Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3a2f33322d313238203d3e20323730393732.roa
File:                     323830343a373434633a3a2f33322d313238203d3e20323730393732.roa (raw, json)
Hash identifier:          QTgoje41rzj+YTbJljSt6tWqSHjgurxckMdifoOSyu8=
Subject key identifier:   D3:FD:C5:D3:7E:B9:BB:1C:8A:8C:81:EE:18:B2:35:00:6A:08:02:D8
Certificate issuer:       /CN=2662749C84F025E92226E07D99E4597D9B83350D
Certificate serial:       03F90BFF476B073769FBDE239F549862B707D7DF
Authority key identifier: 26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3a2f33322d313238203d3e20323730393732.roa
Signing time:             Tue 11 Aug 2026 03:57:12 +0000
ROA not before:           Tue 11 Aug 2026 03:52:12 +0000
ROA not after:            Tue 10 Aug 2027 03:57:12 +0000
asID:                     270972
IP address blocks:        2804:744c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl
                          rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f9:0b:ff:47:6b:07:37:69:fb:de:23:9f:54:98:62:b7:07:d7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2662749C84F025E92226E07D99E4597D9B83350D
        Validity
            Not Before: Aug 11 03:52:12 2026 GMT
            Not After : Aug 10 03:57:12 2027 GMT
        Subject: CN=D3FDC5D37EB9BB1C8A8C81EE18B235006A0802D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:c5:c0:5c:03:73:31:7c:89:b6:68:02:e3:
                    4a:da:9a:e0:28:04:6f:7f:c4:04:ec:30:6e:ef:0a:
                    98:9a:49:2e:12:9a:9b:71:e4:34:89:81:e4:1e:8a:
                    56:46:ac:27:fd:8a:e4:20:22:ca:ec:b6:04:86:c9:
                    de:76:2a:53:18:e2:c7:d8:4c:a6:70:b5:9b:33:79:
                    af:f5:38:aa:7b:b7:c0:c2:dc:71:d9:dd:81:90:33:
                    9c:cf:77:9b:43:a2:fd:35:c0:c7:a8:91:f5:75:98:
                    70:25:6c:91:47:1f:cf:2a:0f:7e:3c:7a:ec:de:fe:
                    c5:f2:a8:3a:d2:c9:5b:47:61:03:48:e4:76:c1:26:
                    90:06:37:66:b1:3e:0b:5d:3d:77:09:84:96:ea:85:
                    58:44:6e:d9:97:1f:ba:75:3f:23:e6:db:0c:51:9b:
                    b8:bf:e9:80:fe:75:1e:59:df:2f:4c:44:1a:3d:16:
                    01:ad:2e:2f:a4:c5:bb:b3:ef:19:75:5e:88:dd:ca:
                    74:47:21:7e:8b:37:86:cb:36:50:6e:9f:5b:60:7e:
                    33:d5:98:8d:f4:b4:c1:b6:68:62:89:c1:f3:cc:e0:
                    f2:80:2f:11:a4:78:73:1c:98:6f:85:54:3c:73:bd:
                    a3:7d:43:45:25:b4:00:5d:52:a8:47:38:c9:ef:65:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FD:C5:D3:7E:B9:BB:1C:8A:8C:81:EE:18:B2:35:00:6A:08:02:D8
            X509v3 Authority Key Identifier:
                keyid:26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3a2f33322d313238203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:744c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:97:9c:30:a3:25:d0:0b:a0:d1:1e:f9:29:52:ea:5a:43:5d:
         c4:13:b5:64:92:69:61:93:f1:6e:f8:c4:bd:b6:38:5e:f5:7a:
         b9:f9:e9:92:a8:11:74:d2:1e:27:af:bb:de:60:74:d3:0a:05:
         9b:8a:47:1a:02:29:9d:52:45:d6:21:d4:54:39:1c:00:b3:ed:
         c4:74:70:aa:7b:c3:c4:08:f5:46:8e:47:8f:07:f9:87:af:b6:
         2c:5c:78:74:ce:64:2a:4e:26:06:9b:0c:c7:1b:7c:e8:9f:4a:
         a0:cb:d2:36:03:c8:aa:16:6d:43:fe:b3:6a:ab:30:bb:07:44:
         56:ab:0d:16:f1:bf:be:2f:88:53:db:0f:7a:5f:e8:6f:01:a1:
         d8:26:9f:75:d0:01:06:89:9a:f9:5d:32:1c:76:ec:90:0b:34:
         6a:81:19:cc:20:de:a4:2f:65:90:e3:22:09:f5:3f:ea:df:3b:
         66:c6:2b:2f:37:dd:e4:4f:dc:3a:cd:84:00:5d:22:4f:04:bf:
         9d:e5:10:ac:d1:01:89:98:3e:19:1d:10:e0:ae:37:79:89:0a:
         5c:4d:71:03:16:03:9f:10:24:37:58:2d:52:da:6f:1f:8d:66:
         c7:4b:fe:c6:8f:15:93:21:ec:68:c9:5f:94:99:d8:71:04:4e:
         5b:ab:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:18:59 2026 by rpki-client