Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037333a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a313037333a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          SO8uvBZjpS2mRrLBESsun3qBaWvIYVx5soRgRN5P6qI=
Subject key identifier:   2C:21:D8:03:E0:67:91:AA:72:8C:06:BF:8A:5A:AE:56:3D:BC:67:A7
Certificate issuer:       /CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
Certificate serial:       20540295B3F4F42EEC13BC1AE1D653EE5FB18C5C
Authority key identifier: DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037333a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Thu 17 Sep 2026 18:55:24 +0000
ROA not before:           Thu 17 Sep 2026 18:50:24 +0000
ROA not after:            Thu 16 Sep 2027 18:55:24 +0000
asID:                     269566
IP address blocks:        2804:6688:1073::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 17:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:54:02:95:b3:f4:f4:2e:ec:13:bc:1a:e1:d6:53:ee:5f:b1:8c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
        Validity
            Not Before: Sep 17 18:50:24 2026 GMT
            Not After : Sep 16 18:55:24 2027 GMT
        Subject: CN=2C21D803E06791AA728C06BF8A5AAE563DBC67A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:36:70:31:8d:6e:b8:de:ce:2b:ba:eb:25:
                    a5:fe:83:6b:57:30:f6:81:74:8b:49:9b:16:b7:24:
                    55:97:c0:25:ee:09:18:2c:57:0b:ba:f4:2f:e3:f2:
                    7d:72:8d:9e:eb:db:24:11:4c:61:da:cb:43:87:57:
                    5b:2e:49:34:56:a7:a4:62:50:7f:d9:f5:96:24:d3:
                    28:bd:f6:16:0a:b1:7d:da:2b:3e:83:e5:8a:a1:ac:
                    51:29:69:cf:57:96:85:3d:b6:fa:f1:10:60:92:48:
                    42:09:8e:59:0c:9f:3f:f3:51:5c:86:8a:f1:4f:20:
                    d1:cd:38:b2:49:1a:1c:cb:f2:67:6e:49:84:53:79:
                    c4:4b:e9:ec:7b:0a:9d:67:35:d4:e4:77:a2:37:34:
                    e3:9c:5d:92:0a:aa:7f:1d:aa:bd:32:b3:3c:3c:09:
                    6d:c2:5f:94:d0:f8:e1:ab:48:0d:70:04:3d:6e:ef:
                    a5:bc:e2:bb:16:d2:9b:94:64:9e:7f:c1:04:2e:18:
                    f5:28:cb:c3:7b:97:a8:4a:f3:ba:93:1f:8b:a1:10:
                    2d:ab:37:b4:30:01:36:4b:e1:1e:bd:09:55:a2:44:
                    e0:47:11:88:a6:7a:de:e9:0f:58:d1:17:a0:8c:b7:
                    ff:fd:fc:c1:89:d9:32:95:ea:0e:59:c8:7a:45:6a:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:21:D8:03:E0:67:91:AA:72:8C:06:BF:8A:5A:AE:56:3D:BC:67:A7
            X509v3 Authority Key Identifier:
                keyid:DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037333a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:1073::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:25:f0:8e:c0:55:71:35:fb:11:0d:9c:bd:f6:c5:87:3a:de:
         86:86:02:2e:ac:a7:f6:fb:f0:06:53:14:c0:21:d0:8b:74:7a:
         ce:ce:b4:5d:ad:6b:ac:60:13:07:e2:76:0c:01:25:c8:97:b4:
         a7:71:a2:1b:df:86:0b:e2:95:dc:0c:b0:b3:6c:7c:c4:46:d3:
         83:22:e9:57:e3:ef:5c:d0:d0:2f:09:e0:aa:b1:f8:00:0b:6f:
         3b:76:28:d2:2b:e1:1c:3f:e3:b4:96:0f:c6:9d:e7:3b:04:88:
         d5:58:69:97:16:cc:49:2c:47:4f:5f:8e:d1:ae:c9:d7:f3:51:
         ec:a7:f9:c8:e8:69:24:2c:3a:4b:10:8d:4c:b4:a6:cb:18:a2:
         f3:f4:c4:9e:74:cf:f3:c3:3a:55:4e:a9:6b:50:86:e2:5b:e0:
         8e:75:a7:01:a8:c1:fc:f1:7e:e3:00:c1:f5:8e:a9:58:4a:2b:
         20:f8:0a:b0:06:47:19:cc:a5:24:a8:ec:db:d3:86:f0:a5:f8:
         9a:3d:8b:27:52:49:7a:f8:2b:23:ca:0c:2e:e5:c7:39:fa:40:
         e0:20:9a:e8:52:93:f7:7a:aa:d6:e3:9d:5d:29:f8:09:90:1d:
         50:7c:0c:41:21:a0:43:0e:9b:43:51:9b:57:87:c5:c1:fa:ab:
         65:48:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:12:04 2026 by rpki-client