Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3430303a3a2f33382d3338203d3e20323637353131.roa
File:                     323830343a343239383a3430303a3a2f33382d3338203d3e20323637353131.roa (raw, json)
Hash identifier:          u9H9IBIlaepWYriEwUdioDiSsTc3axzK2CBRpfequpA=
Subject key identifier:   06:36:C8:6F:25:39:49:19:08:87:F7:1F:EA:ED:D8:4D:27:C7:C6:2D
Certificate issuer:       /CN=C59EF657C4F6D55F03B8712C21A3CA1E704BAA06
Certificate serial:       3ECB22B8DC11DD7B562AB2081A46DEC27E0B6E2E
Authority key identifier: C5:9E:F6:57:C4:F6:D5:5F:03:B8:71:2C:21:A3:CA:1E:70:4B:AA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3430303a3a2f33382d3338203d3e20323637353131.roa
Signing time:             Tue 18 Aug 2026 20:40:41 +0000
ROA not before:           Tue 18 Aug 2026 20:35:41 +0000
ROA not after:            Tue 17 Aug 2027 20:40:41 +0000
asID:                     267511
IP address blocks:        2804:4298:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.crl
                          rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 02:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cb:22:b8:dc:11:dd:7b:56:2a:b2:08:1a:46:de:c2:7e:0b:6e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C59EF657C4F6D55F03B8712C21A3CA1E704BAA06
        Validity
            Not Before: Aug 18 20:35:41 2026 GMT
            Not After : Aug 17 20:40:41 2027 GMT
        Subject: CN=0636C86F253949190887F71FEAEDD84D27C7C62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:79:20:09:e7:31:ed:4e:8e:9e:c4:1e:d4:
                    8b:79:ba:9f:10:52:95:1f:39:61:d7:6c:5e:b8:42:
                    c5:36:95:63:f7:a9:54:90:5b:3a:59:4f:dc:77:f9:
                    d0:99:0b:60:62:19:f1:cf:c3:53:df:c0:b7:f5:b1:
                    10:9b:e8:2d:34:16:67:de:a5:ee:58:63:06:89:99:
                    8c:9b:5d:f7:0c:e9:01:16:bb:2a:71:25:e7:12:d1:
                    7b:49:b9:11:21:42:cd:32:95:57:db:db:e9:b6:cd:
                    61:4c:08:e7:52:3e:91:23:76:65:37:33:52:a9:92:
                    22:72:f3:49:2c:f2:22:29:7d:c1:74:d0:3a:f0:69:
                    6e:d4:d4:a1:7e:4b:38:5b:20:5e:2f:47:b2:d6:c5:
                    81:19:1e:1c:0f:f3:ae:e4:69:80:b6:3a:bd:99:fc:
                    38:9a:21:76:4a:bc:d8:6a:45:11:56:f3:c6:f7:61:
                    b3:ec:48:00:66:55:24:0f:74:12:de:ef:d3:7d:5e:
                    ae:39:2d:af:24:51:ff:2a:25:a9:86:36:d2:f1:fb:
                    58:0d:ef:72:51:9e:2d:33:cb:71:09:87:4c:bd:3d:
                    6a:f2:48:fc:fa:8f:d7:9d:ac:46:55:8a:fd:96:42:
                    fa:25:96:bd:c8:03:29:31:14:33:7b:5a:39:d5:05:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:36:C8:6F:25:39:49:19:08:87:F7:1F:EA:ED:D8:4D:27:C7:C6:2D
            X509v3 Authority Key Identifier:
                keyid:C5:9E:F6:57:C4:F6:D5:5F:03:B8:71:2C:21:A3:CA:1E:70:4B:AA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/323830343a343239383a3430303a3a2f33382d3338203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4298:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         5d:5d:4e:e6:f0:7a:8d:4b:a6:46:9e:fa:99:85:9b:b6:85:2a:
         72:60:64:67:6a:4a:9f:5a:63:e2:63:43:c5:5d:4d:4b:b7:36:
         18:4e:09:7d:c2:48:a6:92:c0:3d:f5:ae:aa:05:5b:af:25:b5:
         10:94:55:a5:ec:95:11:29:b2:55:78:13:b0:10:55:f9:1a:db:
         c1:d9:44:28:9c:f7:81:59:9a:c6:af:2f:71:00:c8:ff:d2:07:
         68:88:9e:00:ee:46:f4:8e:29:81:87:c5:fe:5d:c4:89:aa:16:
         92:9e:23:25:77:91:e4:55:d0:ed:3e:98:93:94:84:27:db:19:
         e8:b1:25:4d:6c:39:84:28:ee:66:cd:d0:48:32:8a:62:ae:1a:
         b2:f3:f1:d1:b7:72:83:82:bd:26:1d:30:1d:54:e1:f0:af:14:
         60:af:2c:9f:cd:10:e5:7a:74:81:c9:5c:cd:44:ec:17:00:8e:
         81:b0:ca:86:a7:f8:12:e3:75:ea:c9:6c:71:41:f8:d8:3e:6d:
         9c:87:7d:d2:1f:21:83:88:df:54:a0:53:76:17:4a:f8:63:43:
         92:08:78:03:e1:30:97:ea:fa:5d:eb:80:a6:d6:06:9c:5d:84:
         21:be:a5:9a:0d:88:9d:40:bf:b6:af:5a:d1:f9:72:cf:72:44:
         0e:00:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:39:19 2026 by rpki-client