Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/323830343a336236343a3a2f33322d3438203d3e20323636313436.roa
File:                     323830343a336236343a3a2f33322d3438203d3e20323636313436.roa (raw, json)
Hash identifier:          AZzVofdyN2rR933IO/r+4WpPL6VzkcutriblV4PRJtg=
Subject key identifier:   6A:35:3D:FB:65:1E:D7:B6:82:7F:5E:35:32:CC:2D:C6:24:E5:5F:20
Certificate issuer:       /CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
Certificate serial:       1432F694EEDCC54936015BBBD08CDD0248F3188A
Authority key identifier: 05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/323830343a336236343a3a2f33322d3438203d3e20323636313436.roa
Signing time:             Thu 10 Sep 2026 16:52:33 +0000
ROA not before:           Thu 10 Sep 2026 16:47:33 +0000
ROA not after:            Thu 09 Sep 2027 16:52:33 +0000
asID:                     266146
IP address blocks:        2804:3b64::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl
                          rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 19:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:32:f6:94:ee:dc:c5:49:36:01:5b:bb:d0:8c:dd:02:48:f3:18:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
        Validity
            Not Before: Sep 10 16:47:33 2026 GMT
            Not After : Sep  9 16:52:33 2027 GMT
        Subject: CN=6A353DFB651ED7B6827F5E3532CC2DC624E55F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:9c:a8:5e:2f:31:e6:09:8e:e5:c1:1b:69:
                    a4:05:45:c1:cb:16:27:ff:e8:93:22:f2:f9:dd:3c:
                    4d:ed:2c:e1:2f:58:28:50:03:de:dd:e5:3d:65:45:
                    7d:4d:21:90:c4:a3:ef:78:22:e1:1c:ed:cd:e5:e2:
                    da:8a:58:86:20:09:ee:e2:de:23:52:a8:45:8e:dc:
                    7f:8d:e8:b6:f9:78:8b:4d:32:04:11:f7:b5:a4:57:
                    03:97:21:98:c9:23:7d:6a:03:0d:05:93:d6:df:b4:
                    c8:c6:ed:3c:03:25:f9:ce:9a:40:d6:80:4a:a4:7a:
                    49:5c:d6:ae:01:99:f5:87:04:4f:0c:d5:12:7f:b3:
                    e3:61:dd:4f:2e:d5:a0:db:bc:97:f1:2b:a1:be:d0:
                    2f:1f:36:d6:18:93:b5:38:d5:a2:80:c9:17:6a:82:
                    81:aa:03:71:6a:7f:fe:15:7a:99:63:2c:c4:c0:ea:
                    aa:ca:7b:3c:cb:2b:b7:1f:a0:44:24:bd:da:70:dd:
                    08:42:81:72:8e:61:f4:79:82:ee:c5:65:cc:15:1a:
                    74:36:af:c8:06:f1:63:e6:2a:25:2e:67:4e:b5:14:
                    fb:24:33:fd:f8:2d:f7:c7:f0:00:86:e9:df:4c:a1:
                    22:85:af:e3:3e:c9:dc:66:7d:4d:07:b9:82:ae:ff:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:35:3D:FB:65:1E:D7:B6:82:7F:5E:35:32:CC:2D:C6:24:E5:5F:20
            X509v3 Authority Key Identifier:
                keyid:05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/323830343a336236343a3a2f33322d3438203d3e20323636313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b64::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:71:39:87:47:a8:57:2c:cc:67:bb:10:4d:1e:a0:20:a7:0f:
         b1:2e:5e:05:43:b3:95:6c:c2:cc:67:78:13:1c:04:a7:e7:1e:
         23:24:85:0d:19:9c:01:37:b8:da:95:e8:5a:bb:0d:03:a8:23:
         2f:29:4f:62:5d:88:4c:c3:c9:2e:1d:8a:ab:1e:82:50:48:b0:
         6e:e1:35:5c:ec:3c:45:82:16:07:87:dd:c0:74:4b:fb:10:80:
         7f:4d:d9:d1:23:69:20:69:6f:1b:7a:16:43:3f:01:2a:a8:ad:
         c4:70:8c:65:c8:36:9d:f0:73:56:2a:6b:1a:c9:f0:7d:55:29:
         a2:df:34:fa:4e:af:b5:ff:c6:92:b9:3f:70:fb:68:68:a2:b1:
         26:6e:5e:21:9e:e4:c8:78:4a:df:37:e7:c8:44:9c:7d:0e:55:
         5e:d7:4f:df:a4:22:e2:d6:a7:a6:b3:2b:5b:2d:39:d3:26:6d:
         64:e3:c2:ea:4e:1d:3b:cc:ec:be:79:d7:b7:c1:e2:04:48:56:
         d4:eb:10:06:16:7d:5e:9b:44:91:92:4d:55:76:50:39:9b:a5:
         3c:70:8f:d1:38:65:e1:27:ab:bc:3a:f2:3e:dc:a2:41:f7:28:
         56:e7:62:b5:b0:9e:a9:9c:a8:11:41:4c:4f:c7:9b:17:58:73:
         84:3a:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:47:59 2026 by rpki-client