Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/323830343a356165633a3a2f33322d3336203d3e20323638383035.roa
File:                     323830343a356165633a3a2f33322d3336203d3e20323638383035.roa (raw, json)
Hash identifier:          dOOwzJECs35rmTHp9GBREc+prGoVcxDvEJhZH5Eaq0I=
Subject key identifier:   84:9B:13:82:58:20:A8:CD:5F:15:9B:C2:19:D1:16:2D:B3:37:02:65
Certificate issuer:       /CN=C87A68538669B5BE6143466DC5BDBD7D31975E45
Certificate serial:       531023CCCB64F298AE17B5A8343233ECC330CB20
Authority key identifier: C8:7A:68:53:86:69:B5:BE:61:43:46:6D:C5:BD:BD:7D:31:97:5E:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C87A68538669B5BE6143466DC5BDBD7D31975E45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/323830343a356165633a3a2f33322d3336203d3e20323638383035.roa
Signing time:             Wed 14 Oct 2026 18:19:37 +0000
ROA not before:           Wed 14 Oct 2026 18:14:37 +0000
ROA not after:            Wed 13 Oct 2027 18:19:37 +0000
asID:                     268805
IP address blocks:        2804:5aec::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.crl
                          rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C87A68538669B5BE6143466DC5BDBD7D31975E45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 10:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:10:23:cc:cb:64:f2:98:ae:17:b5:a8:34:32:33:ec:c3:30:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87A68538669B5BE6143466DC5BDBD7D31975E45
        Validity
            Not Before: Oct 14 18:14:37 2026 GMT
            Not After : Oct 13 18:19:37 2027 GMT
        Subject: CN=849B13825820A8CD5F159BC219D1162DB3370265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:1a:26:01:60:c8:13:be:d1:4a:0b:43:55:
                    de:f6:30:d1:a3:42:f3:44:d4:37:7e:43:bd:63:21:
                    84:18:54:4d:0c:14:97:fb:45:e8:fe:49:9b:9d:9c:
                    ad:70:c4:2a:c7:31:e5:ed:72:11:cd:af:ca:2e:1e:
                    f1:e3:63:ec:0a:b5:76:07:a7:37:fc:ed:69:fa:6f:
                    b0:79:e6:e0:7a:a6:00:37:36:03:9b:4d:5b:cf:94:
                    fc:6e:23:f2:75:01:1c:3a:86:82:11:ff:e4:23:32:
                    ad:47:1d:f3:01:bc:d7:c3:9c:a6:69:26:7b:fa:28:
                    d0:a1:be:f9:85:b1:21:35:47:2b:fc:27:1b:45:e5:
                    03:a5:f0:b1:bc:da:c5:67:a0:93:b4:48:e3:4a:00:
                    a9:ad:63:c6:5d:d0:29:4a:72:aa:d5:90:24:2f:37:
                    2f:31:78:3d:e5:a0:91:57:c7:d5:fc:9b:42:7b:65:
                    4e:a9:92:7e:1d:ae:b1:63:4b:b0:5e:3a:16:0d:9d:
                    57:62:dc:da:ae:33:f6:37:38:b7:2d:40:6c:39:df:
                    b1:a7:b5:28:b8:f8:e2:ba:42:40:5f:03:fb:80:c1:
                    90:65:96:20:8d:d7:a9:4e:3e:fa:f5:c3:51:87:4f:
                    cc:1b:85:a3:c8:0e:55:1c:33:33:1d:fc:db:aa:fd:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9B:13:82:58:20:A8:CD:5F:15:9B:C2:19:D1:16:2D:B3:37:02:65
            X509v3 Authority Key Identifier:
                keyid:C8:7A:68:53:86:69:B5:BE:61:43:46:6D:C5:BD:BD:7D:31:97:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C87A68538669B5BE6143466DC5BDBD7D31975E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/323830343a356165633a3a2f33322d3336203d3e20323638383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aec::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:6e:e3:b6:59:33:4c:41:1e:e4:6d:05:58:76:1f:2d:34:
         9c:5c:b2:89:4f:8c:4a:2e:c3:5d:32:8c:6f:68:c5:4d:a7:88:
         d9:42:a0:9c:e5:35:3b:46:31:b3:75:29:de:ff:36:79:0f:da:
         78:98:82:68:26:ab:2b:7d:f2:3b:62:12:ce:e5:75:6e:12:5b:
         76:73:8f:85:3e:a9:20:db:43:a0:be:b3:a2:5c:c5:57:61:76:
         d1:db:0c:d4:31:13:44:87:cc:04:58:30:7c:23:3f:f0:e3:8d:
         48:2e:0c:33:f0:01:65:df:7c:81:5c:3e:61:72:44:1e:9e:63:
         d0:4d:82:70:57:3b:77:b4:a0:ba:b4:b4:6d:e0:d9:be:35:79:
         f1:2f:ec:2c:3f:6f:5f:65:1c:c9:6f:50:1f:0c:88:a3:e5:17:
         c4:48:a9:f1:b5:df:bc:8d:6d:50:9d:95:eb:06:0f:35:e6:b2:
         79:ff:04:7e:e2:65:e3:ef:39:6d:47:f9:51:fc:42:9e:81:94:
         67:69:20:fb:f2:c9:93:b1:66:f5:62:87:f7:d9:16:cb:03:f7:
         83:31:fe:bd:c0:e7:98:8c:8e:82:56:ec:8e:c5:99:aa:cc:dc:
         5c:8b:43:98:c2:b4:eb:f2:13:45:5c:a1:3c:ce:d4:92:73:17:
         21:c6:04:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:07:49 2026 by rpki-client