Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/323830343a393466343a3a2f33322d3438203d3e20323734343839.roa
File:                     323830343a393466343a3a2f33322d3438203d3e20323734343839.roa (raw, json)
Hash identifier:          jkTjUMXxcZeaHSVnNqSFQY+dBTW3klSUZG9WgGKmO+w=
Subject key identifier:   70:D1:34:BB:A7:43:BA:55:4B:FB:C3:B7:B5:5E:35:B3:00:6C:0A:AC
Certificate issuer:       /CN=37072EA273515CFCD5AA9BB85FAD1C138E10EE4C
Certificate serial:       5ADEB6AF27F6762E54B778CD7FF318F4EF7C3276
Authority key identifier: 37:07:2E:A2:73:51:5C:FC:D5:AA:9B:B8:5F:AD:1C:13:8E:10:EE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/323830343a393466343a3a2f33322d3438203d3e20323734343839.roa
Signing time:             Mon 14 Sep 2026 12:59:23 +0000
ROA not before:           Mon 14 Sep 2026 12:54:23 +0000
ROA not after:            Mon 13 Sep 2027 12:59:23 +0000
asID:                     274489
IP address blocks:        2804:94f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.crl
                          rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:de:b6:af:27:f6:76:2e:54:b7:78:cd:7f:f3:18:f4:ef:7c:32:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37072EA273515CFCD5AA9BB85FAD1C138E10EE4C
        Validity
            Not Before: Sep 14 12:54:23 2026 GMT
            Not After : Sep 13 12:59:23 2027 GMT
        Subject: CN=70D134BBA743BA554BFBC3B7B55E35B3006C0AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:0f:83:30:ac:5f:f0:9a:33:c4:2e:f1:cb:
                    d8:83:0f:2a:1a:fe:f2:dd:c1:84:e8:35:95:8b:43:
                    c9:60:2c:42:f6:90:b8:b6:ea:d7:83:a4:0e:80:99:
                    8e:ab:fc:b9:24:53:e9:c9:dc:84:94:ef:b4:ef:2b:
                    f1:79:16:c6:b9:6c:a1:1e:a2:5b:6b:1c:4a:74:dc:
                    9d:c4:d6:2f:67:f8:bf:fe:46:9a:01:f4:4f:ea:74:
                    f9:5b:be:3d:e7:6f:4d:e8:25:f7:39:0f:2c:6c:7a:
                    e3:c7:44:0b:04:04:3a:21:fe:6f:5a:47:bb:c8:71:
                    bf:af:ba:7a:19:c8:dc:7d:dd:de:d8:d9:59:d8:8d:
                    3d:26:32:6d:c7:8a:80:5c:67:1f:a7:d3:11:2f:ba:
                    90:46:4e:f3:1a:af:84:65:93:56:e9:84:e2:a6:b6:
                    e3:94:9a:14:26:c7:9f:91:55:54:8a:6b:60:74:72:
                    05:38:b7:17:ee:08:4e:0d:d9:7b:63:12:62:30:3a:
                    87:8b:d6:1c:1c:b6:90:95:f3:94:04:50:b4:bd:6f:
                    60:63:c3:6d:cc:7c:c2:55:50:77:88:a0:5a:62:c4:
                    09:3e:2f:e5:1b:a1:3e:77:0b:a9:f9:86:e5:f7:9b:
                    2d:91:6a:24:30:5f:d3:63:d8:16:35:24:46:43:1b:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D1:34:BB:A7:43:BA:55:4B:FB:C3:B7:B5:5E:35:B3:00:6C:0A:AC
            X509v3 Authority Key Identifier:
                keyid:37:07:2E:A2:73:51:5C:FC:D5:AA:9B:B8:5F:AD:1C:13:8E:10:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/323830343a393466343a3a2f33322d3438203d3e20323734343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:94f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:93:e7:f0:bc:c5:45:bd:eb:82:f1:5f:0e:9d:86:72:22:0a:
         25:05:e1:59:9e:b0:2c:04:2d:50:62:a0:8b:d2:b0:99:e7:2b:
         0e:3d:fe:aa:44:f1:88:ee:d4:7c:b9:a5:f6:d6:71:46:c7:c7:
         a7:6e:92:a9:69:e7:ff:21:23:6a:f7:a7:f9:c2:3f:6c:7a:c6:
         c2:ad:a4:1a:7c:70:bf:5a:74:3b:bf:76:2d:60:df:bb:2a:d3:
         16:08:df:cf:55:0e:34:8b:e0:26:c1:36:26:42:cc:27:ff:55:
         ea:d9:14:8e:04:96:b0:95:a9:53:46:0c:bc:0e:98:45:ec:5f:
         a9:4e:9b:31:2d:42:0d:6f:2f:6a:5c:16:d7:f2:ef:58:85:e2:
         b1:38:1b:5d:9f:96:e8:60:88:b6:ba:14:d7:ab:b5:33:60:ea:
         cb:40:d4:c0:3a:7d:1b:4f:74:4e:d3:03:6c:24:6f:cd:2c:0e:
         66:98:e7:ff:7a:53:cb:2e:f0:44:f4:62:4d:b0:20:7e:38:05:
         a3:c6:9a:f4:5b:f0:8a:55:43:b2:9b:26:05:95:b4:42:fc:c8:
         06:d7:a5:17:6e:55:69:a4:5c:6e:f5:81:24:29:d1:4c:ff:a6:
         d6:bb:31:14:47:5e:6a:df:3e:07:82:ea:9f:54:46:48:de:c0:
         23:f1:d5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 23:24:59 2026 by rpki-client