Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/323830343a386162303a383030303a3a2f33332d3333203d3e20323733363836.roa
File:                     323830343a386162303a383030303a3a2f33332d3333203d3e20323733363836.roa (raw, json)
Hash identifier:          HxjE9ueu9eP//H0f0wOuH25qxyCkcLoAKDmMnceIEQw=
Subject key identifier:   AE:D3:F9:23:9D:DD:5D:5E:B7:5A:CA:C7:A6:F0:21:E0:03:81:77:9C
Certificate issuer:       /CN=05F33EC42A1325AEA4545EBE036B58237A45A15D
Certificate serial:       154C243A788F268040E57D31054362F87F2B9D80
Authority key identifier: 05:F3:3E:C4:2A:13:25:AE:A4:54:5E:BE:03:6B:58:23:7A:45:A1:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F33EC42A1325AEA4545EBE036B58237A45A15D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/323830343a386162303a383030303a3a2f33332d3333203d3e20323733363836.roa
Signing time:             Fri 02 Oct 2026 18:27:40 +0000
ROA not before:           Fri 02 Oct 2026 18:22:40 +0000
ROA not after:            Fri 01 Oct 2027 18:27:40 +0000
asID:                     273686
IP address blocks:        2804:8ab0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/05F33EC42A1325AEA4545EBE036B58237A45A15D.crl
                          rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/05F33EC42A1325AEA4545EBE036B58237A45A15D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F33EC42A1325AEA4545EBE036B58237A45A15D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4c:24:3a:78:8f:26:80:40:e5:7d:31:05:43:62:f8:7f:2b:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F33EC42A1325AEA4545EBE036B58237A45A15D
        Validity
            Not Before: Oct  2 18:22:40 2026 GMT
            Not After : Oct  1 18:27:40 2027 GMT
        Subject: CN=AED3F9239DDD5D5EB75ACAC7A6F021E00381779C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ab:31:17:a0:99:b1:f0:12:31:30:59:fb:c2:
                    2f:31:52:ac:e8:5d:b7:34:13:8c:0a:04:7e:47:dc:
                    1f:b1:7d:30:ec:f6:03:7c:45:89:73:89:70:91:c6:
                    62:66:3b:02:db:b1:38:e0:34:5f:5f:50:ef:a7:27:
                    a3:2c:26:f0:f8:2d:f9:9a:fa:d8:01:2e:5e:6b:6d:
                    09:18:4a:9e:54:80:d9:73:f5:5f:67:6a:86:b3:cd:
                    77:63:ea:b2:42:47:05:30:52:de:69:cf:c6:d7:43:
                    79:c5:5e:41:49:e1:6c:d1:db:07:29:8f:ea:a4:68:
                    fe:84:aa:51:b4:fd:ad:74:c5:96:e8:12:98:98:a0:
                    6a:5d:37:8c:0b:a8:45:6f:8e:6b:f7:63:a1:1a:a2:
                    59:67:f5:34:5c:cb:a1:fb:57:bd:b7:56:f6:46:3c:
                    3e:41:73:31:3c:8e:a2:77:4d:87:59:32:87:b8:0b:
                    b5:ff:7e:e8:aa:ea:e0:b7:f6:16:ba:c4:d6:3c:76:
                    ad:c3:81:8e:37:34:c0:36:4e:70:76:e9:4d:dd:66:
                    25:8a:36:e9:85:6c:74:9f:69:29:b0:81:19:16:e2:
                    2b:46:ef:fd:c6:c8:38:82:6c:66:01:be:07:a2:30:
                    90:cf:83:44:9e:40:2d:1b:04:e3:78:04:f0:f1:f7:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D3:F9:23:9D:DD:5D:5E:B7:5A:CA:C7:A6:F0:21:E0:03:81:77:9C
            X509v3 Authority Key Identifier:
                keyid:05:F3:3E:C4:2A:13:25:AE:A4:54:5E:BE:03:6B:58:23:7A:45:A1:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/05F33EC42A1325AEA4545EBE036B58237A45A15D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F33EC42A1325AEA4545EBE036B58237A45A15D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oUwn16DCzCFrNFNfBJn5Pg9BF5A9LpAiQt2CruZkTo6/0/323830343a386162303a383030303a3a2f33332d3333203d3e20323733363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ab0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:1e:93:ec:d9:83:30:ee:3e:d4:d3:30:9b:18:d0:f7:fe:
         54:bb:cb:91:3c:f6:77:cd:14:d4:8d:af:1a:a5:8c:f8:3d:91:
         23:98:f6:d2:52:65:0c:6e:58:8d:2c:3d:08:cd:6b:7a:79:78:
         13:f6:7a:9b:75:3a:3b:c0:14:47:82:dd:d7:9f:ec:f0:ea:78:
         06:75:d2:4b:65:39:f7:fe:cd:91:41:9e:5d:f1:0f:1a:bc:47:
         90:bf:ad:e0:6b:92:a5:d4:58:a1:7a:1c:24:3b:83:dd:9f:02:
         4f:af:02:df:bf:e0:53:29:22:ca:1d:2f:6b:f5:00:4f:ef:fc:
         21:7e:ea:eb:b2:fe:4b:29:77:2c:b3:92:6c:72:d2:31:56:ad:
         b3:76:8b:fb:41:39:0c:7e:37:12:db:23:73:0a:17:e2:10:90:
         cd:b1:4d:85:53:e8:0d:a1:df:45:dc:db:9f:b0:cb:a1:20:30:
         af:43:97:c2:67:46:20:e8:df:28:d0:b3:38:64:bb:d1:f5:91:
         cd:4f:56:77:26:c8:b7:84:a2:45:6a:de:37:c6:8f:88:db:84:
         e5:f5:00:cd:45:0a:d4:95:4b:db:a1:eb:25:bb:48:80:92:55:
         35:5e:8c:ed:ae:76:54:c6:d7:84:7f:20:e7:96:b1:8c:3a:99:
         84:c1:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:06:59 2026 by rpki-client