Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/323830343a346365303a383030303a3a2f33332d3333203d3e20323637333938.roa
File:                     323830343a346365303a383030303a3a2f33332d3333203d3e20323637333938.roa (raw, json)
Hash identifier:          //MkmqsV5KfemgA1RPZ31Ni5LFq3OK3jmh4MMej/s5A=
Subject key identifier:   6B:FA:FB:D4:47:10:7C:2D:45:4C:E9:D8:62:2B:71:10:0B:2D:79:5F
Certificate issuer:       /CN=8E492D5301F48C89C571A5B4B810A0CC7DE82CAB
Certificate serial:       62789BCF8207C63D7A12A69168F4672C2AF75544
Authority key identifier: 8E:49:2D:53:01:F4:8C:89:C5:71:A5:B4:B8:10:A0:CC:7D:E8:2C:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/323830343a346365303a383030303a3a2f33332d3333203d3e20323637333938.roa
Signing time:             Fri 18 Sep 2026 20:13:10 +0000
ROA not before:           Fri 18 Sep 2026 20:08:10 +0000
ROA not after:            Fri 17 Sep 2027 20:13:10 +0000
asID:                     267398
IP address blocks:        2804:4ce0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.crl
                          rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 03:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:78:9b:cf:82:07:c6:3d:7a:12:a6:91:68:f4:67:2c:2a:f7:55:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E492D5301F48C89C571A5B4B810A0CC7DE82CAB
        Validity
            Not Before: Sep 18 20:08:10 2026 GMT
            Not After : Sep 17 20:13:10 2027 GMT
        Subject: CN=6BFAFBD447107C2D454CE9D8622B71100B2D795F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:28:e4:b8:0f:41:29:c4:2d:ca:80:ec:e5:
                    e2:0e:a3:4a:8d:7c:c4:3f:8d:fe:e6:6d:1c:87:21:
                    00:7d:9e:ee:f8:72:2d:05:33:90:58:30:d7:29:e4:
                    46:98:92:b4:82:02:b0:0f:1f:b4:60:0f:fa:e1:dc:
                    24:61:0d:af:49:db:73:db:5a:1c:85:89:f2:b2:44:
                    34:f3:50:08:6e:61:a1:cd:b4:2e:17:f7:4a:2c:8c:
                    7d:34:d9:f6:7d:1f:c4:4b:cc:f4:d6:c1:3d:cf:8f:
                    18:a2:96:8e:22:89:e1:eb:96:93:db:59:9e:d3:6b:
                    4e:37:23:c1:ee:78:e3:ea:bc:da:33:16:bd:b5:be:
                    97:79:ef:dd:f0:d2:12:67:22:d1:47:14:fc:ff:1f:
                    f4:65:74:35:8d:68:21:91:cd:3c:2f:8f:df:4c:20:
                    72:12:49:74:2a:96:a4:0e:4f:ba:b2:52:9e:e5:ce:
                    d0:f0:ac:7a:27:de:cf:84:a6:8f:e8:4b:e8:23:1f:
                    7d:c9:8d:41:da:97:d9:6b:00:cf:ca:13:36:64:67:
                    6a:7d:c6:8d:bc:c3:48:e1:11:5f:b4:a9:65:1f:18:
                    08:75:35:e7:ce:43:9a:79:52:6a:7a:3f:a1:83:b7:
                    96:ff:99:3d:53:c7:84:5b:61:40:6e:2b:2a:23:45:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FA:FB:D4:47:10:7C:2D:45:4C:E9:D8:62:2B:71:10:0B:2D:79:5F
            X509v3 Authority Key Identifier:
                keyid:8E:49:2D:53:01:F4:8C:89:C5:71:A5:B4:B8:10:A0:CC:7D:E8:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/323830343a346365303a383030303a3a2f33332d3333203d3e20323637333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ce0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:95:00:00:75:ba:54:28:e1:9a:fe:18:83:7c:a6:03:64:
         11:65:0f:60:62:31:02:fb:73:7a:50:d4:9f:4f:5c:d0:82:43:
         c5:b1:45:35:e4:68:c6:30:87:2b:6d:62:de:01:bd:9e:d0:33:
         e8:1a:84:a3:ea:d7:e1:4d:8e:86:16:c6:a0:11:55:ed:a8:ef:
         61:3b:39:b2:02:d2:bf:4a:c5:aa:ef:5f:5c:4c:6f:95:dc:e2:
         b4:85:19:4c:c2:0d:03:0f:d1:e1:ec:8e:3d:c1:11:3d:4a:00:
         f9:06:f1:af:9b:ef:07:bc:3a:86:9e:ff:bf:f0:65:ef:4b:05:
         67:b7:61:2e:02:7d:68:32:48:6f:31:54:d2:35:44:3f:4d:1c:
         35:17:b4:55:ba:24:55:89:94:93:75:3d:2f:01:e1:04:3e:26:
         ae:f9:93:1c:fe:09:a6:df:57:45:88:7e:83:df:7a:9b:78:ba:
         fa:29:c7:f2:4e:ec:24:51:f7:e8:61:f1:14:fd:c2:67:42:bb:
         57:09:63:4b:70:e4:a2:3b:32:73:42:1c:96:fa:a0:bc:8d:82:
         fe:ec:32:82:5c:5e:21:17:b0:91:34:fb:a3:2f:ea:92:47:f0:
         8d:0d:82:2a:27:ab:3f:bd:a8:3d:9b:fd:c9:4d:9a:23:d9:c8:
         dd:1d:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:51:17 2026 by rpki-client