Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/323830343a346364633a3a2f33322d3332203d3e20323637333937.roa
File:                     323830343a346364633a3a2f33322d3332203d3e20323637333937.roa (raw, json)
Hash identifier:          H/fRuxhNRQ/mELSGJoKSL8OANrKNYbN9Os5Ck8moy48=
Subject key identifier:   28:5E:36:25:51:34:8A:B2:1B:DE:87:34:87:D9:34:B5:B9:41:E5:8B
Certificate issuer:       /CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
Certificate serial:       533CD8FF8400A09B0DBF604A8C01EF4A6E5EA9A2
Authority key identifier: 0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/323830343a346364633a3a2f33322d3332203d3e20323637333937.roa
Signing time:             Wed 23 Sep 2026 00:40:10 +0000
ROA not before:           Wed 23 Sep 2026 00:35:10 +0000
ROA not after:            Wed 22 Sep 2027 00:40:10 +0000
asID:                     267397
IP address blocks:        2804:4cdc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl
                          rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 02:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3c:d8:ff:84:00:a0:9b:0d:bf:60:4a:8c:01:ef:4a:6e:5e:a9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
        Validity
            Not Before: Sep 23 00:35:10 2026 GMT
            Not After : Sep 22 00:40:10 2027 GMT
        Subject: CN=285E362551348AB21BDE873487D934B5B941E58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:1f:4f:55:fe:1e:3d:3a:58:47:29:8d:59:
                    71:88:0f:41:8a:34:49:87:61:d5:6c:d9:4a:7d:be:
                    2e:be:d9:a2:2e:1a:ca:b5:ff:14:76:29:2a:5d:ee:
                    2d:45:fb:46:a2:b9:c1:0d:5f:64:35:97:2e:1b:69:
                    23:d9:be:30:98:28:d2:9d:ad:f5:c4:f1:2d:65:01:
                    ff:89:7d:1f:c2:27:f8:bf:93:4a:dc:21:91:cf:28:
                    78:f1:4b:cd:5e:71:07:ae:b7:8f:0e:5c:38:17:3f:
                    d6:5c:e7:1d:ba:ec:0e:00:a0:0b:43:97:8c:2c:1a:
                    62:1c:67:3c:65:3f:b6:9c:ad:d3:52:79:9c:65:d2:
                    f5:4f:f1:b5:57:a5:33:60:db:f4:b0:09:7a:58:5b:
                    3d:e4:e7:6a:d0:0b:08:83:05:7a:a2:bd:a7:30:92:
                    e3:b0:da:00:64:99:dd:54:44:94:4a:78:6f:35:10:
                    bb:df:65:33:a2:4e:07:10:65:df:0a:81:4c:02:1d:
                    f3:63:0f:05:70:c2:d7:ac:66:30:c6:4d:ec:18:23:
                    22:45:a2:47:2f:eb:80:ed:30:14:18:c0:10:82:3c:
                    d4:6a:68:60:17:b2:5a:c7:9c:41:26:e8:4c:e2:96:
                    9f:2a:f5:30:46:38:c1:0e:bd:e7:5f:b0:18:a7:37:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5E:36:25:51:34:8A:B2:1B:DE:87:34:87:D9:34:B5:B9:41:E5:8B
            X509v3 Authority Key Identifier:
                keyid:0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/323830343a346364633a3a2f33322d3332203d3e20323637333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:07:85:ac:ab:73:1a:4d:f7:9b:97:88:8a:7f:a4:6d:2a:
         28:b4:3b:81:49:50:50:aa:39:d2:fb:16:67:87:4f:72:b7:6a:
         5c:c6:91:2c:3b:26:ef:bb:45:ab:f9:fc:05:c9:6f:8f:05:a3:
         49:32:13:dd:92:79:67:af:33:9a:41:24:1a:25:0c:da:95:d0:
         b2:fb:6d:6f:82:cf:90:70:b1:3e:d0:bc:ba:77:3e:4c:09:59:
         24:ae:29:52:35:f3:20:ad:cf:e5:78:d4:13:79:04:69:ef:e6:
         f0:4e:2a:00:2f:13:56:ab:c8:41:75:30:d8:0d:d3:ae:1d:f7:
         ee:73:4b:66:90:55:8c:24:2e:05:bf:45:cc:1b:9f:1e:b4:f0:
         8b:64:9d:a5:43:57:01:e6:f7:f6:fb:68:30:dd:f7:25:a5:1d:
         dd:d7:55:42:b9:dd:64:ef:df:5a:35:0a:79:8b:1e:fe:eb:35:
         12:58:1e:37:61:53:c5:85:85:18:25:dc:09:57:6d:43:fd:40:
         03:5e:28:cf:7b:89:d2:13:62:28:f3:b9:c2:85:bb:30:9a:a5:
         8f:e8:52:2c:70:03:d6:45:d9:69:7e:0c:df:7f:5d:d3:e3:fc:
         9e:b2:50:a9:f4:de:03:68:f7:cd:3c:97:c2:8d:52:ce:ff:b3:
         14:4c:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:28:28 2026 by rpki-client