Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa
File:                     323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa (raw, json)
Hash identifier:          XPUowsJccXAdhQBezFmBamKhMH61ZbyhwPhyNf2i924=
Subject key identifier:   FD:F5:FF:7A:EB:C7:90:44:A0:F1:3C:F8:18:CC:38:73:08:31:C5:DF
Certificate issuer:       /CN=749927ED950BF2413C42E510894A6D14EEF7E5C7
Certificate serial:       12AB0D063484E173FCBCF6D0275CAF5F1CDB5214
Authority key identifier: 74:99:27:ED:95:0B:F2:41:3C:42:E5:10:89:4A:6D:14:EE:F7:E5:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749927ED950BF2413C42E510894A6D14EEF7E5C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa
Signing time:             Fri 02 Oct 2026 22:53:39 +0000
ROA not before:           Fri 02 Oct 2026 22:48:39 +0000
ROA not after:            Fri 01 Oct 2027 22:53:39 +0000
asID:                     268307
IP address blocks:        2804:4f24:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/749927ED950BF2413C42E510894A6D14EEF7E5C7.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/749927ED950BF2413C42E510894A6D14EEF7E5C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749927ED950BF2413C42E510894A6D14EEF7E5C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 05:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ab:0d:06:34:84:e1:73:fc:bc:f6:d0:27:5c:af:5f:1c:db:52:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749927ED950BF2413C42E510894A6D14EEF7E5C7
        Validity
            Not Before: Oct  2 22:48:39 2026 GMT
            Not After : Oct  1 22:53:39 2027 GMT
        Subject: CN=FDF5FF7AEBC79044A0F13CF818CC38730831C5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:aa:4a:51:9a:50:86:af:9f:d4:23:0f:c4:
                    4b:9f:a7:07:3f:05:48:28:87:6d:9c:bd:38:ca:b4:
                    1d:d6:1e:9e:c0:04:fd:2e:99:dd:cc:bf:b7:89:94:
                    b6:40:0b:d7:07:8c:1d:95:73:31:1b:9d:94:6c:37:
                    4f:27:c4:da:c9:8c:2e:90:2e:96:9f:5e:3c:88:09:
                    2e:35:da:cc:44:ff:84:e2:8d:22:a4:88:c8:a4:dd:
                    3e:53:23:ca:89:f3:8c:f8:2d:ed:86:b3:ca:c9:04:
                    ac:0c:c9:bb:f5:a0:57:f4:22:9e:eb:65:e2:ae:37:
                    ea:2b:f5:9b:de:d7:51:1a:66:a1:8d:74:ee:1f:ec:
                    83:8f:a0:7b:17:51:6a:df:dc:17:64:09:e3:71:22:
                    f0:82:74:23:50:d5:d8:78:69:61:00:ba:5c:ce:52:
                    d6:70:a4:2d:87:8d:66:33:97:32:65:e6:63:53:6a:
                    85:a4:26:ed:47:b7:90:ce:95:48:88:ac:7b:5c:57:
                    bc:5e:df:9c:8f:c0:37:bb:63:f4:66:dd:39:c4:24:
                    0f:e2:a5:eb:13:e7:ad:4a:84:c9:3b:e7:20:e6:c6:
                    e9:8b:80:f4:a2:8c:fb:8a:53:ae:a6:cb:9d:51:dc:
                    58:98:8b:8b:5a:c4:88:a3:c9:60:6b:1c:5e:92:2a:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:FF:7A:EB:C7:90:44:A0:F1:3C:F8:18:CC:38:73:08:31:C5:DF
            X509v3 Authority Key Identifier:
                keyid:74:99:27:ED:95:0B:F2:41:3C:42:E5:10:89:4A:6D:14:EE:F7:E5:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/749927ED950BF2413C42E510894A6D14EEF7E5C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749927ED950BF2413C42E510894A6D14EEF7E5C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f24:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:2a:b5:6c:c8:76:75:e5:7e:a7:b5:31:e3:60:79:82:59:
         56:47:06:11:96:6f:8a:c2:3d:68:74:3a:1b:7a:8d:3d:ba:55:
         b5:96:48:ef:0a:87:4c:7e:c2:b8:a3:df:d7:5a:4b:ee:e6:ac:
         91:30:25:b2:46:3a:2b:67:b2:2b:38:b6:f7:e4:d3:9f:f3:90:
         ba:fb:35:3f:4a:a1:7d:9c:6a:c0:58:8e:84:97:5e:eb:e6:ce:
         25:60:e1:e4:21:97:32:03:ea:09:11:73:4c:42:8b:32:23:f7:
         d7:21:b3:04:69:7b:81:e4:f2:d4:6b:86:e3:19:7f:3e:bb:ff:
         69:d9:e4:92:19:5c:80:17:9a:9c:b5:06:03:f6:86:10:8a:76:
         5e:b0:a5:32:35:54:0c:6d:0b:0e:03:11:e8:00:fe:f1:1f:46:
         f4:48:74:47:cc:f4:18:2d:4a:6e:ef:90:3d:fc:97:e5:b3:a8:
         7e:74:e7:ca:d1:cc:c9:4b:42:b9:24:5d:db:b2:e2:5e:ca:cb:
         41:42:ec:5c:5d:6d:4e:59:d4:ad:61:dc:9c:44:c6:82:f0:d5:
         8b:3f:4f:9a:f7:91:67:78:e8:de:e2:a3:44:b9:56:7b:bf:cb:
         b9:64:45:d0:ed:18:f4:1e:d4:b8:fe:d1:53:67:0b:19:95:70:
         c9:37:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:09:24 2026 by rpki-client