Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/323830343a356439303a3a2f33322d3438203d3e203133373836.roa
File:                     323830343a356439303a3a2f33322d3438203d3e203133373836.roa (raw, json)
Hash identifier:          cfO4mGKaC6AUSn0Jtut75wEm61xoSS98CPjxXgBStxA=
Subject key identifier:   25:FE:7C:1A:C0:0F:85:DF:51:7B:AA:9E:50:DA:74:47:80:92:6C:25
Certificate issuer:       /CN=FD9B1F96040398EB4A95F392D33F09CA8B1135A8
Certificate serial:       0B05BE5C187AE8AD68EB666C09B0186F46B94427
Authority key identifier: FD:9B:1F:96:04:03:98:EB:4A:95:F3:92:D3:3F:09:CA:8B:11:35:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/323830343a356439303a3a2f33322d3438203d3e203133373836.roa
Signing time:             Fri 02 Oct 2026 03:30:54 +0000
ROA not before:           Fri 02 Oct 2026 03:25:54 +0000
ROA not after:            Fri 01 Oct 2027 03:30:54 +0000
asID:                     13786
IP address blocks:        2804:5d90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.crl
                          rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 14:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:05:be:5c:18:7a:e8:ad:68:eb:66:6c:09:b0:18:6f:46:b9:44:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD9B1F96040398EB4A95F392D33F09CA8B1135A8
        Validity
            Not Before: Oct  2 03:25:54 2026 GMT
            Not After : Oct  1 03:30:54 2027 GMT
        Subject: CN=25FE7C1AC00F85DF517BAA9E50DA744780926C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fe:36:d6:fe:74:9b:40:17:58:6e:d3:0f:d2:
                    67:33:8b:5d:ae:5e:f5:4a:7e:5e:65:08:2d:58:9f:
                    0b:b7:b5:0f:ec:5c:94:2a:35:c7:fb:f6:ba:24:fe:
                    e6:4b:3f:09:a3:c1:09:32:c4:89:56:fd:08:20:f1:
                    34:9c:23:7e:1d:fd:ec:61:f6:7c:3e:3b:15:ab:6d:
                    c1:c4:6b:9b:79:c7:c2:9e:d7:cb:5a:b3:35:fd:98:
                    8d:83:89:70:08:34:96:87:21:59:90:7f:7a:a9:8b:
                    30:0b:4a:4e:39:24:2e:e2:23:51:c8:2c:d9:bb:6f:
                    6c:53:88:b5:63:d1:8d:93:fa:06:8d:56:60:23:3e:
                    1d:98:ad:76:b8:29:53:39:a3:64:bf:fd:c1:6d:fd:
                    c5:1f:cf:af:1a:6a:74:02:73:01:3f:10:e9:99:5d:
                    51:6e:21:d7:36:da:ea:4b:8e:94:3e:27:51:13:7a:
                    0e:58:c8:fd:f6:a1:49:b0:e4:c2:a1:87:c6:20:81:
                    3a:0d:29:ec:7a:55:fb:dc:d1:e7:9e:8b:8d:40:1d:
                    eb:8c:96:39:af:ef:a5:c9:88:e3:7d:73:8e:8c:1f:
                    18:89:5f:38:7c:b5:1a:9c:04:2c:90:e3:c8:48:9c:
                    81:39:7b:d9:f0:2f:39:64:70:36:ff:95:34:33:82:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FE:7C:1A:C0:0F:85:DF:51:7B:AA:9E:50:DA:74:47:80:92:6C:25
            X509v3 Authority Key Identifier:
                keyid:FD:9B:1F:96:04:03:98:EB:4A:95:F3:92:D3:3F:09:CA:8B:11:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/323830343a356439303a3a2f33322d3438203d3e203133373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:a7:62:25:86:b4:37:1f:21:28:95:0d:9e:df:22:41:07:77:
         eb:ee:d5:d7:f7:14:66:81:a5:b3:1e:9f:80:57:d3:51:af:28:
         be:56:10:16:35:38:5f:37:35:bd:a1:3c:97:50:e8:5c:1c:82:
         b0:5a:d2:ec:0e:60:0b:aa:88:ae:98:2c:e7:81:c6:34:56:b1:
         11:17:dc:e7:29:1b:7e:61:35:47:51:cd:d2:7a:31:7f:a7:d1:
         52:8d:14:a4:eb:fc:53:d9:95:56:a5:1a:9e:8d:f7:de:c1:c5:
         9e:4a:19:76:7d:68:a6:42:e3:78:da:52:9c:30:10:7c:1c:d7:
         9c:cb:17:66:cb:04:73:b1:8d:e5:a2:af:28:6d:a7:dd:4f:ee:
         e3:24:0c:d3:f0:fb:ad:2c:05:2e:9a:80:49:7c:3f:94:9d:a2:
         91:4d:18:40:0a:97:92:a5:b4:99:b9:e9:5c:bc:ec:57:46:08:
         d9:07:47:49:46:11:76:a9:1d:56:28:f6:12:0b:9c:d8:3f:c7:
         da:ab:bc:76:e1:23:eb:18:10:c8:94:03:2a:b0:55:95:b0:5e:
         8a:06:2e:70:c4:02:e6:57:68:de:bd:fd:58:fc:83:5c:a0:6f:
         e1:e2:f6:99:eb:95:53:95:24:ce:ed:2b:66:35:69:75:62:22:
         2b:68:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:38:56 2026 by rpki-client