Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a3a2f33342d3334203d3e20323639363635.roa
File:                     323830343a363830343a3a2f33342d3334203d3e20323639363635.roa (raw, json)
Hash identifier:          9+gTomiaiY6Jhlf8RE9t/nJvUG4HRh0ZpIznAvONlkU=
Subject key identifier:   75:18:7F:53:EC:84:CE:11:BF:4B:BF:60:76:DA:53:F1:F2:2D:01:23
Certificate issuer:       /CN=054909F1A4E8496D227A81ECF4A9154F1D934057
Certificate serial:       2B824EDA39682D362BC8E5EE3EB89F66831183BE
Authority key identifier: 05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a3a2f33342d3334203d3e20323639363635.roa
Signing time:             Thu 17 Sep 2026 18:37:32 +0000
ROA not before:           Thu 17 Sep 2026 18:32:32 +0000
ROA not after:            Thu 16 Sep 2027 18:37:32 +0000
asID:                     269665
IP address blocks:        2804:6804::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl
                          rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 13:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:82:4e:da:39:68:2d:36:2b:c8:e5:ee:3e:b8:9f:66:83:11:83:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054909F1A4E8496D227A81ECF4A9154F1D934057
        Validity
            Not Before: Sep 17 18:32:32 2026 GMT
            Not After : Sep 16 18:37:32 2027 GMT
        Subject: CN=75187F53EC84CE11BF4BBF6076DA53F1F22D0123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:ec:fb:57:ae:32:b6:ef:55:7b:27:aa:96:
                    3e:b7:25:f0:ec:07:a2:e7:45:e0:6a:75:52:cf:95:
                    f1:4f:ee:8d:2f:d2:00:87:24:93:6b:17:d4:d6:d4:
                    4e:b3:0f:78:07:26:45:8d:2d:63:9f:69:bf:37:16:
                    c9:12:9c:63:77:24:9d:ba:a7:8a:6d:da:36:ee:b8:
                    ba:6e:cb:1e:8a:e3:1e:22:0c:e9:e1:a1:b9:fa:82:
                    68:7b:6a:99:42:28:ad:35:bd:dd:4a:72:c4:ba:42:
                    9e:a6:71:f5:f9:6d:22:1a:ef:96:6e:0d:0d:77:f7:
                    3e:ae:4a:1d:81:cd:c7:39:bb:e4:2f:82:a9:43:50:
                    9a:76:03:0d:6b:2b:1a:75:a8:14:8a:6b:51:22:71:
                    62:12:a8:71:60:2b:6b:05:65:4c:6c:98:ab:82:a2:
                    d3:a2:29:61:6e:3f:ae:96:26:51:9a:33:39:61:5c:
                    b6:da:ab:8a:02:72:a0:81:34:14:fd:43:c6:53:41:
                    20:a9:57:51:09:51:98:96:28:24:68:46:2c:80:47:
                    85:7e:e1:2b:8f:27:8c:c6:b3:fe:b3:93:49:85:9b:
                    b3:4d:28:d8:74:e6:a9:80:56:df:d3:7d:54:5e:f5:
                    78:19:62:1c:31:70:aa:0d:69:9d:1c:4f:2e:18:75:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:7F:53:EC:84:CE:11:BF:4B:BF:60:76:DA:53:F1:F2:2D:01:23
            X509v3 Authority Key Identifier:
                keyid:05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a3a2f33342d3334203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6804::/34

    Signature Algorithm: sha256WithRSAEncryption
         79:d4:9d:22:49:3e:d6:cb:0d:5e:a3:d6:8c:bf:2c:81:7c:86:
         51:53:d5:56:9d:e4:b6:bf:66:fb:b1:05:f8:b8:19:37:15:39:
         56:29:8a:5f:92:08:d8:e0:87:98:c3:75:e2:c4:a6:be:30:ca:
         41:da:33:b7:28:15:86:64:67:a4:5d:33:37:9a:c8:86:50:c2:
         b3:5f:5d:19:44:38:9d:57:f6:c3:f2:90:04:cd:03:41:10:b2:
         8b:db:a3:a5:95:55:c2:cc:95:4a:17:ac:1e:8a:23:96:8a:c0:
         e3:00:02:80:e4:65:1b:ad:40:97:c1:aa:70:e9:81:1b:43:5a:
         bc:dc:4b:80:ad:81:b4:17:24:5f:df:19:00:59:26:c4:ca:d8:
         b5:8d:31:90:7f:a1:03:64:21:f3:53:fe:5d:56:c1:4d:4f:b7:
         af:de:51:56:6e:26:e5:65:46:24:60:81:f9:ef:52:38:c1:36:
         9d:10:85:f1:26:1c:70:2a:b4:00:51:c3:84:9a:e0:ad:e4:68:
         90:75:ab:ec:3e:f1:1d:2f:f8:69:0d:1c:04:51:70:f3:5a:d8:
         63:d2:3d:cc:cd:9c:e4:c6:cf:68:3c:12:aa:aa:11:3d:1d:b3:
         ef:0f:ae:48:6f:08:b7:85:c2:a5:77:ef:67:bf:8f:93:a1:52:
         46:cb:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:11:59 2026 by rpki-client