Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a343730303a3a2f34302d3430203d3e20323633343738.roa
File:                     323830343a313237383a343730303a3a2f34302d3430203d3e20323633343738.roa (raw, json)
Hash identifier:          zzkitu4Qd9pXProzV8syzBI3r6EjXUrp32b673ZzH6c=
Subject key identifier:   A1:7A:DD:BC:D3:DB:71:67:1B:14:CB:9B:E4:EC:66:B9:B5:04:1A:B9
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       10A7102E9A4B679692FF688E5D1AEA0B45488E18
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a343730303a3a2f34302d3430203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:46 +0000
ROA not before:           Fri 14 Aug 2026 18:46:46 +0000
ROA not after:            Fri 13 Aug 2027 18:51:46 +0000
asID:                     263478
IP address blocks:        2804:1278:4700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a7:10:2e:9a:4b:67:96:92:ff:68:8e:5d:1a:ea:0b:45:48:8e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:46 2026 GMT
            Not After : Aug 13 18:51:46 2027 GMT
        Subject: CN=A17ADDBCD3DB71671B14CB9BE4EC66B9B5041AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:ba:eb:c0:30:34:4d:82:6e:ba:32:0f:62:
                    ee:a1:15:a4:80:c5:35:46:36:1d:b9:92:ec:8c:05:
                    0b:b1:08:af:39:a5:91:a8:2a:3b:a4:94:eb:be:c6:
                    6a:24:7d:81:be:21:3a:bb:42:0a:64:25:60:ec:7c:
                    aa:e5:3c:f8:02:9c:9f:86:07:af:7f:63:7e:44:f0:
                    96:93:4d:64:b5:84:6d:41:e6:42:86:70:cd:22:d9:
                    f0:4a:c3:e4:2d:8c:be:39:7a:a7:f4:15:bc:c9:8e:
                    d8:b1:75:88:21:25:d4:10:52:08:c2:60:b0:10:ae:
                    bb:3f:d2:75:16:dc:87:4f:d6:e8:0d:63:95:22:2e:
                    92:80:e6:e2:19:84:41:7a:5b:4f:c3:c9:da:ed:98:
                    31:ed:16:b0:ea:da:64:9e:ac:4d:ed:f5:9a:1b:6b:
                    05:8e:25:9d:c1:57:69:ab:fe:ee:aa:1e:77:7d:39:
                    ea:74:d9:20:7c:90:44:70:be:7e:81:fd:ee:a5:18:
                    8f:4b:53:49:6a:99:63:8b:92:b5:97:9f:69:8e:1c:
                    bb:ea:a9:7a:72:54:01:62:91:dc:a4:ec:3b:15:e7:
                    1e:bb:fe:76:bd:b3:01:c0:5e:96:c9:0a:77:d2:8a:
                    43:04:1e:ae:46:35:e7:ee:32:3e:26:b4:86:7c:05:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7A:DD:BC:D3:DB:71:67:1B:14:CB:9B:E4:EC:66:B9:B5:04:1A:B9
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a343730303a3a2f34302d3430203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1278:4700::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:94:08:95:91:b4:89:ff:75:50:1b:fd:78:5d:9d:28:79:be:
         64:24:1a:9b:72:99:ba:e0:fd:86:f5:d5:3d:f7:67:db:c2:dd:
         64:98:c7:2a:eb:34:f6:9e:9f:9f:46:68:b1:fd:8b:61:c3:81:
         13:48:15:53:fb:84:79:af:6e:1d:9c:b2:97:86:0f:c8:a5:c2:
         d6:96:62:6a:63:25:6e:b9:3e:2f:81:58:ce:0d:04:6d:26:91:
         53:25:a9:cf:b5:93:8b:11:b4:1e:43:d6:73:79:8f:d6:fd:65:
         5b:70:97:68:61:9f:f7:35:71:25:42:3e:79:7a:51:e0:85:80:
         63:db:f2:39:a0:8c:1d:cd:7d:79:9f:57:67:c2:e8:38:ca:3b:
         68:2d:0b:45:dd:29:25:78:c1:fa:c3:d3:3c:72:27:c7:22:f5:
         d2:ca:35:6c:d4:ea:89:89:94:4b:e5:73:ae:e7:32:5e:1f:1d:
         9b:20:6c:9f:1f:d4:33:ce:9f:86:62:f6:d0:9d:39:c3:c7:2a:
         07:c7:13:06:f2:07:4e:f7:0d:03:77:72:95:2d:c8:74:4e:d4:
         df:54:b6:f9:03:02:b0:9d:3f:6c:47:a9:e9:34:db:f7:55:3a:
         1a:d8:f8:49:52:8f:bd:d9:49:ae:03:da:63:d7:7b:c8:64:a8:
         08:65:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:03:02 2026 by rpki-client