Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33322d313238203d3e20323638303535.roa
File:                     323830343a353734343a3a2f33322d313238203d3e20323638303535.roa (raw, json)
Hash identifier:          myNHdzFq7bVHIkGpIV/2B23tauEyGy1v5JSYos5DmOk=
Subject key identifier:   37:14:AB:A8:3B:DE:2F:0F:C1:25:E0:04:AC:4E:7F:EC:66:1C:93:32
Certificate issuer:       /CN=B677CCF25130894D154AD3A2CDE610C5A0CC93FB
Certificate serial:       4789F8C3A69D30D2E5B8E6CA79F276A55B135CD2
Authority key identifier: B6:77:CC:F2:51:30:89:4D:15:4A:D3:A2:CD:E6:10:C5:A0:CC:93:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B677CCF25130894D154AD3A2CDE610C5A0CC93FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33322d313238203d3e20323638303535.roa
Signing time:             Sat 05 Sep 2026 17:10:16 +0000
ROA not before:           Sat 05 Sep 2026 17:05:16 +0000
ROA not after:            Sat 04 Sep 2027 17:10:16 +0000
asID:                     268055
IP address blocks:        2804:5744::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/B677CCF25130894D154AD3A2CDE610C5A0CC93FB.crl
                          rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/B677CCF25130894D154AD3A2CDE610C5A0CC93FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B677CCF25130894D154AD3A2CDE610C5A0CC93FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 13:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:89:f8:c3:a6:9d:30:d2:e5:b8:e6:ca:79:f2:76:a5:5b:13:5c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B677CCF25130894D154AD3A2CDE610C5A0CC93FB
        Validity
            Not Before: Sep  5 17:05:16 2026 GMT
            Not After : Sep  4 17:10:16 2027 GMT
        Subject: CN=3714ABA83BDE2F0FC125E004AC4E7FEC661C9332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:8f:32:57:10:a5:cd:2e:7a:c9:56:af:5c:
                    44:96:3b:a6:30:24:50:b5:00:82:bf:0b:38:fa:24:
                    95:54:a8:28:48:9a:9c:d5:44:2a:77:3b:25:c9:3b:
                    f8:df:33:30:86:e7:6d:67:4f:56:45:42:3b:a3:8b:
                    92:43:e7:18:d1:c4:fa:ae:c6:d3:85:56:8e:94:f8:
                    ba:87:16:b3:f6:f4:eb:24:78:d6:d5:0c:36:bd:89:
                    cd:ee:01:9b:ff:b1:b0:5c:78:08:fc:40:66:bf:2c:
                    13:5f:bf:dc:dc:ca:cc:49:cb:4d:f8:ca:77:37:ec:
                    97:41:48:cd:48:6f:de:ec:5d:c0:26:d9:60:16:81:
                    5e:97:2e:f6:eb:bb:2a:1f:bd:b6:cd:7f:20:7e:eb:
                    5a:16:00:ee:de:b7:3b:d0:e6:25:a1:a7:44:ea:8b:
                    10:36:05:dc:ea:b8:cb:51:fe:0b:67:e2:ba:2e:7a:
                    6d:00:52:c3:d0:bd:95:1d:dd:f1:1b:81:78:ae:f3:
                    c2:62:e6:01:93:88:9a:d5:ec:11:cd:b3:90:2a:2f:
                    39:b9:c8:45:6c:0f:7d:63:31:2a:f5:7f:b9:42:58:
                    76:52:04:38:f7:92:a7:74:bc:3c:d8:fb:d2:be:59:
                    38:b5:d5:bb:78:25:47:b5:79:56:f0:09:19:32:6c:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:14:AB:A8:3B:DE:2F:0F:C1:25:E0:04:AC:4E:7F:EC:66:1C:93:32
            X509v3 Authority Key Identifier:
                keyid:B6:77:CC:F2:51:30:89:4D:15:4A:D3:A2:CD:E6:10:C5:A0:CC:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/B677CCF25130894D154AD3A2CDE610C5A0CC93FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B677CCF25130894D154AD3A2CDE610C5A0CC93FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33322d313238203d3e20323638303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5744::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:0e:e9:2e:b2:7f:f7:b8:45:61:f9:a0:84:18:7b:5a:0f:43:
         5a:89:e7:1c:ec:d4:b1:02:f1:aa:e9:03:44:e9:68:7b:38:ef:
         65:61:35:36:d0:6e:b1:12:77:d6:bb:85:dc:dd:91:56:38:a7:
         b6:bb:f0:f4:ea:16:18:d8:90:7b:df:ef:01:8b:5c:4f:55:57:
         fb:d1:af:0a:28:7e:ce:dc:40:e3:1c:b1:bc:b2:53:d0:18:4d:
         b6:45:89:80:1b:57:41:89:69:55:9b:10:86:f1:5b:74:58:aa:
         0b:e8:1a:18:c3:33:41:3f:fb:2e:e0:6c:35:0d:0d:f5:e4:27:
         be:56:2e:0c:30:33:74:13:2d:d6:ae:08:f5:70:14:f0:dd:74:
         41:b7:5e:5f:14:84:27:be:51:90:ce:4e:61:c8:d4:30:e6:f2:
         c0:0a:d7:6a:d6:56:a2:22:d9:c2:09:25:97:e7:6f:76:7a:79:
         fa:3c:a6:16:b0:1f:a3:d1:34:c8:e1:6e:f6:26:14:ab:76:f6:
         69:8c:59:bb:69:da:b7:e9:49:1a:71:e8:cb:27:4e:2d:df:1c:
         ea:2b:f2:08:6d:14:1d:60:39:f9:1e:cd:90:75:9d:0e:0d:4a:
         41:95:fd:bb:05:4b:9e:e4:dd:09:0e:b6:2a:00:b4:0e:b1:c0:
         29:1e:f8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:23:57 2026 by rpki-client