Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/323830343a386566343a3a2f33322d313238203d3e20323733343538.roa
File:                     323830343a386566343a3a2f33322d313238203d3e20323733343538.roa (raw, json)
Hash identifier:          jojjTOjsmuCOIqca+26c8DwgYFHeCe3yCU5zN1zjC/k=
Subject key identifier:   24:68:D0:B7:4B:FD:BC:17:76:71:D8:46:0F:07:39:4A:60:61:5E:EC
Certificate issuer:       /CN=8A590D260B5BE3ED54768E297080736709CACE0D
Certificate serial:       678D635C01F1CCECBAB353E90430F818CC108F7B
Authority key identifier: 8A:59:0D:26:0B:5B:E3:ED:54:76:8E:29:70:80:73:67:09:CA:CE:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A590D260B5BE3ED54768E297080736709CACE0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/323830343a386566343a3a2f33322d313238203d3e20323733343538.roa
Signing time:             Wed 07 Oct 2026 19:00:18 +0000
ROA not before:           Wed 07 Oct 2026 18:55:18 +0000
ROA not after:            Wed 06 Oct 2027 19:00:18 +0000
asID:                     273458
IP address blocks:        2804:8ef4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.crl
                          rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A590D260B5BE3ED54768E297080736709CACE0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 02:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8d:63:5c:01:f1:cc:ec:ba:b3:53:e9:04:30:f8:18:cc:10:8f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A590D260B5BE3ED54768E297080736709CACE0D
        Validity
            Not Before: Oct  7 18:55:18 2026 GMT
            Not After : Oct  6 19:00:18 2027 GMT
        Subject: CN=2468D0B74BFDBC177671D8460F07394A60615EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:58:ae:8b:98:41:c8:ee:ed:ac:c1:29:d4:8f:
                    4b:49:18:cd:c0:2b:09:52:af:97:47:a0:50:7a:f8:
                    87:9e:f5:2f:c9:b5:d7:33:12:bb:68:23:ef:a1:dd:
                    ca:b5:50:8f:5e:d6:1f:6a:73:83:0f:1b:d3:ff:dd:
                    be:d5:c4:4d:a8:5a:27:86:7a:4c:5f:7a:79:54:57:
                    d4:92:70:12:7f:6f:7e:5f:af:83:5e:5c:3f:4b:56:
                    e9:a6:e8:59:54:01:d2:28:73:03:bc:8d:86:85:01:
                    df:7f:05:f2:87:b5:82:53:4d:cf:51:2e:2c:d2:9d:
                    5a:b6:2e:c3:2a:b5:4e:80:8d:51:0e:f8:c5:ad:c6:
                    a1:f3:2b:a7:23:70:3f:f1:76:1d:c6:2d:17:98:ac:
                    38:e7:e8:17:75:44:76:9c:8f:d5:1f:11:95:d5:34:
                    b5:cd:4a:12:4d:70:43:72:c0:28:bc:b7:01:32:15:
                    24:26:9d:08:85:e8:ce:d4:77:7e:cc:f3:99:8c:6e:
                    77:4e:19:ab:32:cf:46:fb:20:f4:54:49:59:b2:85:
                    45:c5:2d:ce:37:f6:ce:ac:cd:5d:c5:ac:a0:c6:6a:
                    c3:61:50:eb:94:1e:e8:fb:39:ab:cc:97:65:e4:e2:
                    dc:33:b5:4e:6d:e5:0b:d3:ad:8f:9e:9e:b4:cf:d3:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:68:D0:B7:4B:FD:BC:17:76:71:D8:46:0F:07:39:4A:60:61:5E:EC
            X509v3 Authority Key Identifier:
                keyid:8A:59:0D:26:0B:5B:E3:ED:54:76:8E:29:70:80:73:67:09:CA:CE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A590D260B5BE3ED54768E297080736709CACE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/323830343a386566343a3a2f33322d313238203d3e20323733343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:4d:a9:23:73:82:9e:2f:7d:72:d6:4e:16:28:fc:fd:6f:47:
         ab:69:16:2e:c8:5a:54:b8:27:66:03:c8:db:ff:54:6a:28:29:
         d1:e5:1b:e2:d1:3d:92:5f:91:94:23:e3:61:80:e8:c9:b9:28:
         39:1a:92:5e:79:59:94:45:a4:be:99:20:1e:8f:09:57:c7:80:
         5f:b0:26:be:8e:85:20:0d:3e:84:1b:a5:bc:86:a2:45:e2:54:
         17:02:b5:05:c8:9c:07:a0:27:44:45:bc:fc:1d:64:ff:80:71:
         de:0b:d4:98:0d:7a:95:a5:26:ac:fe:57:e0:cf:ea:d5:04:a6:
         1a:b4:e5:33:23:89:b8:55:92:6e:89:25:f0:c2:1e:ee:53:40:
         ab:4f:ac:66:83:ac:fa:a2:37:8a:43:7e:de:8b:34:8c:b1:5f:
         04:fb:2b:93:bb:f1:11:27:27:5e:e1:4d:b8:1e:d1:24:94:e5:
         42:a2:62:a0:aa:5f:e6:fc:35:50:13:bb:02:5b:37:a1:a1:a8:
         9f:e9:cf:5a:3e:1a:af:d1:bc:b7:2a:7c:23:89:7a:4f:50:75:
         62:09:94:da:70:b6:e4:e7:37:44:50:25:97:85:77:59:86:d1:
         cc:42:99:fc:04:fa:91:c6:55:7d:e5:e1:07:98:4f:b7:87:99:
         43:05:ea:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----