Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/323830343a343735633a3a2f33322d313238203d3e20323637303438.roa
File:                     323830343a343735633a3a2f33322d313238203d3e20323637303438.roa (raw, json)
Hash identifier:          KMieniIrFYcEWPadH36exr7UQqvPbSEL0oud3CMQ7cE=
Subject key identifier:   26:C5:D1:43:E9:5A:0E:8B:A6:CA:E6:B9:DF:D5:01:5B:F8:96:08:1B
Certificate issuer:       /CN=CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164
Certificate serial:       4F55D536C06284466D657E561BD791F16CA31B4C
Authority key identifier: CE:2F:C0:BE:A1:95:DA:BA:38:7B:E8:AB:04:EB:FD:68:2C:2E:F1:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/323830343a343735633a3a2f33322d313238203d3e20323637303438.roa
Signing time:             Wed 23 Sep 2026 11:20:39 +0000
ROA not before:           Wed 23 Sep 2026 11:15:39 +0000
ROA not after:            Wed 22 Sep 2027 11:20:39 +0000
asID:                     267048
IP address blocks:        2804:475c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.crl
                          rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 10:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:55:d5:36:c0:62:84:46:6d:65:7e:56:1b:d7:91:f1:6c:a3:1b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164
        Validity
            Not Before: Sep 23 11:15:39 2026 GMT
            Not After : Sep 22 11:20:39 2027 GMT
        Subject: CN=26C5D143E95A0E8BA6CAE6B9DFD5015BF896081B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:96:ad:bc:ec:ba:83:aa:15:19:78:ed:a3:
                    5c:88:04:9a:34:db:07:64:e8:a8:db:51:90:7e:6e:
                    10:97:95:3d:4f:1a:0c:c8:a8:25:2c:a7:ea:89:e1:
                    f6:79:28:56:75:9c:ca:8e:d2:18:45:ad:e7:4a:b4:
                    27:2f:29:74:cf:12:98:fa:06:54:2e:08:4a:33:46:
                    9d:61:a8:b2:93:ad:d3:70:3d:a8:8e:b4:3d:79:75:
                    90:12:8c:80:56:cd:fc:fb:04:34:7e:45:81:21:2a:
                    c2:9a:f4:8f:9f:d3:53:27:dd:3d:05:e9:75:0d:dd:
                    33:cc:75:12:e0:80:67:7a:63:ec:93:f7:fe:52:41:
                    e5:08:a8:af:fc:a0:85:75:a9:7d:73:fc:6f:3e:d7:
                    66:60:52:51:58:09:32:01:9a:12:d1:91:9e:fe:a1:
                    41:68:52:ef:d6:7f:68:3d:e7:c2:83:0d:96:b5:06:
                    6f:83:32:de:db:09:8f:16:48:f3:75:d1:56:64:b1:
                    56:e7:94:17:55:ef:fa:9d:00:9a:b2:75:15:63:16:
                    57:5a:08:e8:7f:12:5e:dc:d6:3a:62:1c:3a:6f:7e:
                    00:0c:a0:87:cf:05:e0:b2:dc:ec:f0:a9:58:11:9c:
                    09:b9:45:77:ad:2d:13:9d:a3:5f:46:ab:00:94:d4:
                    82:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C5:D1:43:E9:5A:0E:8B:A6:CA:E6:B9:DF:D5:01:5B:F8:96:08:1B
            X509v3 Authority Key Identifier:
                keyid:CE:2F:C0:BE:A1:95:DA:BA:38:7B:E8:AB:04:EB:FD:68:2C:2E:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2FC0BEA195DABA387BE8AB04EBFD682C2EF164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/323830343a343735633a3a2f33322d313238203d3e20323637303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:475c::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:5f:83:43:ad:3d:d9:1b:91:48:bc:f0:f9:36:4c:2c:53:
         2b:52:cc:33:b8:45:2d:02:64:6a:da:bf:81:74:60:0c:51:be:
         35:fa:c1:3a:b3:c3:12:f4:f6:32:e3:89:b0:77:b5:89:ff:1e:
         70:6a:bd:15:ff:ef:07:aa:7a:b5:8c:a8:8a:6b:01:31:07:17:
         6f:14:41:41:b0:bf:12:90:93:b8:cb:fc:09:db:ba:2d:a9:3f:
         e5:69:20:1a:b1:98:f8:1b:12:bf:4f:d5:47:26:f6:53:bf:fc:
         ce:4d:3d:78:73:f8:65:82:5a:e4:89:c0:5e:61:23:8a:99:c2:
         92:49:f6:a5:e3:72:2d:c4:00:c6:25:bc:34:12:be:d2:75:0f:
         74:c6:86:d0:0b:c2:24:87:35:ec:3d:fc:0d:30:4c:59:b5:3a:
         f0:05:b4:35:9a:10:e1:ac:cd:fc:db:44:0c:61:45:da:5d:14:
         80:6e:54:a0:dc:b8:92:0e:9d:b6:0d:ec:40:d6:11:20:66:e4:
         da:69:e9:d1:2e:ab:85:92:66:2e:e0:fd:45:67:a9:00:6b:6e:
         96:fa:a1:d2:3e:48:2c:80:5e:61:c7:d5:66:7e:9f:5f:65:61:
         16:6b:d4:7a:00:79:b0:68:41:dc:36:ad:11:00:fd:2f:75:cb:
         34:c0:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:15:53 2026 by rpki-client