Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/323830343a353431343a3a2f33322d3332203d3e20323638363237.roa
File:                     323830343a353431343a3a2f33322d3332203d3e20323638363237.roa (raw, json)
Hash identifier:          STqqUnGiBFm6UDKY4KPE/SPywdnrp0ULCQ3TxfluNSs=
Subject key identifier:   EA:70:BE:07:99:8C:98:3B:71:16:27:B6:7A:E7:A7:26:88:05:85:9F
Certificate issuer:       /CN=AFFDEC226108DFBCC9B88A58C05144360A3B8476
Certificate serial:       42E922089AE432EB33B9DC7B94A19270585EC359
Authority key identifier: AF:FD:EC:22:61:08:DF:BC:C9:B8:8A:58:C0:51:44:36:0A:3B:84:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/323830343a353431343a3a2f33322d3332203d3e20323638363237.roa
Signing time:             Fri 28 Aug 2026 23:01:11 +0000
ROA not before:           Fri 28 Aug 2026 22:56:11 +0000
ROA not after:            Fri 27 Aug 2027 23:01:11 +0000
asID:                     268627
IP address blocks:        2804:5414::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.crl
                          rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 22:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e9:22:08:9a:e4:32:eb:33:b9:dc:7b:94:a1:92:70:58:5e:c3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFDEC226108DFBCC9B88A58C05144360A3B8476
        Validity
            Not Before: Aug 28 22:56:11 2026 GMT
            Not After : Aug 27 23:01:11 2027 GMT
        Subject: CN=EA70BE07998C983B711627B67AE7A7268805859F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:c2:a8:09:56:d4:c6:8a:0f:3b:5a:91:eb:
                    4c:d0:63:25:11:b7:13:48:ca:f8:d5:1e:63:2c:39:
                    ac:fa:b0:36:66:c6:a2:19:c6:60:9c:db:d6:d1:26:
                    fd:43:b4:7a:c5:f2:3c:f3:90:8f:6f:85:63:0f:4c:
                    bf:eb:c9:2d:ad:20:08:32:8d:04:5f:c2:88:cc:ed:
                    21:44:a9:c7:f0:0a:ff:98:e3:93:e2:6d:61:3f:f3:
                    e7:b9:6d:61:e3:6f:82:0d:59:56:de:1b:39:68:b0:
                    10:c8:0f:a9:a5:f0:dc:61:8d:7c:d2:ab:1a:d3:1a:
                    b5:2e:4f:f9:0a:41:bb:4e:98:81:b3:4b:84:3a:f2:
                    92:be:9b:e4:6c:91:61:fc:9b:7b:2c:06:42:1b:cf:
                    c2:56:2d:88:b9:f9:27:5b:37:7f:bd:7f:32:30:7f:
                    22:00:fb:80:02:19:20:f6:c2:40:07:b2:59:d0:1f:
                    16:a4:ad:a8:ec:a1:7d:6e:5a:ba:d5:e7:21:ac:6c:
                    62:27:31:a0:0e:fc:48:91:37:7f:4c:db:2a:2b:8e:
                    3e:50:f1:a5:cf:ff:62:d2:41:89:a6:8c:dc:bd:72:
                    60:6d:41:07:cd:83:19:db:0e:a1:32:c1:b3:29:4e:
                    1a:f2:dc:bf:27:81:83:a5:4f:fa:93:f1:8b:11:34:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:70:BE:07:99:8C:98:3B:71:16:27:B6:7A:E7:A7:26:88:05:85:9F
            X509v3 Authority Key Identifier:
                keyid:AF:FD:EC:22:61:08:DF:BC:C9:B8:8A:58:C0:51:44:36:0A:3B:84:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/323830343a353431343a3a2f33322d3332203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5414::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:96:d7:b4:03:e2:8d:e9:dd:a2:3b:67:59:76:dc:e8:94:35:
         03:0e:ba:a0:c9:b2:0e:28:c3:36:06:94:7c:72:cd:83:8f:8f:
         5c:43:81:f8:ff:15:f9:4b:f3:4c:a3:4d:36:52:05:65:06:ec:
         d0:95:dc:a5:85:bf:69:2a:33:e6:28:ef:27:4b:18:c4:eb:07:
         92:44:a2:0b:64:c4:9c:d6:93:d7:33:f1:21:ae:41:a4:b7:12:
         0b:f4:01:7c:cb:66:ec:97:f7:63:03:d1:43:b7:24:13:c2:f4:
         61:72:85:85:93:f2:87:2f:74:43:f4:86:5f:83:82:9d:91:0e:
         4c:bd:12:9c:b1:43:9a:57:c8:e7:2c:17:43:aa:54:8e:0a:18:
         26:82:c4:4c:85:aa:5c:f2:ba:30:6f:47:82:87:ab:10:dd:69:
         97:e6:cb:4e:da:c5:66:90:15:c7:17:b8:e6:ed:c8:0e:5f:1b:
         6e:0e:8f:98:0c:54:93:ec:6e:6d:52:dc:ae:87:b3:31:9c:90:
         6f:36:3e:50:70:21:d8:66:20:ea:50:fc:d1:ba:1e:3e:36:f8:
         a2:aa:6c:83:fb:79:20:5c:f6:10:d9:18:50:63:99:f9:b0:0e:
         e6:d6:1f:84:79:23:e4:88:76:b5:6c:08:47:50:eb:ed:08:d3:
         9d:b3:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 05:05:48 2026 by rpki-client