Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa
File:                     323830343a3534343a3a2f33322d3438203d3e20323632353035.roa (raw, json)
Hash identifier:          refPo+JkMF/HqL3dWwuE6g21LMBEiRHjcEfRY+704sU=
Subject key identifier:   1E:01:25:80:A2:8F:1A:14:04:D7:EB:CF:5C:1B:DE:01:9F:D2:6E:41
Certificate issuer:       /CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
Certificate serial:       6C1613B11907550EE9E7B35DB60CC6380242568B
Authority key identifier: 2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa
Signing time:             Tue 06 Oct 2026 14:04:43 +0000
ROA not before:           Tue 06 Oct 2026 13:59:43 +0000
ROA not after:            Tue 05 Oct 2027 14:04:43 +0000
asID:                     262505
IP address blocks:        2804:544::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl
                          rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 10:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:16:13:b1:19:07:55:0e:e9:e7:b3:5d:b6:0c:c6:38:02:42:56:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
        Validity
            Not Before: Oct  6 13:59:43 2026 GMT
            Not After : Oct  5 14:04:43 2027 GMT
        Subject: CN=1E012580A28F1A1404D7EBCF5C1BDE019FD26E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:39:f2:3e:03:f2:4a:55:7d:3d:d8:76:8f:
                    1f:33:2f:1a:8e:78:79:e0:f7:7c:42:8c:a4:51:97:
                    0a:d7:ef:03:f4:3e:a3:2c:ba:c5:c3:23:50:d9:b9:
                    34:28:43:6a:03:de:35:96:0e:ed:28:6d:9c:af:60:
                    9b:53:68:20:f1:b7:13:dd:8b:0b:cd:a3:3e:62:df:
                    0c:7b:ad:7a:6d:53:46:26:06:ca:4b:4f:71:45:09:
                    a4:0b:47:de:dd:00:7f:a6:35:22:5d:7a:06:d8:5f:
                    6d:e7:b7:f0:ee:bd:e8:1f:1f:ca:47:a9:f8:be:b8:
                    4b:a7:d5:85:34:84:46:e7:61:87:a0:79:2d:85:2e:
                    7d:4a:43:31:7a:21:ff:0a:72:c0:87:4b:b6:7b:70:
                    42:ea:f3:7a:a0:ce:14:a6:dd:d0:07:da:8e:72:31:
                    54:98:ba:d3:f4:4d:f7:d3:2d:e3:f1:5b:54:b4:f8:
                    b3:c8:ae:e4:59:e6:2e:d6:17:8c:e8:ee:a2:a8:a6:
                    3b:cd:28:bf:17:b2:44:a5:e2:03:30:f1:70:fd:7d:
                    24:63:ef:20:3d:09:0d:2d:32:87:55:ca:3b:65:05:
                    42:4d:29:45:f9:ec:5b:00:dd:31:50:6b:8f:bc:2e:
                    8d:77:dd:75:77:00:fa:b5:47:df:de:45:73:a5:5d:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:01:25:80:A2:8F:1A:14:04:D7:EB:CF:5C:1B:DE:01:9F:D2:6E:41
            X509v3 Authority Key Identifier:
                keyid:2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:544::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:a6:d7:d8:d5:f7:52:dd:7e:72:68:44:b7:fe:1b:c3:ea:
         2a:95:7e:12:6c:59:41:3f:5e:f2:5b:21:34:4a:e5:2d:6c:a9:
         0d:8f:97:0f:94:ae:a4:37:a4:e9:e8:e9:bb:a9:a0:25:db:8b:
         61:f3:f3:4e:20:f2:c2:32:06:71:20:2e:58:80:61:9f:5d:de:
         bc:a7:c1:76:0c:e4:c9:67:fa:1b:f5:12:39:75:e2:37:02:7f:
         2b:fe:a8:fc:eb:f5:f0:71:15:05:b0:98:d7:4f:f2:c3:f0:af:
         1f:3d:30:9f:e3:37:52:c4:9a:12:06:42:42:65:60:f8:3e:54:
         72:ef:53:23:33:e4:2d:ff:2b:45:cc:70:17:11:59:83:64:90:
         b9:88:60:e2:1a:7f:db:b9:31:68:bc:9a:5b:21:31:b1:c4:9d:
         93:e5:b4:05:12:e5:0f:65:e1:a0:ab:a0:4a:8b:70:af:65:51:
         73:22:05:29:bb:a3:39:cf:07:34:cc:2a:8e:f8:70:d9:f6:f4:
         a9:11:75:b6:82:20:9c:47:6b:d7:47:76:91:b8:0d:3e:a6:61:
         dc:b0:3d:c7:4d:78:2a:e0:b7:69:c7:d2:8e:79:8d:07:83:02:
         a5:b6:56:f2:8e:36:c2:5a:0d:98:bf:a7:a0:53:a8:4d:2e:26:
         0d:2e:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:58:17 2026 by rpki-client