Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/323830343a373830343a3a2f33322d3438203d3e20323731323135.roa
File:                     323830343a373830343a3a2f33322d3438203d3e20323731323135.roa (raw, json)
Hash identifier:          fsWzVgZUvFbm5xDQpWd77MlhvipiQA+9nyVaKtFVyr0=
Subject key identifier:   17:E6:BD:1A:62:66:2E:2A:34:74:28:07:DF:78:81:79:6D:34:5D:AA
Certificate issuer:       /CN=70283050DD72A7A70DA44A0C786C2D36C246420E
Certificate serial:       6164EE03A1F20390631D37983E50BDED9A8158C1
Authority key identifier: 70:28:30:50:DD:72:A7:A7:0D:A4:4A:0C:78:6C:2D:36:C2:46:42:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/323830343a373830343a3a2f33322d3438203d3e20323731323135.roa
Signing time:             Mon 05 Oct 2026 01:28:41 +0000
ROA not before:           Mon 05 Oct 2026 01:23:41 +0000
ROA not after:            Mon 04 Oct 2027 01:28:41 +0000
asID:                     271215
IP address blocks:        2804:7804::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.crl
                          rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 23:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:64:ee:03:a1:f2:03:90:63:1d:37:98:3e:50:bd:ed:9a:81:58:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70283050DD72A7A70DA44A0C786C2D36C246420E
        Validity
            Not Before: Oct  5 01:23:41 2026 GMT
            Not After : Oct  4 01:28:41 2027 GMT
        Subject: CN=17E6BD1A62662E2A34742807DF7881796D345DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:7f:c2:cb:11:95:c4:88:52:d8:6b:51:3f:
                    1e:8e:87:33:02:1d:8e:2e:4d:2a:75:1f:16:c9:c2:
                    63:a7:72:03:8d:f2:64:3c:1b:86:e8:4b:2f:eb:6b:
                    ef:59:e6:24:07:e1:05:72:fb:0c:00:74:58:20:10:
                    ea:37:60:ed:fe:a6:7f:99:4e:7a:e3:91:97:b0:1e:
                    14:d3:87:04:c5:84:3c:05:47:8e:3c:bc:62:3f:f7:
                    2c:ed:0b:b8:f6:65:7f:08:a2:ac:e3:da:f3:60:ff:
                    c4:3a:dc:87:0c:7a:77:ae:1b:af:5c:e6:44:2b:af:
                    ad:16:05:c2:69:f2:38:4c:e8:db:31:75:1c:ca:7c:
                    e9:30:71:1b:45:ef:40:9b:b6:db:d4:8e:8a:00:88:
                    22:c1:b8:4c:cf:b4:9f:0e:9d:3d:7d:82:ff:79:29:
                    fd:73:10:0c:ad:22:54:8a:41:81:66:8b:cd:bd:1b:
                    9d:22:09:dd:4c:23:0a:6f:15:a2:59:25:49:51:82:
                    3b:3c:89:1f:86:bf:f9:f0:a7:d5:c9:6b:f6:7b:97:
                    41:5e:47:b8:d7:ef:b7:40:b6:9f:33:e1:1e:de:85:
                    78:b1:0b:86:8d:5d:13:c0:85:e3:2b:73:f2:05:ef:
                    8f:8a:51:e5:cb:ff:0c:84:34:17:3e:93:b0:ec:35:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E6:BD:1A:62:66:2E:2A:34:74:28:07:DF:78:81:79:6D:34:5D:AA
            X509v3 Authority Key Identifier:
                keyid:70:28:30:50:DD:72:A7:A7:0D:A4:4A:0C:78:6C:2D:36:C2:46:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/70283050DD72A7A70DA44A0C786C2D36C246420E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70283050DD72A7A70DA44A0C786C2D36C246420E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DX4HLaF1Ds4p3j2vSHk7283JZzP8RR7uuM6GzBSjpGg/0/323830343a373830343a3a2f33322d3438203d3e20323731323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7804::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:24:c5:f5:2f:94:73:ae:32:a9:af:48:76:0c:58:67:55:
         4a:b7:b0:19:6e:a3:c5:35:f0:b3:50:1b:66:61:7f:9b:e0:96:
         a8:f2:3e:2b:3a:db:c8:a9:36:f1:3c:31:1f:ba:59:97:01:ad:
         21:f6:83:15:4b:66:41:cc:57:9f:79:95:c8:23:65:b4:37:4f:
         c1:33:0d:e0:a2:7d:23:94:ab:af:83:27:40:67:4b:20:f2:f4:
         95:cb:ef:9d:c5:f6:ec:24:4d:c0:cf:87:e2:41:f6:88:1d:90:
         24:37:0a:c6:c1:96:04:4d:8f:a9:df:fd:a4:a8:f6:09:10:26:
         5e:d6:58:25:80:d4:12:8a:f6:41:e2:9b:60:23:43:38:d5:43:
         ed:52:89:78:cd:a8:8c:c7:4a:0e:b6:37:d4:eb:54:6c:73:b8:
         83:c4:a0:f8:6a:e3:df:de:6f:a6:fa:cf:cc:6b:f7:da:d3:d6:
         07:03:c6:1e:79:d2:d4:78:9d:54:6e:74:81:9c:0b:f5:fc:ef:
         60:90:a7:93:05:b2:97:5a:a0:fc:f8:b5:e1:4b:e4:96:c4:d2:
         29:ee:28:87:48:ed:33:3d:43:9c:dc:91:db:1f:7d:e2:95:5a:
         db:2b:9c:6f:0c:b9:47:04:23:95:41:39:ab:85:7b:d9:df:66:
         c8:d3:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:26:20 2026 by rpki-client