Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/323830343a323732383a3a2f33322d3438203d3e20323633383830.roa
File:                     323830343a323732383a3a2f33322d3438203d3e20323633383830.roa (raw, json)
Hash identifier:          e2Egn+R3ufab+wEAtkBbTjcByjWPu6pDqKJql0cRx1U=
Subject key identifier:   F9:CF:D4:DB:58:A7:B6:D0:38:65:49:45:85:8E:32:F4:2F:AE:10:9C
Certificate issuer:       /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial:       6C6AEBDE6E222E2837C65B79A4FB006C8181D5F9
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/323830343a323732383a3a2f33322d3438203d3e20323633383830.roa
Signing time:             Mon 21 Sep 2026 19:48:51 +0000
ROA not before:           Mon 21 Sep 2026 19:43:51 +0000
ROA not after:            Mon 20 Sep 2027 19:48:51 +0000
asID:                     263880
IP address blocks:        2804:2728::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
                          rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 08:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6a:eb:de:6e:22:2e:28:37:c6:5b:79:a4:fb:00:6c:81:81:d5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
        Validity
            Not Before: Sep 21 19:43:51 2026 GMT
            Not After : Sep 20 19:48:51 2027 GMT
        Subject: CN=F9CFD4DB58A7B6D038654945858E32F42FAE109C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:ef:54:10:b8:68:e6:08:ab:9f:1f:96:8b:
                    32:20:f7:86:21:ad:15:5c:ca:06:63:94:97:5f:1a:
                    6b:70:1d:89:3b:24:5e:f6:9b:df:6d:4e:48:68:33:
                    94:b7:93:18:28:6d:9a:e9:fd:cf:e8:77:cd:15:a5:
                    c0:77:9b:3c:0a:cf:5d:b7:f1:1e:fc:0e:23:f8:39:
                    95:fe:42:a9:e4:56:0b:63:a9:51:6d:a5:f1:2c:c0:
                    bf:56:fb:00:e3:f4:bd:d1:c1:d0:9b:06:61:47:a5:
                    32:58:35:b6:0e:ee:c5:47:b5:94:4e:f7:cd:30:be:
                    8a:2c:47:aa:25:a8:e0:6a:cc:4d:d5:29:26:6a:06:
                    d9:5b:3f:62:a2:f9:e3:23:2e:55:f9:df:72:ae:01:
                    f0:ce:5a:c5:9b:3f:b2:d4:c1:7c:c7:17:15:97:bd:
                    e3:d8:07:cd:28:20:2c:80:11:bc:36:d0:df:18:42:
                    80:b3:c7:9e:6e:17:8f:cc:1f:2f:a8:5d:a1:5f:aa:
                    93:1f:d5:f7:02:98:b5:e3:ee:ea:d8:19:99:b8:59:
                    68:f5:f6:15:cb:e0:c3:9d:a5:ca:60:f0:e1:9d:92:
                    1a:f6:83:18:c3:43:6c:bd:33:9e:24:d7:12:90:9f:
                    1a:75:7c:3a:57:b0:9c:99:69:e6:bc:67:cd:5c:03:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:D4:DB:58:A7:B6:D0:38:65:49:45:85:8E:32:F4:2F:AE:10:9C
            X509v3 Authority Key Identifier:
                keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/323830343a323732383a3a2f33322d3438203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2728::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:d5:9f:67:0f:a0:a7:c2:23:95:b0:ad:4e:35:ad:ba:9d:00:
         09:63:a2:7a:3f:78:8e:eb:cf:d9:c3:d7:ac:d3:7c:70:46:68:
         ec:bc:90:b2:4a:f3:c7:bf:32:44:65:c4:c1:3e:b7:7f:2f:ae:
         cf:c0:e5:00:ad:f5:9c:70:a4:12:2e:7d:14:73:c6:0a:25:79:
         9c:5d:95:1a:a3:6c:9b:f6:6f:2b:57:98:4a:9f:63:9b:0a:c6:
         ae:e2:5b:e0:f3:eb:b9:68:16:ed:90:fc:08:f9:a3:ea:ff:c5:
         bb:7f:10:8a:db:d9:29:30:53:b4:38:78:63:17:57:4e:b8:d3:
         ce:a8:85:c0:46:70:81:3f:a6:cd:b2:9a:46:de:75:75:b7:cd:
         12:89:57:ab:00:30:53:a8:c8:46:08:3e:2e:dd:7c:65:0f:c5:
         83:75:40:96:bc:ad:4a:bd:9e:43:82:01:86:e3:94:7b:c0:d7:
         73:a7:5b:f8:1f:c8:0e:39:bb:2c:1d:7b:2a:78:03:3a:99:e5:
         29:c1:0c:cf:77:e3:cd:12:94:fa:8f:62:f1:3a:db:59:cc:26:
         8b:3c:b9:fb:f7:86:75:bd:74:da:48:7f:43:d3:b0:1f:b4:ac:
         b6:91:af:f1:6b:3a:6f:c4:73:d4:59:87:bc:8c:b2:93:61:ed:
         c7:b6:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----