Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d3332203d3e20323638393133.roa
File:                     323830343a356338343a3a2f33322d3332203d3e20323638393133.roa (raw, json)
Hash identifier:          eKrGNWsCD/c3kUhfJzqDc7x6bfn8TA2tLy7cazUOFnQ=
Subject key identifier:   B9:B5:13:37:26:71:F6:45:B1:6F:E4:5B:FD:AD:25:35:27:25:0F:FF
Certificate issuer:       /CN=B19FD45FA4CE21F4495DFE5635CA3CB137A888B8
Certificate serial:       1553DE27DAFD42E807844D7B04376A8473529350
Authority key identifier: B1:9F:D4:5F:A4:CE:21:F4:49:5D:FE:56:35:CA:3C:B1:37:A8:88:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B19FD45FA4CE21F4495DFE5635CA3CB137A888B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d3332203d3e20323638393133.roa
Signing time:             Thu 24 Sep 2026 11:10:25 +0000
ROA not before:           Thu 24 Sep 2026 11:05:25 +0000
ROA not after:            Thu 23 Sep 2027 11:10:25 +0000
asID:                     268913
IP address blocks:        2804:5c84::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/B19FD45FA4CE21F4495DFE5635CA3CB137A888B8.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/B19FD45FA4CE21F4495DFE5635CA3CB137A888B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B19FD45FA4CE21F4495DFE5635CA3CB137A888B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:53:de:27:da:fd:42:e8:07:84:4d:7b:04:37:6a:84:73:52:93:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19FD45FA4CE21F4495DFE5635CA3CB137A888B8
        Validity
            Not Before: Sep 24 11:05:25 2026 GMT
            Not After : Sep 23 11:10:25 2027 GMT
        Subject: CN=B9B513372671F645B16FE45BFDAD253527250FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:b6:a8:b4:23:3b:be:e5:96:bb:fc:64:e9:
                    a1:2e:ba:64:47:96:5a:9e:83:19:e9:01:6e:e9:69:
                    3f:dc:0b:dd:44:c6:6e:20:17:42:91:41:b7:42:37:
                    68:79:ef:88:8a:f1:6f:4f:69:47:7a:53:9a:40:a2:
                    2d:72:75:ff:d8:80:18:4d:55:21:a2:94:a3:31:a1:
                    3f:cb:4e:63:95:69:65:e0:62:d3:ef:54:92:f4:07:
                    61:c8:4a:93:8d:97:06:0d:1a:97:e1:75:34:1a:94:
                    5e:df:19:53:9c:ef:c4:52:2f:8f:ee:3d:d8:d0:03:
                    d6:ee:2e:f3:54:f6:89:da:5b:44:f2:90:c6:78:d2:
                    11:49:b1:68:c6:91:b7:44:a5:5b:84:0c:20:de:a5:
                    d1:fd:60:76:67:f3:c5:00:9d:ed:5d:45:0b:59:02:
                    79:67:ed:62:df:92:21:b1:a8:7e:5f:6d:2a:c5:09:
                    08:16:7a:ea:bf:2f:16:cf:e6:3b:0d:ac:4a:0c:65:
                    e5:68:52:0e:a9:8b:7b:ec:bd:fe:a4:a3:ab:57:7b:
                    0f:ed:10:15:7d:bd:52:b9:8e:69:ca:0f:f3:25:3f:
                    49:31:ce:86:e0:aa:c5:50:53:13:bc:c8:53:36:2b:
                    87:c5:3f:2c:8a:a3:f7:bf:99:e9:b3:b6:32:37:ac:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B5:13:37:26:71:F6:45:B1:6F:E4:5B:FD:AD:25:35:27:25:0F:FF
            X509v3 Authority Key Identifier:
                keyid:B1:9F:D4:5F:A4:CE:21:F4:49:5D:FE:56:35:CA:3C:B1:37:A8:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/B19FD45FA4CE21F4495DFE5635CA3CB137A888B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B19FD45FA4CE21F4495DFE5635CA3CB137A888B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d3332203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:07:92:1b:c7:62:2f:39:f9:9a:a2:fb:a9:7b:dd:f5:74:
         ef:09:40:40:5d:35:9d:27:ce:8a:e7:22:63:5b:f9:e5:3c:1d:
         93:2e:4b:3d:a8:dd:af:0e:b4:ae:70:3d:c1:b2:3f:af:4b:6e:
         fe:7b:bf:09:2e:25:de:d7:bc:67:1c:95:e1:96:b9:92:b2:f1:
         7d:09:c9:6a:f8:a0:97:f3:5d:bb:d3:18:fe:d6:58:f4:f4:28:
         d8:69:c0:b6:58:25:bb:2b:c3:b6:21:8d:7c:a4:d0:bd:0e:03:
         21:0f:3f:0d:29:f6:1d:9a:61:b2:8e:d7:2f:51:73:b0:60:db:
         b6:6d:59:5f:70:84:fd:c1:a4:20:c1:dd:e7:d3:5d:58:0e:16:
         6d:ea:4e:c3:a5:ae:63:3a:62:ce:3c:81:0c:af:27:3b:27:f5:
         f0:ba:dd:c5:e9:4e:fa:b0:ca:58:3c:62:e2:d8:a3:c4:30:8f:
         34:9e:59:1d:9a:4f:d8:b4:02:c4:70:8d:93:a5:2e:ed:ab:dc:
         04:c3:55:75:30:2c:2f:a0:43:ce:65:05:cd:52:5d:64:2f:bc:
         83:7f:c6:eb:76:e6:90:1b:df:a7:bc:d1:f1:29:35:3e:a7:e5:
         79:73:a6:5b:ae:f7:7d:1b:2e:87:78:b1:e0:9e:66:ea:63:0d:
         46:bc:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:49:56 2026 by rpki-client