Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33332d3333203d3e20323731343739.roa
File:                     323830343a376332383a3a2f33332d3333203d3e20323731343739.roa (raw, json)
Hash identifier:          0+ERsiWChkSPfRHpJecox9flYdc3dcjL5jikTuzZjj0=
Subject key identifier:   80:CB:BD:B5:DB:E4:AC:B9:39:07:68:1C:16:FB:70:EF:52:8D:B1:E9
Certificate issuer:       /CN=BB9E790EB12431740DF816FA9CE24E9F802D011E
Certificate serial:       702F33C9DE07143D2FCD71F236B171F6940A501A
Authority key identifier: BB:9E:79:0E:B1:24:31:74:0D:F8:16:FA:9C:E2:4E:9F:80:2D:01:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB9E790EB12431740DF816FA9CE24E9F802D011E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33332d3333203d3e20323731343739.roa
Signing time:             Mon 24 Aug 2026 19:14:11 +0000
ROA not before:           Mon 24 Aug 2026 19:09:11 +0000
ROA not after:            Mon 23 Aug 2027 19:14:11 +0000
asID:                     271479
IP address blocks:        2804:7c28::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/BB9E790EB12431740DF816FA9CE24E9F802D011E.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/BB9E790EB12431740DF816FA9CE24E9F802D011E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB9E790EB12431740DF816FA9CE24E9F802D011E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 14:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2f:33:c9:de:07:14:3d:2f:cd:71:f2:36:b1:71:f6:94:0a:50:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB9E790EB12431740DF816FA9CE24E9F802D011E
        Validity
            Not Before: Aug 24 19:09:11 2026 GMT
            Not After : Aug 23 19:14:11 2027 GMT
        Subject: CN=80CBBDB5DBE4ACB93907681C16FB70EF528DB1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:30:70:a8:cf:f6:1d:01:f4:61:47:44:85:
                    4f:2f:cd:70:bd:cd:56:6a:b3:a6:d9:7c:ad:4d:23:
                    83:e7:ed:be:3a:54:43:8f:bf:87:f9:80:30:b5:5c:
                    11:ed:3f:42:69:bf:c3:d3:d4:b2:aa:da:82:51:a7:
                    4d:54:1d:2c:84:f8:58:a5:51:9f:cb:8d:ce:a5:48:
                    13:83:71:72:d3:0d:1d:16:93:33:72:23:64:eb:45:
                    c9:0e:43:e6:d1:69:57:44:a0:da:48:d2:11:ea:5e:
                    60:6c:2b:30:e7:6d:95:18:79:7a:26:75:34:81:9d:
                    fa:f8:b3:52:b4:aa:88:73:71:d0:8d:e8:70:4c:a2:
                    b7:d6:f0:20:09:23:63:2a:ef:7e:47:83:98:38:e6:
                    d7:fd:8c:e3:b3:b4:f5:4b:4b:1d:22:2b:5f:da:08:
                    9d:ec:c7:53:cc:01:80:90:42:e0:a4:66:c6:e2:4e:
                    e4:7e:c3:df:26:c9:e9:39:25:34:a8:36:8c:43:d9:
                    4f:f3:89:52:85:c5:6f:48:19:94:e3:8a:d4:d0:e0:
                    e3:e2:f1:56:27:a6:0b:83:2a:e1:fe:06:de:ca:fb:
                    29:d3:89:24:7f:54:82:4e:0a:a5:9e:ec:01:b4:37:
                    5d:43:d9:55:e3:fb:d6:2d:fc:9f:76:84:f5:60:74:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:BD:B5:DB:E4:AC:B9:39:07:68:1C:16:FB:70:EF:52:8D:B1:E9
            X509v3 Authority Key Identifier:
                keyid:BB:9E:79:0E:B1:24:31:74:0D:F8:16:FA:9C:E2:4E:9F:80:2D:01:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/BB9E790EB12431740DF816FA9CE24E9F802D011E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB9E790EB12431740DF816FA9CE24E9F802D011E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33332d3333203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c28::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:eb:75:64:a3:96:28:aa:89:ab:d3:9e:9c:a6:65:48:0b:75:
         a2:43:9a:3b:5b:be:0b:06:ab:f1:c7:5e:9a:a7:9e:73:06:2c:
         e8:21:54:21:ee:ae:27:cb:62:08:eb:7b:ce:5d:7e:11:4b:b7:
         95:21:fe:dd:65:6e:a9:4a:7d:e7:91:f2:ad:aa:f7:24:08:5d:
         20:49:4e:65:37:64:49:6a:24:e6:02:73:8b:9e:55:41:3e:8a:
         aa:f7:f5:9c:b8:3b:5d:66:27:34:71:b9:f8:4a:2c:f0:8f:20:
         68:82:67:0c:d4:7e:17:c5:53:c4:7d:41:9b:e5:13:01:09:8b:
         fb:e7:d6:a3:73:69:36:c5:81:a2:ac:df:5b:d7:22:2d:43:55:
         83:6d:5a:b3:88:90:3a:f1:06:41:49:a5:b3:ea:09:6a:48:3b:
         31:49:e2:e3:1a:e3:a8:a3:82:11:f9:a2:cc:b3:80:c8:bb:53:
         f7:f2:9a:96:48:0d:1c:d9:e9:30:7f:a3:0f:8c:1c:3c:66:02:
         1b:47:5d:93:49:b5:c0:26:b9:76:51:d9:63:d1:5a:07:49:1f:
         c0:c9:a9:e6:66:d3:f6:9c:87:6e:31:41:36:c2:ed:f0:42:66:
         2a:88:5a:50:f7:04:13:00:0b:9a:6f:c6:74:eb:38:8f:84:be:
         5e:27:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:08:35 2026 by rpki-client