Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/323830343a346365303a3a2f33322d3332203d3e20323637333938.roa
File:                     323830343a346365303a3a2f33322d3332203d3e20323637333938.roa (raw, json)
Hash identifier:          ZOwjHk/W/7OOzLefz2ZPflRzaEYDWyNsKsSmxRcu9rg=
Subject key identifier:   83:A9:88:B4:4E:44:85:9D:C0:D3:FF:8B:DC:91:F1:25:A2:F7:70:72
Certificate issuer:       /CN=8E492D5301F48C89C571A5B4B810A0CC7DE82CAB
Certificate serial:       0B1E7A419768CC8A42538D485A8B5DF20D83338A
Authority key identifier: 8E:49:2D:53:01:F4:8C:89:C5:71:A5:B4:B8:10:A0:CC:7D:E8:2C:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/323830343a346365303a3a2f33322d3332203d3e20323637333938.roa
Signing time:             Fri 18 Sep 2026 20:13:09 +0000
ROA not before:           Fri 18 Sep 2026 20:08:09 +0000
ROA not after:            Fri 17 Sep 2027 20:13:09 +0000
asID:                     267398
IP address blocks:        2804:4ce0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.crl
                          rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 14:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1e:7a:41:97:68:cc:8a:42:53:8d:48:5a:8b:5d:f2:0d:83:33:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E492D5301F48C89C571A5B4B810A0CC7DE82CAB
        Validity
            Not Before: Sep 18 20:08:09 2026 GMT
            Not After : Sep 17 20:13:09 2027 GMT
        Subject: CN=83A988B44E44859DC0D3FF8BDC91F125A2F77072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:29:d2:41:a3:30:51:f6:ba:7a:67:16:0a:ce:
                    36:01:10:aa:22:2b:75:f0:71:83:46:10:dd:55:f0:
                    fa:df:6d:e2:a3:f0:e7:b4:2b:4c:d4:e8:34:6a:6b:
                    51:0f:13:da:f4:45:55:51:7f:dc:4a:be:72:9d:cc:
                    d4:89:eb:ce:b3:54:a7:25:9c:96:2e:ac:ed:c3:76:
                    0c:b9:19:c1:9e:8e:6a:c5:f1:d0:2b:86:a5:5e:9a:
                    39:cc:a9:3a:91:07:86:e4:fa:79:96:90:ba:22:36:
                    9e:97:06:7d:b9:62:b4:f8:76:b2:d8:2c:ec:d0:be:
                    c9:de:f3:01:a3:8d:b1:93:e8:e5:3b:2e:bc:89:e1:
                    ff:46:8d:28:f1:13:80:88:00:4c:7e:ce:88:de:4a:
                    67:14:cb:f6:b9:f4:7d:a6:e9:c8:d7:28:b0:50:e7:
                    04:1e:ee:b3:17:96:02:35:a3:9b:57:01:b7:9b:e0:
                    99:e4:3d:94:b9:5c:86:1b:d3:fb:10:96:d4:9b:e6:
                    b7:d3:b4:3d:ad:5a:7b:b2:43:35:c3:7b:21:83:28:
                    db:aa:34:de:c0:81:15:b6:8b:d8:cd:d7:62:c0:c8:
                    bd:b6:e3:a9:fc:b5:6c:06:7d:4d:47:dc:0e:04:61:
                    fd:6a:f0:4e:95:51:fb:17:d5:72:53:2b:20:ba:8e:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A9:88:B4:4E:44:85:9D:C0:D3:FF:8B:DC:91:F1:25:A2:F7:70:72
            X509v3 Authority Key Identifier:
                keyid:8E:49:2D:53:01:F4:8C:89:C5:71:A5:B4:B8:10:A0:CC:7D:E8:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/323830343a346365303a3a2f33322d3332203d3e20323637333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:82:28:f0:1b:84:08:99:47:45:11:55:a1:29:0b:d4:58:
         6f:24:67:dc:a6:31:e3:b9:19:e1:41:4e:69:18:42:8c:42:f0:
         20:6e:70:93:1d:a2:21:fd:09:09:a6:fd:f8:b2:1a:73:29:f2:
         c0:97:0e:80:6e:93:a7:56:5e:d5:95:a8:36:60:1a:ab:ea:97:
         ce:ed:7f:12:1a:21:aa:0b:6d:c1:86:fc:a1:67:cc:b6:4f:8f:
         55:c7:9e:6c:9f:67:32:83:fe:87:fe:91:99:24:0f:63:43:3b:
         78:f6:ab:e5:6d:78:31:ef:d8:e8:74:83:35:53:d6:44:30:e5:
         1c:9a:a7:b7:97:69:83:e3:73:ba:26:fe:e6:57:44:2c:71:aa:
         6b:ec:cc:ea:d3:cc:88:15:7f:5b:04:af:af:b5:ef:e7:51:52:
         e3:13:df:bc:f7:5f:fc:97:5d:99:ff:e8:7a:9f:97:79:62:71:
         ba:9e:13:24:4c:1f:94:2a:80:60:ae:ba:92:8a:7d:c7:f4:58:
         57:3e:77:30:18:fa:da:c1:23:f8:f9:03:c4:1f:1b:2f:f8:42:
         15:1a:3e:77:e2:70:25:52:c9:1a:d1:f2:bc:63:0d:94:1d:b7:
         b6:d8:f3:5c:46:b4:a8:d5:19:12:e2:5f:2a:94:65:3a:a5:df:
         34:27:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:32:48 2026 by rpki-client