Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/323830343a353032343a3a2f33322d3438203d3e20323632383236.roa
File:                     323830343a353032343a3a2f33322d3438203d3e20323632383236.roa (raw, json)
Hash identifier:          y5FInfHtGuqZvMWZfxKOGuSTpIsjuHfCR0B42LuOfKI=
Subject key identifier:   B0:37:C7:6F:03:4A:91:0C:64:E7:2D:67:60:59:5E:AD:AD:F1:66:C9
Certificate issuer:       /CN=F41A3B424DC82042A446A1FBCDC9AC982418C829
Certificate serial:       59B84FD19F7EEF5218067207040550CD1E27102D
Authority key identifier: F4:1A:3B:42:4D:C8:20:42:A4:46:A1:FB:CD:C9:AC:98:24:18:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F41A3B424DC82042A446A1FBCDC9AC982418C829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/323830343a353032343a3a2f33322d3438203d3e20323632383236.roa
Signing time:             Mon 07 Sep 2026 17:52:28 +0000
ROA not before:           Mon 07 Sep 2026 17:47:28 +0000
ROA not after:            Mon 06 Sep 2027 17:52:28 +0000
asID:                     262826
IP address blocks:        2804:5024::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/F41A3B424DC82042A446A1FBCDC9AC982418C829.crl
                          rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/F41A3B424DC82042A446A1FBCDC9AC982418C829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F41A3B424DC82042A446A1FBCDC9AC982418C829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 15:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b8:4f:d1:9f:7e:ef:52:18:06:72:07:04:05:50:cd:1e:27:10:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F41A3B424DC82042A446A1FBCDC9AC982418C829
        Validity
            Not Before: Sep  7 17:47:28 2026 GMT
            Not After : Sep  6 17:52:28 2027 GMT
        Subject: CN=B037C76F034A910C64E72D6760595EADADF166C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:01:79:f3:c3:5f:65:62:3b:50:29:2d:f2:
                    06:28:26:42:4e:57:13:4e:8e:89:09:02:95:8a:45:
                    94:51:05:de:cf:74:6c:c1:b3:a9:31:11:03:25:42:
                    4c:ef:43:f0:d9:c6:75:10:61:80:e9:1e:fd:57:6d:
                    b3:55:ef:cc:71:08:d5:7c:0c:6c:52:d8:01:a7:3f:
                    f9:b4:56:ec:82:2d:99:19:7f:f7:8f:63:ab:bd:df:
                    36:fb:f6:e3:2f:46:57:78:14:fc:07:01:93:af:93:
                    9d:50:4b:ab:1f:3b:e5:62:90:08:48:df:d3:72:7f:
                    74:26:5f:bd:6d:52:16:bf:02:e3:02:c6:20:48:14:
                    8c:a9:fe:4c:ed:17:b1:61:15:a9:f2:1d:b2:95:46:
                    92:26:4a:3a:b0:21:2a:4a:39:b7:28:38:af:05:f7:
                    d8:00:05:09:19:16:d9:ec:36:46:5d:04:7b:42:ae:
                    52:46:2a:4a:39:22:41:a3:d6:dd:3c:1b:55:72:db:
                    a6:a2:95:b9:43:35:b0:1a:75:8f:d0:49:be:d1:8d:
                    f6:9c:15:24:a8:28:80:04:ff:51:88:71:f5:86:54:
                    4c:ac:2e:c3:3a:40:bd:c3:be:ac:f6:65:9e:6c:6f:
                    8d:21:10:e9:34:0f:46:01:80:00:c6:c1:60:00:bc:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:37:C7:6F:03:4A:91:0C:64:E7:2D:67:60:59:5E:AD:AD:F1:66:C9
            X509v3 Authority Key Identifier:
                keyid:F4:1A:3B:42:4D:C8:20:42:A4:46:A1:FB:CD:C9:AC:98:24:18:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/F41A3B424DC82042A446A1FBCDC9AC982418C829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F41A3B424DC82042A446A1FBCDC9AC982418C829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KV1gajkbvL4dsdE4P5Bac2Ezo97ZZGs93r1mYAiDzS6/0/323830343a353032343a3a2f33322d3438203d3e20323632383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5024::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:3b:c2:76:2f:2f:aa:c1:8c:56:58:01:27:72:42:85:23:
         fc:76:2b:ab:8e:b1:70:f1:47:31:9f:f6:dd:1e:75:1f:cc:24:
         6c:b6:8c:10:ed:20:7e:f6:b0:74:3a:12:d7:c7:e3:e1:07:33:
         b2:be:3e:bf:85:c9:46:a6:70:37:92:d9:70:1f:c2:66:48:25:
         68:ea:ab:7f:bf:24:4e:24:3c:0f:da:ac:a5:9a:f7:12:ed:da:
         2c:f4:92:45:23:e4:ee:f2:60:84:07:f2:75:7c:d1:37:10:be:
         b3:37:a9:b2:54:e0:b5:3f:fb:74:64:86:f8:b9:61:50:d9:6e:
         b5:b0:0e:74:6c:06:3b:5b:0d:d4:c6:c9:2d:b3:66:c2:b9:7b:
         64:21:47:82:a4:4f:4c:f1:f1:88:15:b7:ed:c8:da:76:28:15:
         b9:da:b8:73:38:b4:1d:3b:f9:6f:6d:91:e8:04:e0:32:09:2b:
         44:67:3e:df:a0:1d:26:63:f2:e6:31:1b:3a:40:30:5e:40:69:
         cf:df:a5:14:c8:5a:96:47:b9:ca:c5:3a:1c:71:5d:43:6e:23:
         af:45:64:a7:4a:64:22:89:38:4b:95:81:86:c9:ca:9c:79:ec:
         0a:31:a3:c1:72:90:7c:ec:f5:6d:81:62:f0:87:b7:96:fa:76:
         6a:3a:6f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:27:50 2026 by rpki-client