Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a343030303a3a2f33342d3334203d3e20323637303038.roa
File:                     323830343a343662633a343030303a3a2f33342d3334203d3e20323637303038.roa (raw, json)
Hash identifier:          FpqaBEqhABL3r5ycUcKg7MXuET2KAEbCXI1QCFwaRI0=
Subject key identifier:   14:1C:0C:5F:5F:20:40:DA:F6:40:F1:F5:6D:BF:F1:48:A9:50:1B:73
Certificate issuer:       /CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
Certificate serial:       17BDA5D111317C68D4D91AB3512DC5D9F2927E7B
Authority key identifier: F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a343030303a3a2f33342d3334203d3e20323637303038.roa
Signing time:             Mon 24 Aug 2026 15:09:49 +0000
ROA not before:           Mon 24 Aug 2026 15:04:49 +0000
ROA not after:            Mon 23 Aug 2027 15:09:49 +0000
asID:                     267008
IP address blocks:        2804:46bc:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl
                          rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 11:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bd:a5:d1:11:31:7c:68:d4:d9:1a:b3:51:2d:c5:d9:f2:92:7e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
        Validity
            Not Before: Aug 24 15:04:49 2026 GMT
            Not After : Aug 23 15:09:49 2027 GMT
        Subject: CN=141C0C5F5F2040DAF640F1F56DBFF148A9501B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:89:9c:d3:6e:03:3e:17:66:3a:66:cf:f7:e2:
                    4a:8c:48:7f:38:b6:02:51:ef:a7:fc:d4:0d:58:b9:
                    2c:15:32:05:aa:f6:85:65:9e:8d:f7:ea:3d:e4:08:
                    89:f0:49:91:f0:f2:e6:68:02:33:d0:d8:db:0c:84:
                    8e:8e:03:fe:6d:84:60:8f:95:0f:67:e4:23:2a:97:
                    91:af:c5:ec:cf:3c:b0:1d:cd:2b:57:05:25:ee:74:
                    cf:b7:bc:eb:99:cb:6f:11:7b:6b:87:56:cc:cb:19:
                    65:96:a0:d2:32:7e:ea:8e:ea:60:c4:eb:d6:08:72:
                    38:67:bd:f4:94:67:38:1c:1a:74:f0:21:99:b5:c4:
                    64:97:55:41:1a:94:a1:88:2a:57:49:04:0e:c8:e9:
                    76:ce:e6:db:8d:60:0f:10:7c:7d:85:28:1c:88:5b:
                    35:41:fc:35:f9:35:68:8d:d0:42:98:76:7f:98:8a:
                    0c:19:d5:64:ad:77:28:df:ed:af:6c:81:e1:a7:3a:
                    1a:1c:5b:37:b8:dd:5d:e4:36:d2:6e:7a:ad:e5:bc:
                    fa:62:5f:9e:81:07:cb:60:87:33:6f:ed:0f:7c:00:
                    8d:fb:71:9f:92:4f:fc:86:a7:9a:54:c4:e8:99:08:
                    ef:91:84:79:cc:ad:c2:ad:0d:85:26:a0:82:dd:5c:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:0C:5F:5F:20:40:DA:F6:40:F1:F5:6D:BF:F1:48:A9:50:1B:73
            X509v3 Authority Key Identifier:
                keyid:F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/323830343a343662633a343030303a3a2f33342d3334203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46bc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d1:b4:40:79:65:84:8c:29:6f:fc:67:18:2a:a8:02:28:75:b2:
         4b:ba:40:ba:67:d2:c7:75:9d:5b:07:b1:e8:cf:be:a0:86:93:
         fb:87:4a:21:c1:b4:3b:36:0c:eb:65:72:36:a3:a2:17:c3:23:
         57:83:e9:cb:70:54:da:5d:3e:ac:c8:e2:7f:53:31:91:e3:c2:
         ce:5d:74:43:cf:83:38:69:8a:85:da:b8:a4:1b:bb:08:95:5f:
         be:c8:ed:e8:b3:54:ec:62:a9:71:ac:ce:4a:8b:7e:6c:ef:c5:
         ac:a3:1d:48:6b:82:b1:98:4c:3d:7f:86:be:97:7f:b1:34:6c:
         95:83:56:79:63:13:1c:95:bc:f4:89:d1:02:04:98:50:d6:64:
         5b:59:94:60:c3:ae:70:a3:1b:49:7a:06:6c:54:2a:33:43:c9:
         07:13:bc:22:d5:11:4b:cb:da:72:59:51:54:5c:88:d0:97:b3:
         bd:fd:f4:7b:21:1d:6e:06:e7:97:6a:70:51:e7:03:c1:c8:7f:
         15:cd:5c:ad:b1:cf:27:5c:07:a0:c7:e5:81:35:17:1c:98:83:
         d3:f4:88:6e:e9:b3:95:e6:4a:31:46:95:d3:b5:44:56:e5:ea:
         8b:09:a3:7e:32:8d:cd:c8:63:b7:62:3d:23:a7:7b:50:4b:a4:
         72:7a:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:35:11 2026 by rpki-client