Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a3a2f33322d3332203d3e20323638373838.roa
File:                     323830343a356161633a3a2f33322d3332203d3e20323638373838.roa (raw, json)
Hash identifier:          iOwl9Z9pQEFaFOCavd6gH6JZLgpaT4HQXn2CLIA2c+A=
Subject key identifier:   8E:AF:9B:74:18:24:0C:A5:EB:86:BD:D5:A1:68:38:53:44:E4:3F:E0
Certificate issuer:       /CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
Certificate serial:       344687A1E7A28E93F53AAE26D845DBA37E2B18CF
Authority key identifier: 6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a3a2f33322d3332203d3e20323638373838.roa
Signing time:             Thu 13 Aug 2026 19:45:43 +0000
ROA not before:           Thu 13 Aug 2026 19:40:43 +0000
ROA not after:            Thu 12 Aug 2027 19:45:43 +0000
asID:                     268788
IP address blocks:        2804:5aac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl
                          rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 11:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:46:87:a1:e7:a2:8e:93:f5:3a:ae:26:d8:45:db:a3:7e:2b:18:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
        Validity
            Not Before: Aug 13 19:40:43 2026 GMT
            Not After : Aug 12 19:45:43 2027 GMT
        Subject: CN=8EAF9B7418240CA5EB86BDD5A168385344E43FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:4e:c6:9b:ce:46:3c:e7:6b:6e:4e:c7:76:
                    6c:b4:28:b5:b1:bd:00:fa:91:be:60:5c:bf:28:40:
                    01:0b:24:6e:93:d7:bf:03:99:ad:7e:80:2b:68:6d:
                    bf:85:43:31:3e:05:c6:c7:b3:1d:65:aa:9e:92:9d:
                    3b:a1:c9:90:34:5d:06:c8:bb:45:87:03:1e:0d:be:
                    45:70:69:2e:fa:97:94:eb:6a:b0:f3:31:e3:39:c8:
                    bb:39:f8:7d:60:65:6f:6f:3b:ee:dd:78:e2:56:c3:
                    58:80:4b:e4:ff:dc:82:4f:b1:bc:92:5d:da:fe:94:
                    0c:27:59:d2:4e:5e:f6:69:d3:e7:7b:0d:34:a5:6a:
                    1e:5f:e1:47:d6:1f:89:ae:9b:f9:27:09:8f:67:57:
                    1c:09:93:de:89:cc:72:56:0a:9d:c5:d6:23:ed:18:
                    ab:fd:72:d3:80:c8:37:27:f5:1e:d2:83:75:03:71:
                    f9:3a:cf:ca:0c:5c:6c:95:cf:74:d0:79:82:bd:f3:
                    1a:f4:87:ec:2f:40:dd:f3:81:24:55:4a:a2:a8:a8:
                    e4:3c:19:d9:a6:8e:cc:0d:7e:97:14:36:1a:32:75:
                    17:95:4a:87:30:39:1d:49:e9:f6:b0:87:7f:c8:f0:
                    35:07:29:25:36:36:bf:2c:42:86:22:7f:49:2d:a2:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AF:9B:74:18:24:0C:A5:EB:86:BD:D5:A1:68:38:53:44:E4:3F:E0
            X509v3 Authority Key Identifier:
                keyid:6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a3a2f33322d3332203d3e20323638373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aac::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:4b:14:a9:6e:81:19:7b:91:5d:58:35:b9:de:e7:4e:a1:2b:
         73:c5:23:11:7d:9c:49:f7:04:bc:b3:a9:82:f9:ae:a4:90:d5:
         9a:f5:fe:37:4a:70:da:b9:9a:50:04:c3:84:e0:38:34:25:94:
         4a:f8:23:0c:b6:9e:e6:a0:17:ad:b3:cc:41:0b:36:5e:8f:7f:
         8f:1b:e5:fe:bf:58:7d:c0:b3:cb:fc:8e:4b:08:b4:39:d0:30:
         c5:74:9e:aa:77:81:5a:bc:99:f8:3b:8d:41:00:72:df:bc:6e:
         a8:04:30:30:34:e5:14:dd:c9:1b:21:29:d3:fc:ea:b7:1b:56:
         78:24:2b:b9:6d:83:39:f2:62:3c:e5:86:e5:d9:6b:0f:a0:dc:
         72:f9:1c:58:8b:35:f0:91:8c:f8:bb:0a:2e:d9:d2:1d:f7:77:
         95:55:7f:93:e2:1d:62:de:1d:99:49:d9:0b:e1:1f:e3:7e:c6:
         92:b6:6e:d6:7a:65:b9:8b:18:a4:8b:ba:46:90:2c:6c:0e:b4:
         e3:2b:27:67:9c:1e:47:e8:c4:4a:74:72:ee:76:f6:40:86:2a:
         62:3b:77:29:d3:24:98:f3:89:d4:ab:24:32:d4:34:c0:c6:e9:
         ed:a6:94:e6:d1:dd:16:f9:4a:01:28:14:70:aa:91:28:f6:b8:
         9a:83:23:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 01:06:53 2026 by rpki-client