Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa
File:                     323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa (raw, json)
Hash identifier:          EDMg5osj89wBVjBZ1KBTa7ypMsYzNa2GJeHUcaanbR0=
Subject key identifier:   AC:6F:8B:63:7C:2E:D9:C0:0A:E0:61:E3:75:3C:FF:4C:84:2B:76:B2
Certificate issuer:       /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
Certificate serial:       2FCF2FDE73B33944486F6A05D6BC1B11E22ABC4C
Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa
Signing time:             Sun 25 Oct 2026 13:40:33 +0000
ROA not before:           Sun 25 Oct 2026 13:35:33 +0000
ROA not after:            Sun 24 Oct 2027 13:40:33 +0000
asID:                     273556
IP address blocks:        2804:9080:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 11:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cf:2f:de:73:b3:39:44:48:6f:6a:05:d6:bc:1b:11:e2:2a:bc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
        Validity
            Not Before: Oct 25 13:35:33 2026 GMT
            Not After : Oct 24 13:40:33 2027 GMT
        Subject: CN=AC6F8B637C2ED9C00AE061E3753CFF4C842B76B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:bf:3d:cc:07:15:f8:ed:21:e3:2b:62:53:
                    49:6d:a1:04:cb:f5:cf:46:2a:9b:34:ed:a6:65:11:
                    2f:2e:ab:22:41:27:db:02:ce:b8:6b:b2:ab:6a:04:
                    2d:db:ce:fd:23:11:b2:8c:d0:60:5b:ae:bf:8e:17:
                    c5:ef:d7:6a:fc:a6:7b:f3:97:e4:87:26:0e:60:21:
                    f9:b7:50:c3:9d:6d:05:c3:93:d4:53:e7:a8:be:eb:
                    81:89:1c:25:4c:a8:b7:0c:90:04:4c:19:91:a1:37:
                    b9:ff:60:e6:e2:5d:59:b2:95:a9:bb:22:43:be:63:
                    20:b2:2b:26:20:80:1e:fc:32:0e:62:b2:9a:03:17:
                    aa:fb:55:fd:ee:ab:f3:1a:29:09:f6:31:53:20:8c:
                    03:d5:86:b3:8a:e1:cf:d9:8f:39:c5:7d:6d:b0:60:
                    e7:e0:40:9a:b3:78:1b:57:15:c7:88:5e:e1:8d:01:
                    9c:b9:ba:72:23:ab:d1:04:f1:5d:7c:6f:97:e6:91:
                    11:1b:b9:b4:fc:37:4e:37:ea:9b:11:28:4d:c8:78:
                    86:a9:db:d1:98:c8:d3:32:9c:d3:2f:cc:95:8d:d0:
                    c4:05:46:77:ce:9a:1d:9f:99:06:2b:ac:52:8e:5a:
                    a8:bb:54:b4:9a:ac:28:79:3f:ac:a2:d1:cd:30:2b:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6F:8B:63:7C:2E:D9:C0:0A:E0:61:E3:75:3C:FF:4C:84:2B:76:B2
            X509v3 Authority Key Identifier:
                keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         54:68:5f:da:73:e9:61:45:43:07:57:5f:08:9a:91:40:3e:65:
         63:37:bc:5c:cf:08:54:89:9a:cf:29:cc:44:8e:5f:96:7b:46:
         39:4f:71:d4:35:6a:72:d2:fd:9d:af:bb:1a:74:dd:fe:6e:4e:
         86:d3:63:a2:f3:ac:8e:ee:5c:ba:86:95:f6:81:23:c9:7b:db:
         f2:d4:36:ca:f5:2e:61:ba:51:a0:18:ca:80:f8:4c:1d:5b:b9:
         6e:61:62:be:e4:64:68:81:4f:71:d9:78:9f:af:1f:35:07:76:
         52:80:af:9f:be:fc:5b:48:c3:69:9b:a1:30:41:c2:f4:d0:cf:
         29:76:c2:f4:60:8f:ff:84:24:77:bb:d5:f9:b1:32:05:91:eb:
         28:a5:66:cc:f8:fe:f9:94:a2:bf:40:31:41:b8:e9:95:6f:ed:
         3a:f1:41:1b:fc:bf:99:ec:ed:6c:4d:af:bf:b4:dc:55:38:d2:
         49:56:4e:10:af:11:36:43:37:51:e2:68:0a:b8:90:3f:a0:a9:
         7e:8b:89:ec:c2:5b:7b:dd:88:28:11:33:16:6e:8c:12:48:d4:
         9d:75:9b:44:6a:e7:08:8d:9b:e3:c1:29:73:60:bf:67:a4:ef:
         e8:5d:46:32:06:5d:26:fb:25:c3:55:b3:32:22:52:97:c2:83:
         a8:a1:27:64
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUL88v3nOzOURIb2oF1rwbEeIqvEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5MDU5QTZDRkM2RDhENDc4NEJENDY5OTkwNkRBNjZD
MjI3MUNEOTAeFw0yNjEwMjUxMzM1MzNaFw0yNzEwMjQxMzQwMzNaMDMxMTAvBgNV
BAMTKEFDNkY4QjYzN0MyRUQ5QzAwQUUwNjFFMzc1M0NGRjRDODQyQjc2QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStr89zAcV+O0h4ytiU0ltoQTL
9c9GKps07aZlES8uqyJBJ9sCzrhrsqtqBC3bzv0jEbKM0GBbrr+OF8Xv12r8pnvz
l+SHJg5gIfm3UMOdbQXDk9RT56i+64GJHCVMqLcMkARMGZGhN7n/YObiXVmylam7
IkO+YyCyKyYggB78Mg5ispoDF6r7Vf3uq/MaKQn2MVMgjAPVhrOK4c/ZjznFfW2w
YOfgQJqzeBtXFceIXuGNAZy5unIjq9EE8V18b5fmkREbubT8N0436psRKE3IeIap
29GYyNMynNMvzJWN0MQFRnfOmh2fmQYrrFKOWqi7VLSarCh5P6yi0c0wK09lAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUrG+LY3wu2cAK4GHjdTz/TIQrdrIwHwYDVR0j
BBgwFoAUlJBZps/G2NR4S9RpmQbaZsInHNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHBaTVdYQ2tFWjduTFJIbkpNbWEza1I4VHdXOXlLYVQ0Y1Ryb0JoRG1E
ZzUvMC85NDkwNTlBNkNGQzZEOEQ0Nzg0QkQ0Njk5OTA2REE2NkMyMjcxQ0Q5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0OTA1OUE2Q0ZDNkQ4RDQ3
ODRCRDQ2OTk5MDZEQTY2QzIyNzFDRDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwWk1XWENrRVo3bkxSSG5KTW1hM2tSOFR3Vzl5S2FUNGNUcm9CaERtRGc1LzAv
MzIzODMwMzQzYTM5MzAzODMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM1MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEkIBAMA0GCSqGSIb3DQEBCwUA
A4IBAQBUaF/ac+lhRUMHV18ImpFAPmVjN7xczwhUiZrPKcxEjl+We0Y5T3HUNWpy
0v2dr7sadN3+bk6G02Oi86yO7ly6hpX2gSPJe9vy1DbK9S5hulGgGMqA+EwdW7lu
YWK+5GRogU9x2Xifrx81B3ZSgK+fvvxbSMNpm6EwQcL00M8pdsL0YI//hCR3u9X5
sTIFkesopWbM+P75lKK/QDFBuOmVb+068UEb/L+Z7O1sTa+/tNxVONJJVk4QrxE2
QzdR4mgKuJA/oKl+i4nswlt73YgoETMWbowSSNSddZtEaucIjZvjwSlzYL9npO/o
XUYyBl0m+yXDVbMyIlKXwoOooSdk
-----END CERTIFICATE-----
Generated at Sun Nov 1 04:10:18 2026 by rpki-client