Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a3a2f33352d3335203d3e20323731303432.roa
File:                     323830343a373536303a3a2f33352d3335203d3e20323731303432.roa (raw, json)
Hash identifier:          QKwR0s/z40+6DwqEfPvr9taoOh8gk9sCXYaeeOLc+R0=
Subject key identifier:   D8:47:81:0F:E8:BC:EB:11:45:45:AE:DA:0D:92:EF:26:C3:E7:BA:8A
Certificate issuer:       /CN=31879B6517B714682709D1F80AD95E060C94084B
Certificate serial:       0FA09138C83BCD9BCDC778E450F87945C3D0A637
Authority key identifier: 31:87:9B:65:17:B7:14:68:27:09:D1:F8:0A:D9:5E:06:0C:94:08:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31879B6517B714682709D1F80AD95E060C94084B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a3a2f33352d3335203d3e20323731303432.roa
Signing time:             Thu 15 Oct 2026 15:49:51 +0000
ROA not before:           Thu 15 Oct 2026 15:44:51 +0000
ROA not after:            Thu 14 Oct 2027 15:49:51 +0000
asID:                     271042
IP address blocks:        2804:7560::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/31879B6517B714682709D1F80AD95E060C94084B.crl
                          rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/31879B6517B714682709D1F80AD95E060C94084B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31879B6517B714682709D1F80AD95E060C94084B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a0:91:38:c8:3b:cd:9b:cd:c7:78:e4:50:f8:79:45:c3:d0:a6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31879B6517B714682709D1F80AD95E060C94084B
        Validity
            Not Before: Oct 15 15:44:51 2026 GMT
            Not After : Oct 14 15:49:51 2027 GMT
        Subject: CN=D847810FE8BCEB114545AEDA0D92EF26C3E7BA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:cb:b3:b0:4a:1b:af:ea:68:da:6f:69:85:
                    4c:66:6c:e6:b2:4b:a6:67:6b:ea:e7:2d:5a:9d:78:
                    06:cb:5d:d9:aa:2b:d2:da:3e:66:ae:24:32:e0:41:
                    e4:12:8b:72:3b:d3:ee:35:2c:a2:ff:a4:e5:6e:42:
                    b8:59:17:f7:e3:7d:8f:ef:cb:26:8d:31:09:d3:1f:
                    de:10:19:fb:16:e0:54:d1:15:da:0c:5e:6f:e7:87:
                    8a:14:54:26:80:2c:e5:f0:9c:26:9f:2c:99:01:c9:
                    31:a7:3b:a6:13:80:97:96:95:cb:1e:6a:7b:97:fb:
                    e1:db:dd:18:7a:b4:8a:5d:4e:0c:b1:e7:22:51:98:
                    c2:39:32:91:fe:f4:f1:62:e3:e5:25:95:39:92:fe:
                    a5:4e:72:a9:26:65:33:56:c3:f7:c9:e1:96:fa:70:
                    7f:f4:75:17:97:0d:0f:64:68:44:27:19:2c:c2:0b:
                    ef:f1:82:9d:4a:43:cf:e5:69:51:aa:4c:94:ee:84:
                    db:6b:ac:03:f2:5d:c6:bc:e1:bd:12:11:3f:7d:19:
                    82:16:f8:b3:01:f7:81:69:ad:b4:09:2b:6b:41:d3:
                    e0:f4:03:fc:9c:a6:f2:28:c6:fc:02:16:35:d3:13:
                    73:5f:31:9f:8d:17:48:58:b4:e1:38:a7:ad:52:f6:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:47:81:0F:E8:BC:EB:11:45:45:AE:DA:0D:92:EF:26:C3:E7:BA:8A
            X509v3 Authority Key Identifier:
                keyid:31:87:9B:65:17:B7:14:68:27:09:D1:F8:0A:D9:5E:06:0C:94:08:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/31879B6517B714682709D1F80AD95E060C94084B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31879B6517B714682709D1F80AD95E060C94084B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a3a2f33352d3335203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560::/35

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:75:ae:51:01:ee:f4:e9:3d:e5:89:79:63:79:9c:b6:89:
         85:ed:e8:5f:99:72:a6:ec:04:36:f5:79:63:d7:af:ef:be:75:
         31:93:f0:ae:14:7a:08:51:a5:ed:9e:d4:46:fa:a8:f1:02:3b:
         c7:75:27:94:05:07:cc:ea:e6:e0:0a:44:34:d7:6b:fe:f1:bb:
         7d:e7:bf:fb:b8:5a:bf:26:d5:0b:86:ba:17:03:09:7a:61:aa:
         8d:36:24:2d:be:34:53:b6:d7:f5:6e:e4:90:b1:40:f4:84:e9:
         24:bd:3f:af:20:ed:95:61:5a:31:ec:af:85:59:5a:df:75:73:
         07:8a:85:20:fa:89:37:f0:98:5e:fd:dc:b5:90:1a:45:ae:aa:
         1a:92:24:90:63:86:26:ff:84:c5:cb:99:44:b5:bd:4f:3e:67:
         0f:99:a2:76:54:e4:08:a8:d2:c2:1f:3a:12:40:64:aa:35:8d:
         68:4e:6e:dc:d7:b1:67:c1:cf:7b:f0:79:05:6a:76:98:ea:ef:
         8b:37:18:83:b8:94:a7:25:65:b3:44:14:74:60:81:f0:8b:5c:
         6f:8d:89:a2:98:05:1b:b2:f3:98:70:ce:32:d2:bc:f1:60:83:
         40:6e:93:e2:71:a1:ad:66:ad:ec:f4:53:a2:5a:49:47:bb:16:
         ea:d0:f7:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD6CROMg7zZvNx3jkUPh5RcPQpjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE4NzlCNjUxN0I3MTQ2ODI3MDlEMUY4MEFEOTVFMDYw
Qzk0MDg0QjAeFw0yNjEwMTUxNTQ0NTFaFw0yNzEwMTQxNTQ5NTFaMDMxMTAvBgNV
BAMTKEQ4NDc4MTBGRThCQ0VCMTE0NTQ1QUVEQTBEOTJFRjI2QzNFN0JBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZucuzsEobr+po2m9phUxmbOay
S6Zna+rnLVqdeAbLXdmqK9LaPmauJDLgQeQSi3I70+41LKL/pOVuQrhZF/fjfY/v
yyaNMQnTH94QGfsW4FTRFdoMXm/nh4oUVCaALOXwnCafLJkByTGnO6YTgJeWlcse
anuX++Hb3Rh6tIpdTgyx5yJRmMI5MpH+9PFi4+UllTmS/qVOcqkmZTNWw/fJ4Zb6
cH/0dReXDQ9kaEQnGSzCC+/xgp1KQ8/laVGqTJTuhNtrrAPyXca84b0SET99GYIW
+LMB94FprbQJK2tB0+D0A/ycpvIoxvwCFjXTE3NfMZ+NF0hYtOE4p61S9t71AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2EeBD+i86xFFRa7aDZLvJsPnuoowHwYDVR0j
BBgwFoAUMYebZRe3FGgnCdH4CtleBgyUCEswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2YyWUFRQTRlaWtOcER0OFc2c1VERDJVeHhoVXpuWDlqQmRxdktyYjJm
ZDgvMC8zMTg3OUI2NTE3QjcxNDY4MjcwOUQxRjgwQUQ5NUUwNjBDOTQwODRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxODc5QjY1MTdCNzE0Njgy
NzA5RDFGODBBRDk1RTA2MEM5NDA4NEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmMllBUUE0ZWlrTnBEdDhXNnNVREQyVXh4aFV6blg5akJkcXZLcmIyZmQ4LzAv
MzIzODMwMzQzYTM3MzUzNjMwM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNzMx
MzAzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYFKAR1YAAwDQYJKoZIhvcNAQELBQADggEBAAsLda5R
Ae706T3liXljeZy2iYXt6F+ZcqbsBDb1eWPXr+++dTGT8K4UeghRpe2e1Eb6qPEC
O8d1J5QFB8zq5uAKRDTXa/7xu33nv/u4Wr8m1QuGuhcDCXphqo02JC2+NFO21/Vu
5JCxQPSE6SS9P68g7ZVhWjHsr4VZWt91cweKhSD6iTfwmF793LWQGkWuqhqSJJBj
hib/hMXLmUS1vU8+Zw+ZonZU5Aio0sIfOhJAZKo1jWhObtzXsWfBz3vweQVqdpjq
74s3GIO4lKclZbNEFHRggfCLXG+NiaKYBRuy85hwzjLSvPFgg0Buk+Jxoa1mrez0
U6JaSUe7FurQ95I=
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:57:48 2026 by rpki-client