVvvWRe8hVoTmCYNFGGxjyEOAJo4H8mZVt5fWfaQGQ8aBf+tmSmPQuQE
lV94J+jT6Ojw/PuS4K2AUorHWdbLy7J4+XXABVbDfPwAl+PhZ7mQzQ/i5aWDTGbJ
WgXsgzUwsBB9wqb1hGjBxdd9CcrX5+hxLaiDxMtlHDGCxZ9oX3z1hGNQiKducyQt
ukBZSeSxXfU/I5gbIUStvN90txq5OZ35QKlLu5okgUJHKHICrmQfT5/VRlbJ1wAP
N2v4+u5AxwNylA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:00:26 2026 by rpki-client