Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a313030303a3a2f33362d3336203d3e20323636333132.roa
File:                     323830343a333565303a313030303a3a2f33362d3336203d3e20323636333132.roa (raw, json)
Hash identifier:          tJPF18OsGnNAmvrb+bNKr5PcHh2T03bPXtfLRNdhlRQ=
Subject key identifier:   8D:0D:30:AB:B7:7C:2B:63:85:4F:01:24:E1:A2:38:B2:FF:85:A9:BD
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       3E25A968B545E9EA751F6F77732B607C1C453618
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a313030303a3a2f33362d3336203d3e20323636333132.roa
Signing time:             Wed 29 Jul 2026 16:17:45 +0000
ROA not before:           Wed 29 Jul 2026 16:12:45 +0000
ROA not after:            Wed 28 Jul 2027 16:17:45 +0000
asID:                     266312
IP address blocks:        2804:35e0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:25:a9:68:b5:45:e9:ea:75:1f:6f:77:73:2b:60:7c:1c:45:36:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Jul 29 16:12:45 2026 GMT
            Not After : Jul 28 16:17:45 2027 GMT
        Subject: CN=8D0D30ABB77C2B63854F0124E1A238B2FF85A9BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:7b:4a:d2:0f:71:4d:42:c5:b1:2a:61:f4:
                    e2:3a:36:f6:7a:68:7a:1a:6e:d2:27:2f:e8:83:87:
                    f1:ba:e5:d1:23:b8:ff:2f:63:3d:d8:da:64:9a:a0:
                    b4:16:0c:be:ce:29:58:bd:e2:14:93:fa:f9:f6:6a:
                    19:91:ed:67:e3:73:19:b6:2e:eb:fd:d6:2f:e1:61:
                    a5:0e:8d:bb:13:d2:34:4c:67:b7:23:d7:9d:f3:e1:
                    72:e7:d9:01:03:56:96:9c:2c:83:c9:74:25:f3:10:
                    1a:95:3c:6b:db:d4:10:0d:63:97:a0:09:32:56:c9:
                    e9:53:b6:b6:8f:63:00:33:ba:71:81:55:9a:5a:7e:
                    aa:f9:c3:ad:54:7c:d7:3c:95:9b:16:bb:3b:da:0b:
                    c1:56:91:a2:6e:01:31:6c:2b:e4:25:f1:a0:5c:4f:
                    78:90:d2:f5:be:1b:b5:25:a4:b5:a4:c2:02:da:93:
                    70:cd:83:66:60:7b:d8:06:e2:b9:2a:32:9f:69:b6:
                    4c:f9:14:c5:e3:93:13:67:8e:37:2c:fe:b8:93:de:
                    20:a9:40:39:fe:e3:b9:7b:82:d1:73:4e:de:75:51:
                    4a:97:35:f2:64:d1:b8:fd:cf:10:86:9b:50:ae:96:
                    ec:ba:fd:ae:2d:99:f4:95:e8:99:f5:02:69:7a:20:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0D:30:AB:B7:7C:2B:63:85:4F:01:24:E1:A2:38:B2:FF:85:A9:BD
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a313030303a3a2f33362d3336203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35e0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:a5:3d:16:69:6e:41:c2:5c:f8:bf:8f:64:78:87:c0:8a:0b:
         60:6f:16:ed:f6:d0:96:ed:a0:2d:b6:60:94:c3:97:76:20:7b:
         93:70:ba:a8:96:df:a2:43:3d:54:44:2c:ac:6a:8d:76:ea:f3:
         dc:23:91:6c:fe:ed:2f:76:c6:39:b2:76:88:d8:8d:79:29:28:
         8b:e5:ff:87:38:cf:9e:ba:70:de:61:21:ee:60:90:ae:19:c2:
         93:f3:ef:57:22:c5:0e:4a:f4:22:9b:91:7f:41:ab:fd:2d:5d:
         ee:fd:60:ce:d0:d7:64:ce:d3:1c:80:50:f9:21:46:6b:50:f9:
         fc:d4:40:f5:95:76:00:9a:fe:8c:fe:09:d8:88:18:1b:dd:fd:
         aa:24:59:f6:c4:98:a9:07:65:72:14:99:8e:7e:2d:71:e0:ff:
         fc:06:6e:48:d8:e4:3b:72:e1:b9:78:bf:2d:ac:7a:a3:e7:8a:
         83:c4:96:50:fb:5d:61:52:50:fb:99:94:98:6c:fc:e3:44:7a:
         4d:5c:46:42:a2:30:37:5f:21:72:e0:c3:fd:ac:66:23:31:a6:
         2f:fd:54:50:81:71:58:84:45:b8:29:a6:ac:46:db:bb:66:8d:
         aa:18:89:d5:e8:5a:61:f8:c4:3f:26:30:cc:ad:4c:1f:a0:92:
         fd:16:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 18:43:16 2026 by rpki-client