Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/323830343a353065383a3a2f33322d313238203d3e20323638343138.roa
File:                     323830343a353065383a3a2f33322d313238203d3e20323638343138.roa (raw, json)
Hash identifier:          cpT7Rm3uZAEiVZi3A69JTRENEaiChP4lp3VNF6st1aE=
Subject key identifier:   F0:DE:2E:AD:42:29:85:50:AE:8B:FE:D2:16:C8:92:61:B4:51:5D:16
Certificate issuer:       /CN=F5420704DCBBF5802B94DE25902083F52DD4B69D
Certificate serial:       4886DD6185C13BFCC2AFEBB3E3B62F2AFFB13270
Authority key identifier: F5:42:07:04:DC:BB:F5:80:2B:94:DE:25:90:20:83:F5:2D:D4:B6:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5420704DCBBF5802B94DE25902083F52DD4B69D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/323830343a353065383a3a2f33322d313238203d3e20323638343138.roa
Signing time:             Fri 28 Aug 2026 19:56:04 +0000
ROA not before:           Fri 28 Aug 2026 19:51:04 +0000
ROA not after:            Fri 27 Aug 2027 19:56:04 +0000
asID:                     268418
IP address blocks:        2804:50e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/F5420704DCBBF5802B94DE25902083F52DD4B69D.crl
                          rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/F5420704DCBBF5802B94DE25902083F52DD4B69D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5420704DCBBF5802B94DE25902083F52DD4B69D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 22:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:86:dd:61:85:c1:3b:fc:c2:af:eb:b3:e3:b6:2f:2a:ff:b1:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5420704DCBBF5802B94DE25902083F52DD4B69D
        Validity
            Not Before: Aug 28 19:51:04 2026 GMT
            Not After : Aug 27 19:56:04 2027 GMT
        Subject: CN=F0DE2EAD42298550AE8BFED216C89261B4515D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:7f:ff:6a:2c:73:a2:43:7e:61:cf:04:1e:
                    85:f4:28:c4:07:8a:2d:0c:3b:84:de:2f:20:f4:57:
                    b5:02:91:41:a4:05:33:b2:4e:42:7a:60:5b:87:56:
                    0e:51:2d:3f:74:0f:77:f3:cf:34:cd:18:85:3e:9c:
                    ce:c8:f6:f1:c6:0a:0f:c5:f2:64:a3:17:db:76:7b:
                    74:2a:62:11:c7:ab:45:4b:d2:8a:33:ce:6a:e6:b6:
                    e4:45:78:47:6f:f3:1a:0b:73:13:33:87:7d:55:a9:
                    83:5d:3e:77:dc:73:19:3c:1f:b8:4b:5c:39:ff:8d:
                    90:0c:21:cc:34:12:89:f1:dc:e2:26:09:92:c8:f6:
                    6b:2d:97:17:6b:f0:08:29:a6:ed:15:e3:b1:85:5e:
                    df:be:0c:3a:b5:c0:0e:2d:20:5c:52:09:56:6d:ff:
                    7b:1f:d3:bf:e5:9a:cb:93:04:95:9d:91:af:2e:bf:
                    c9:9a:04:e8:79:81:48:75:99:db:89:45:4e:dd:5f:
                    61:c1:7c:c2:ed:d6:eb:88:fe:ae:33:33:c3:c3:97:
                    ff:88:2d:73:ea:19:81:2a:c6:1e:a6:54:25:49:c0:
                    67:15:a0:e6:07:fa:f4:83:91:d2:23:a3:5e:a7:51:
                    cf:c6:8c:97:8a:e8:3e:e8:dc:06:7a:9b:d5:c8:c7:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DE:2E:AD:42:29:85:50:AE:8B:FE:D2:16:C8:92:61:B4:51:5D:16
            X509v3 Authority Key Identifier:
                keyid:F5:42:07:04:DC:BB:F5:80:2B:94:DE:25:90:20:83:F5:2D:D4:B6:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/F5420704DCBBF5802B94DE25902083F52DD4B69D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5420704DCBBF5802B94DE25902083F52DD4B69D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/0/323830343a353065383a3a2f33322d313238203d3e20323638343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:30:4c:40:73:26:17:84:47:b9:9c:18:9c:5e:99:da:31:
         11:b7:bd:d3:ce:cf:19:b0:37:a7:a6:2e:b8:db:6b:f9:32:fd:
         3a:99:e8:17:b4:9c:35:b1:92:b2:e2:ef:cb:bc:a4:4d:f8:2a:
         64:29:90:47:9c:5a:06:76:61:3a:2c:0d:46:d1:34:c3:c0:98:
         cc:6b:55:2e:db:92:57:54:46:60:de:a9:b4:1c:fb:4d:2f:e7:
         86:6c:a8:2c:62:dc:e1:80:1e:66:bc:a6:91:4d:2d:6e:81:1a:
         5b:51:39:33:ed:06:3d:2a:9c:e4:aa:a2:82:4f:02:cb:c7:a6:
         9b:52:45:61:df:15:17:ac:22:15:76:ce:8a:f4:fa:2d:06:83:
         38:f9:74:f7:20:f2:e8:d0:20:df:24:c2:ec:50:29:70:47:a3:
         41:e0:94:01:bd:21:d7:00:11:4c:26:a6:ff:f0:f4:21:e9:90:
         07:dc:16:50:fe:1c:e1:e0:6f:99:69:1b:d1:e0:44:6e:45:8d:
         45:fd:16:22:fe:0b:60:0b:b9:a7:85:28:57:50:af:37:2b:1d:
         14:a5:dd:ae:28:e9:37:21:c8:7d:7c:09:ae:68:47:d5:9f:c6:
         63:79:fc:a7:d6:a7:94:10:3c:0f:ea:96:71:32:bb:98:06:20:
         82:e1:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:15:29 2026 by rpki-client