Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/323830343a323936303a3a2f33322d3334203d3e20323634303131.roa
File:                     323830343a323936303a3a2f33322d3334203d3e20323634303131.roa (raw, json)
Hash identifier:          9nX6r7HXCd3okCIesfqEycyhbs7W73Decnwv5SPZcI8=
Subject key identifier:   09:E3:80:C7:26:2F:C9:27:32:9A:ED:05:BF:0A:C1:10:93:5B:B4:C9
Certificate issuer:       /CN=607D3C320A3780B24C3C9C40404A631E91336493
Certificate serial:       546768B78416F0C3FBB6FED4BA39E4E3C966705A
Authority key identifier: 60:7D:3C:32:0A:37:80:B2:4C:3C:9C:40:40:4A:63:1E:91:33:64:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/607D3C320A3780B24C3C9C40404A631E91336493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/323830343a323936303a3a2f33322d3334203d3e20323634303131.roa
Signing time:             Tue 18 Aug 2026 13:58:54 +0000
ROA not before:           Tue 18 Aug 2026 13:53:54 +0000
ROA not after:            Tue 17 Aug 2027 13:58:54 +0000
asID:                     264011
IP address blocks:        2804:2960::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/607D3C320A3780B24C3C9C40404A631E91336493.crl
                          rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/607D3C320A3780B24C3C9C40404A631E91336493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/607D3C320A3780B24C3C9C40404A631E91336493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:67:68:b7:84:16:f0:c3:fb:b6:fe:d4:ba:39:e4:e3:c9:66:70:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607D3C320A3780B24C3C9C40404A631E91336493
        Validity
            Not Before: Aug 18 13:53:54 2026 GMT
            Not After : Aug 17 13:58:54 2027 GMT
        Subject: CN=09E380C7262FC927329AED05BF0AC110935BB4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:42:87:5f:51:34:c3:e5:c7:6e:3e:36:e5:
                    78:d5:37:b6:1e:06:9e:65:7b:f8:02:0c:7a:35:9f:
                    84:c4:13:d7:1f:f6:be:54:f8:f6:63:2e:55:29:82:
                    0d:a9:5f:c5:82:b9:11:4e:00:f8:0a:3b:28:55:24:
                    48:03:de:16:c3:82:21:84:58:01:ee:a6:e1:4f:1e:
                    e9:a1:4d:8e:82:ac:80:b0:e1:0e:2f:d4:a6:53:42:
                    90:96:a0:e1:c7:40:b3:08:95:a7:ba:b3:a6:f3:59:
                    e4:bd:84:f9:9a:58:dd:f5:e1:fe:4d:29:3c:c1:85:
                    c1:75:b1:15:4b:0a:f1:d8:16:8f:bb:3a:8a:7d:8b:
                    64:30:95:f1:c0:fc:58:6f:12:90:9c:cc:fb:4b:2b:
                    2f:d0:4e:04:1e:32:95:7f:78:71:8b:4c:1c:10:16:
                    07:cd:ae:cc:9a:20:77:13:c5:c6:1c:ee:d2:69:29:
                    d9:ce:64:72:7d:94:f2:d3:26:f8:8d:98:60:6d:75:
                    f8:b2:d2:7e:6d:07:fc:75:c2:9d:eb:b5:0d:9a:4a:
                    7e:ac:b6:e2:fa:e3:7b:33:73:01:92:d5:80:5c:02:
                    09:f0:ce:c8:2d:cd:a2:a1:34:cc:e5:09:35:7a:73:
                    8c:b8:6c:c2:4a:5b:7a:63:7f:71:a5:28:96:8a:59:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:80:C7:26:2F:C9:27:32:9A:ED:05:BF:0A:C1:10:93:5B:B4:C9
            X509v3 Authority Key Identifier:
                keyid:60:7D:3C:32:0A:37:80:B2:4C:3C:9C:40:40:4A:63:1E:91:33:64:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/607D3C320A3780B24C3C9C40404A631E91336493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/607D3C320A3780B24C3C9C40404A631E91336493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/323830343a323936303a3a2f33322d3334203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2960::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:7a:f7:55:d7:2f:26:c0:c6:9a:42:c8:c6:f6:4e:3f:26:57:
         bc:f1:35:28:cd:64:b8:44:5e:12:1c:5f:d7:7c:e9:b1:ed:09:
         f9:a4:82:96:4f:4b:e1:5a:2f:4d:e8:b5:ba:1f:d0:10:ac:a5:
         b1:c6:85:7a:1c:53:04:7b:a5:be:75:4e:ed:4e:3e:17:70:ce:
         63:da:42:bf:09:f4:51:44:cb:5d:3d:c2:f6:aa:5d:fa:38:cd:
         fb:48:2f:6e:13:af:26:61:f8:f6:ea:39:ab:e8:02:a5:f5:67:
         23:ec:4a:fd:4b:4f:fa:3e:51:db:54:90:18:ba:0e:11:d7:bb:
         89:ee:a9:a0:58:3c:c8:6d:38:7f:7f:2a:9a:d7:3c:ce:39:be:
         70:85:bd:70:41:38:74:c6:71:cc:d5:3e:58:d9:c5:d6:01:ff:
         2d:09:15:03:04:07:d4:3a:1c:a2:10:78:eb:6b:92:30:96:51:
         b0:12:0b:7d:9f:dc:97:c0:f8:3f:30:22:94:7a:3a:03:8b:48:
         59:89:6f:62:37:14:0a:59:87:29:46:2c:72:37:20:e9:5f:a2:
         58:84:31:42:da:0f:f2:62:f8:06:fd:49:dc:da:11:db:75:98:
         0e:60:ed:ec:6d:27:1a:f3:64:87:c8:76:0e:bb:bf:c3:80:3a:
         0d:45:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:52:18 2026 by rpki-client