Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/323830343a363466383a3a2f33322d3332203d3e20323639343630.roa
File:                     323830343a363466383a3a2f33322d3332203d3e20323639343630.roa (raw, json)
Hash identifier:          W787z5GboRbbCiWyKSis5u2r3UhYztvDwvPzqYCReVg=
Subject key identifier:   09:24:72:8E:35:64:95:55:3C:CF:01:73:47:F6:07:95:E6:AC:B6:FF
Certificate issuer:       /CN=7EE0E237BA83B6E5F7FFA4C779A448AD72D24453
Certificate serial:       7C93D8CDA465A1B89E2499DC66F61D7CE16DBED2
Authority key identifier: 7E:E0:E2:37:BA:83:B6:E5:F7:FF:A4:C7:79:A4:48:AD:72:D2:44:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/323830343a363466383a3a2f33322d3332203d3e20323639343630.roa
Signing time:             Mon 21 Sep 2026 17:40:33 +0000
ROA not before:           Mon 21 Sep 2026 17:35:33 +0000
ROA not after:            Mon 20 Sep 2027 17:40:33 +0000
asID:                     269460
IP address blocks:        2804:64f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.crl
                          rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 09:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:93:d8:cd:a4:65:a1:b8:9e:24:99:dc:66:f6:1d:7c:e1:6d:be:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EE0E237BA83B6E5F7FFA4C779A448AD72D24453
        Validity
            Not Before: Sep 21 17:35:33 2026 GMT
            Not After : Sep 20 17:40:33 2027 GMT
        Subject: CN=0924728E356495553CCF017347F60795E6ACB6FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:98:8c:60:d9:82:8e:16:9b:2f:a9:45:de:8c:
                    66:6d:f4:34:12:17:01:88:6b:bc:4e:2f:19:1d:50:
                    2f:b3:bd:38:6f:54:62:60:91:32:7e:87:f0:9b:05:
                    ff:95:5f:d5:b4:00:f3:b6:de:f1:57:7b:5e:3a:44:
                    8b:17:52:0e:f3:da:b0:0d:ad:3c:e4:20:93:d5:8e:
                    a7:51:5a:28:7e:5e:75:dc:73:dd:dc:a0:c2:5f:93:
                    3a:7c:af:c1:79:71:c6:d8:c1:72:79:28:12:83:38:
                    1b:fc:bf:2b:ef:ef:26:d8:5d:e2:61:92:6b:68:cb:
                    e9:8d:97:56:5c:fa:51:69:a3:86:aa:e0:e6:37:ca:
                    00:c2:49:b5:4f:83:9b:58:ce:7e:bc:ec:7d:61:f4:
                    98:48:d8:15:77:5f:6f:bb:5d:01:1e:0a:f4:fb:75:
                    38:50:df:a4:94:38:57:36:ca:41:95:0d:57:06:24:
                    fa:4b:36:d0:f1:3e:d2:a6:ff:f9:d2:58:36:b9:04:
                    07:10:e0:03:42:05:52:74:2d:6c:9a:66:fd:dc:db:
                    46:94:55:15:1c:74:7e:41:74:a3:26:fc:21:52:75:
                    30:14:35:68:12:52:73:af:9e:8b:2d:f9:80:9b:46:
                    ce:9a:34:bf:57:05:2d:12:cc:25:1d:15:4e:a3:89:
                    08:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:24:72:8E:35:64:95:55:3C:CF:01:73:47:F6:07:95:E6:AC:B6:FF
            X509v3 Authority Key Identifier:
                keyid:7E:E0:E2:37:BA:83:B6:E5:F7:FF:A4:C7:79:A4:48:AD:72:D2:44:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EE0E237BA83B6E5F7FFA4C779A448AD72D24453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67vp35Nu8d5TxrVXspGefkpGxFCbKZvUUqKe6sc3Sbq5/0/323830343a363466383a3a2f33322d3332203d3e20323639343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:7a:61:35:d6:21:e3:b4:dd:ce:1e:c1:1b:e1:52:95:5d:f6:
         81:d5:9b:78:1b:ad:7b:b6:44:2b:cc:bd:33:37:97:28:97:86:
         1c:df:b6:6c:c7:97:83:53:33:ba:39:79:2d:d7:32:f1:61:d0:
         53:c0:d6:82:5b:38:ab:57:2e:da:4c:32:77:f2:c3:8f:9f:41:
         6f:44:50:35:64:c7:13:2a:eb:9c:5a:5a:e6:6f:31:b9:76:16:
         9a:17:8e:54:fa:fe:72:99:50:00:52:1d:62:bb:33:f4:4f:96:
         9b:21:b8:58:6e:00:92:89:18:bb:00:c2:47:1a:af:fc:42:1a:
         ec:8b:31:c1:09:c1:de:73:7b:40:ca:62:54:d7:67:b6:21:2f:
         d9:82:2e:c9:89:5e:14:d9:2b:87:56:eb:89:00:af:64:94:e6:
         e9:bf:9b:2a:e8:34:25:75:4f:00:5a:e1:8c:c9:44:c0:99:74:
         6d:b0:32:2e:be:0b:c7:69:be:a6:40:a1:4d:63:64:6b:eb:e2:
         cd:53:c7:40:b1:f6:b8:56:ca:ed:d1:f1:83:6f:6a:cb:05:01:
         6f:23:5c:d3:55:be:b9:7b:c3:04:d0:91:72:6c:da:ff:ff:94:
         1d:f0:53:42:0a:34:34:87:88:1c:d1:cf:de:ca:ab:9d:4d:1b:
         d3:37:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 03:35:15 2026 by rpki-client