Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa
File:                     323830343a346632343a3a2f33322d3332203d3e20323638333037.roa (raw, json)
Hash identifier:          ZiHuao3cDawzR2QEqBPm2FAmw84kxjEj8sGdYitB/Us=
Subject key identifier:   B5:6D:08:9E:35:7C:2C:E4:D4:30:4C:17:64:88:46:A8:08:43:73:82
Certificate issuer:       /CN=749927ED950BF2413C42E510894A6D14EEF7E5C7
Certificate serial:       0D4D57D58080E18FA919D84C2A71938404ED606B
Authority key identifier: 74:99:27:ED:95:0B:F2:41:3C:42:E5:10:89:4A:6D:14:EE:F7:E5:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749927ED950BF2413C42E510894A6D14EEF7E5C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa
Signing time:             Fri 02 Oct 2026 22:53:39 +0000
ROA not before:           Fri 02 Oct 2026 22:48:39 +0000
ROA not after:            Fri 01 Oct 2027 22:53:39 +0000
asID:                     268307
IP address blocks:        2804:4f24::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/749927ED950BF2413C42E510894A6D14EEF7E5C7.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/749927ED950BF2413C42E510894A6D14EEF7E5C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749927ED950BF2413C42E510894A6D14EEF7E5C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Oct 2026 05:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4d:57:d5:80:80:e1:8f:a9:19:d8:4c:2a:71:93:84:04:ed:60:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749927ED950BF2413C42E510894A6D14EEF7E5C7
        Validity
            Not Before: Oct  2 22:48:39 2026 GMT
            Not After : Oct  1 22:53:39 2027 GMT
        Subject: CN=B56D089E357C2CE4D4304C17648846A808437382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:9f:0c:5f:9f:90:b7:09:46:d1:f1:af:b2:
                    a5:2f:fe:00:4e:cb:83:78:69:22:95:74:0f:89:77:
                    d0:8f:0c:eb:93:d8:d6:2e:70:25:54:3f:6b:45:21:
                    09:7d:e8:10:99:84:e2:29:46:7e:27:53:76:b9:05:
                    0d:05:c5:95:13:50:03:92:52:11:cd:af:36:2b:4f:
                    0b:e3:93:a8:86:31:b7:41:b6:8e:75:17:11:c8:94:
                    38:fb:0a:c3:44:33:f8:fe:e3:ef:14:f2:31:78:71:
                    75:d5:0e:6e:65:99:a7:7f:4e:a2:83:32:e7:cf:75:
                    f8:3a:1a:80:68:84:97:f1:ae:8b:c4:3e:d8:85:79:
                    4a:9a:99:df:39:e5:39:4e:d2:1b:66:c5:04:db:81:
                    0b:6a:a9:73:ed:30:e2:90:30:41:28:2d:ef:31:ee:
                    41:19:93:cd:4f:76:04:30:30:f5:1f:fa:11:e7:76:
                    2d:98:0d:60:8f:11:3d:51:28:4b:86:14:aa:52:24:
                    3b:6f:96:c6:80:a7:c4:99:6e:b8:d4:4d:3b:bc:8f:
                    b2:a1:53:18:5a:5a:2d:d6:d8:8b:d4:ba:26:7c:5c:
                    56:5f:ec:22:bf:4d:45:f7:06:24:a6:5c:f7:21:54:
                    a6:77:bc:42:ef:f7:b9:43:cb:e1:c3:04:7d:39:a1:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6D:08:9E:35:7C:2C:E4:D4:30:4C:17:64:88:46:A8:08:43:73:82
            X509v3 Authority Key Identifier:
                keyid:74:99:27:ED:95:0B:F2:41:3C:42:E5:10:89:4A:6D:14:EE:F7:E5:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/749927ED950BF2413C42E510894A6D14EEF7E5C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749927ED950BF2413C42E510894A6D14EEF7E5C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:8e:bb:29:04:79:1c:bc:39:ff:4d:61:d8:d6:71:af:13:5e:
         17:51:65:1e:40:ca:16:67:c8:95:03:0a:fc:85:2b:39:05:3a:
         05:7b:0a:47:89:68:60:a1:c4:83:10:fa:c0:b3:97:8d:95:2c:
         2f:7d:73:3f:83:c1:74:bf:ba:0c:26:b2:11:f4:c3:2e:1b:33:
         e5:4a:89:e6:b1:41:0d:66:a8:ae:c4:b4:f8:16:5b:a3:fc:84:
         75:8c:82:cb:ab:96:19:59:24:e3:c2:cf:92:db:1c:30:ce:d7:
         24:da:38:21:97:b4:18:46:d1:f7:8c:94:c6:55:d2:55:51:09:
         b4:81:47:a2:f6:46:85:8c:72:81:ee:24:9f:2b:d9:0c:b4:eb:
         50:d0:6b:37:d7:33:47:14:fd:5f:ac:d1:11:0d:7e:14:3a:8f:
         28:ff:d0:3e:55:2c:f0:03:23:46:89:1b:5f:fd:7e:20:ec:87:
         3f:b0:a8:ac:b9:19:c3:ca:6f:03:f0:3b:b4:83:a0:bc:c6:b9:
         4d:70:67:72:b9:7c:f8:24:ba:52:4c:cb:68:dc:fc:ef:de:73:
         c2:06:75:aa:3c:6e:5d:25:21:96:ee:05:7f:b5:7a:12:93:ab:
         3b:8f:87:16:10:f1:42:ac:be:57:73:77:c5:7a:0a:d7:17:93:
         5c:2d:2f:6b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDU1X1YCA4Y+pGdhMKnGThATtYGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ5OTI3RUQ5NTBCRjI0MTNDNDJFNTEwODk0QTZEMTRF
RUY3RTVDNzAeFw0yNjEwMDIyMjQ4MzlaFw0yNzEwMDEyMjUzMzlaMDMxMTAvBgNV
BAMTKEI1NkQwODlFMzU3QzJDRTRENDMwNEMxNzY0ODg0NkE4MDg0MzczODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnp8MX5+QtwlG0fGvsqUv/gBO
y4N4aSKVdA+Jd9CPDOuT2NYucCVUP2tFIQl96BCZhOIpRn4nU3a5BQ0FxZUTUAOS
UhHNrzYrTwvjk6iGMbdBto51FxHIlDj7CsNEM/j+4+8U8jF4cXXVDm5lmad/TqKD
MufPdfg6GoBohJfxrovEPtiFeUqamd855TlO0htmxQTbgQtqqXPtMOKQMEEoLe8x
7kEZk81PdgQwMPUf+hHndi2YDWCPET1RKEuGFKpSJDtvlsaAp8SZbrjUTTu8j7Kh
UxhaWi3W2IvUuiZ8XFZf7CK/TUX3BiSmXPchVKZ3vELv97lDy+HDBH05oTuTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUtW0InjV8LOTUMEwXZIhGqAhDc4IwHwYDVR0j
BBgwFoAUdJkn7ZUL8kE8QuUQiUptFO735ccwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FcFdUZUQ3NEszajY3MUxVNnR1ckN4WUZaaEhpNnFQektMSEs5ZzJFMXph
LzAvNzQ5OTI3RUQ5NTBCRjI0MTNDNDJFNTEwODk0QTZEMTRFRUY3RTVDNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NDk5MjdFRDk1MEJGMjQxM0M0
MkU1MTA4OTRBNkQxNEVFRjdFNUM3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
cFdUZUQ3NEszajY3MUxVNnR1ckN4WUZaaEhpNnFQektMSEs5ZzJFMXphLzAvMzIz
ODMwMzQzYTM0NjYzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4MzMz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARPJDANBgkqhkiG9w0BAQsFAAOCAQEAE467KQR5HLw5
/01h2NZxrxNeF1FlHkDKFmfIlQMK/IUrOQU6BXsKR4loYKHEgxD6wLOXjZUsL31z
P4PBdL+6DCayEfTDLhsz5UqJ5rFBDWaorsS0+BZbo/yEdYyCy6uWGVkk48LPktsc
MM7XJNo4IZe0GEbR94yUxlXSVVEJtIFHovZGhYxyge4knyvZDLTrUNBrN9czRxT9
X6zREQ1+FDqPKP/QPlUs8AMjRokbX/1+IOyHP7CorLkZw8pvA/A7tIOgvMa5TXBn
crl8+CS6UkzLaNz8795zwgZ1qjxuXSUhlu4Ff7V6EpOrO4+HFhDxQqy+V3N3xXoK
1xeTXC0vaw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:25:37 2026 by rpki-client