Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/323830343a376133383a3a2f33322d3332203d3e20323731333536.roa
File:                     323830343a376133383a3a2f33322d3332203d3e20323731333536.roa (raw, json)
Hash identifier:          R24ESoayG1C96PQsIRr23sZQtZfdNwTHkro1Zmbt/dY=
Subject key identifier:   1B:63:DD:BD:CC:19:D1:01:6B:93:92:CA:A6:48:7B:EB:98:02:FF:B3
Certificate issuer:       /CN=2640471686F6E96D321776DCD4142869F9C77A1A
Certificate serial:       47179217EA544D18C45AE019322194FAA9012F5C
Authority key identifier: 26:40:47:16:86:F6:E9:6D:32:17:76:DC:D4:14:28:69:F9:C7:7A:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2640471686F6E96D321776DCD4142869F9C77A1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/323830343a376133383a3a2f33322d3332203d3e20323731333536.roa
Signing time:             Thu 17 Sep 2026 20:11:38 +0000
ROA not before:           Thu 17 Sep 2026 20:06:38 +0000
ROA not after:            Thu 16 Sep 2027 20:11:38 +0000
asID:                     271356
IP address blocks:        2804:7a38::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/2640471686F6E96D321776DCD4142869F9C77A1A.crl
                          rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/2640471686F6E96D321776DCD4142869F9C77A1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2640471686F6E96D321776DCD4142869F9C77A1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 15:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:17:92:17:ea:54:4d:18:c4:5a:e0:19:32:21:94:fa:a9:01:2f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2640471686F6E96D321776DCD4142869F9C77A1A
        Validity
            Not Before: Sep 17 20:06:38 2026 GMT
            Not After : Sep 16 20:11:38 2027 GMT
        Subject: CN=1B63DDBDCC19D1016B9392CAA6487BEB9802FFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:ad:9f:82:46:c4:0b:ce:b3:65:88:c8:65:
                    a9:ae:08:69:67:6b:d7:a6:55:08:38:63:cd:8f:36:
                    18:bf:76:cb:07:ba:fd:2d:83:3e:2a:09:0c:25:1b:
                    b8:08:b8:b5:df:55:8d:42:37:d1:54:af:55:a4:3b:
                    49:9f:b2:01:9a:b2:ed:37:7c:8a:7c:33:19:28:aa:
                    46:f0:8a:12:85:27:15:0b:5c:a8:02:e1:db:a4:b8:
                    be:19:ea:e9:0f:1a:e3:49:da:f0:ba:b2:3a:6b:42:
                    5a:85:eb:85:58:4f:fa:1f:ff:ff:9e:15:8b:c1:93:
                    82:4e:6f:cb:1c:ac:54:ce:70:35:4a:b2:c0:cc:df:
                    12:12:f6:01:80:5d:c7:7d:09:ce:4f:b0:2a:8e:39:
                    b2:61:0b:2e:32:62:03:b0:da:c5:f5:0f:a5:e1:10:
                    92:85:63:13:78:c5:69:0c:59:17:6e:91:34:fa:22:
                    e6:ce:47:a7:ee:4e:73:71:35:27:6a:9e:6c:53:fa:
                    fd:62:ab:f2:89:fa:1d:10:7e:96:ca:3a:f1:d7:5f:
                    aa:4a:02:17:a8:4c:46:c6:6a:2e:3e:b3:8e:97:c0:
                    ed:e1:4e:a0:40:f7:94:08:03:70:10:b7:e6:5e:c3:
                    11:52:8f:bf:d0:ce:3f:55:3c:c2:01:08:0d:40:7e:
                    ad:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:63:DD:BD:CC:19:D1:01:6B:93:92:CA:A6:48:7B:EB:98:02:FF:B3
            X509v3 Authority Key Identifier:
                keyid:26:40:47:16:86:F6:E9:6D:32:17:76:DC:D4:14:28:69:F9:C7:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/2640471686F6E96D321776DCD4142869F9C77A1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2640471686F6E96D321776DCD4142869F9C77A1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/323830343a376133383a3a2f33322d3332203d3e20323731333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a38::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f3:5a:78:87:82:18:1a:09:62:b3:33:3a:a3:a3:d1:6d:3f:
         89:f0:b6:bd:8b:db:90:82:73:31:48:e6:a5:2a:c4:99:30:f8:
         c7:3b:f6:5b:1b:99:33:a5:a1:a5:26:68:79:6e:60:b3:dc:f3:
         2d:48:7b:23:84:4b:08:87:8d:5b:51:e5:f9:a5:14:c0:9d:a2:
         ec:44:74:4e:13:14:bc:f8:6c:de:65:4c:26:ce:c1:a9:c1:70:
         ca:6e:7b:ea:80:fd:47:e8:75:0d:85:f4:fa:37:8a:23:f7:ce:
         5e:ff:93:73:b0:88:8d:41:58:ed:31:14:ab:ef:05:1d:e4:8c:
         12:37:b5:90:ba:33:84:4d:ae:b2:dd:c2:51:e9:f2:0b:75:1d:
         d3:b7:ca:1c:c8:07:29:42:48:78:23:73:a9:58:8a:74:27:94:
         fa:29:69:f7:0a:0c:7d:cc:49:63:d6:03:fc:ed:00:f1:09:00:
         11:84:87:b0:40:48:b8:dd:7c:a2:a8:54:81:dd:f9:ca:46:73:
         75:ee:8b:94:72:c6:7a:95:3d:ed:2b:9f:54:44:63:5d:88:c1:
         ce:31:8b:d2:7f:f1:00:0b:1d:5d:b7:63:8b:05:c4:9d:22:95:
         48:09:88:28:1a:e9:5a:39:b2:45:ee:a0:90:6b:66:c8:d2:7c:
         cb:00:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:19:05 2026 by rpki-client