Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/323830343a346336343a3a2f33322d313238203d3e20323637333638.roa
File:                     323830343a346336343a3a2f33322d313238203d3e20323637333638.roa (raw, json)
Hash identifier:          U27ZDMGKS65ZYzV7owreSrmB3q7C1Cdc7Y8ezizwDb8=
Subject key identifier:   64:D3:09:CD:5F:5F:08:8B:43:E0:82:41:D8:CE:B6:84:08:3B:18:87
Certificate issuer:       /CN=B01C28DEBA3D1ED020672618F0B1675719B28322
Certificate serial:       1019D03B47BAB2A260BE78F20CFB3FD8B0D3DA6C
Authority key identifier: B0:1C:28:DE:BA:3D:1E:D0:20:67:26:18:F0:B1:67:57:19:B2:83:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B01C28DEBA3D1ED020672618F0B1675719B28322.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/323830343a346336343a3a2f33322d313238203d3e20323637333638.roa
Signing time:             Fri 28 Aug 2026 22:21:45 +0000
ROA not before:           Fri 28 Aug 2026 22:16:45 +0000
ROA not after:            Fri 27 Aug 2027 22:21:45 +0000
asID:                     267368
IP address blocks:        2804:4c64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/B01C28DEBA3D1ED020672618F0B1675719B28322.crl
                          rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/B01C28DEBA3D1ED020672618F0B1675719B28322.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B01C28DEBA3D1ED020672618F0B1675719B28322.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 08:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:19:d0:3b:47:ba:b2:a2:60:be:78:f2:0c:fb:3f:d8:b0:d3:da:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B01C28DEBA3D1ED020672618F0B1675719B28322
        Validity
            Not Before: Aug 28 22:16:45 2026 GMT
            Not After : Aug 27 22:21:45 2027 GMT
        Subject: CN=64D309CD5F5F088B43E08241D8CEB684083B1887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:8a:36:46:be:4f:22:75:97:7c:67:ca:cd:
                    9e:3d:11:f0:98:b1:ef:7f:f2:1a:ac:07:67:19:02:
                    6a:df:e2:c3:36:89:e9:b6:08:4a:85:69:43:a0:26:
                    54:72:39:8e:aa:a3:c1:f1:3b:b1:f0:5b:c0:79:24:
                    29:4a:92:21:cd:9e:76:1d:b1:aa:41:72:f4:bc:6e:
                    28:4d:3b:c2:d0:d4:de:1e:7c:14:c7:06:39:94:3d:
                    e6:79:22:37:37:87:7d:4f:a8:47:ad:48:9f:e7:ce:
                    fc:9d:87:57:df:6e:04:82:aa:e3:4c:47:9f:3a:b7:
                    bd:ae:5a:77:6c:45:a2:30:2d:f5:06:aa:21:83:2d:
                    ad:8d:1c:c3:6c:8d:17:10:cb:5c:44:0a:47:c2:bd:
                    dc:af:64:0b:2c:7e:a5:e7:4f:5e:71:3d:b9:68:95:
                    1d:75:0f:59:c9:ff:61:dc:c1:49:78:f4:5b:92:36:
                    8e:2e:f7:f6:b3:16:3a:d0:32:ae:b5:40:82:76:e9:
                    d5:6d:a1:cc:60:00:c0:58:d9:68:f2:54:d4:e1:99:
                    b1:58:b2:4d:37:92:41:80:42:93:57:91:f0:ac:1c:
                    56:74:81:8f:93:0d:5b:ee:b2:82:5f:2d:7b:25:6b:
                    c8:c9:32:bc:cb:05:07:9a:9d:7b:a2:5c:4d:af:98:
                    4c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D3:09:CD:5F:5F:08:8B:43:E0:82:41:D8:CE:B6:84:08:3B:18:87
            X509v3 Authority Key Identifier:
                keyid:B0:1C:28:DE:BA:3D:1E:D0:20:67:26:18:F0:B1:67:57:19:B2:83:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/B01C28DEBA3D1ED020672618F0B1675719B28322.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B01C28DEBA3D1ED020672618F0B1675719B28322.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/323830343a346336343a3a2f33322d313238203d3e20323637333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:56:02:78:87:50:df:fa:87:f8:98:a0:fa:e5:21:5a:dd:3b:
         7b:c9:75:98:3c:9f:a4:d4:0e:09:c4:f9:a7:41:6d:af:26:8a:
         e1:d3:6c:0e:a2:6b:50:3f:2d:bf:3a:fe:92:cc:d5:1d:58:1b:
         4e:e0:f2:5c:9b:53:e8:15:d6:de:8f:3c:aa:20:c5:49:26:9b:
         6d:2c:74:4f:d0:7d:05:82:90:be:e3:54:45:f9:59:72:7a:04:
         02:7a:2f:ea:f8:96:41:ca:9e:2b:90:54:09:04:de:b1:bc:37:
         ae:c2:41:b2:21:35:7d:6d:86:7d:4e:26:f8:4c:75:8f:38:79:
         af:99:d1:88:f9:3f:b6:56:75:9c:11:c0:01:67:8a:95:41:43:
         70:f0:07:ba:eb:ca:f8:41:d5:ca:89:ab:00:2b:c0:f5:fe:b4:
         00:41:de:92:17:04:66:75:26:c8:c7:bb:6c:d7:7e:fd:45:27:
         81:cf:d6:ac:09:5d:9f:f1:a8:5f:f1:8b:fd:d4:35:63:ad:2b:
         31:2b:af:62:9c:8c:27:42:33:fb:65:d4:99:c1:f7:0c:0a:49:
         1e:5d:29:00:64:3c:25:ee:27:97:9d:70:23:4c:8c:f4:52:75:
         e9:e1:96:7b:82:e8:83:ff:e1:71:f0:55:85:c1:dd:83:7a:77:
         ef:60:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 18:30:26 2026 by rpki-client