Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a383030303a3a2f33342d3334203d3e20323639363536.roa
File:                     323830343a363765303a383030303a3a2f33342d3334203d3e20323639363536.roa (raw, json)
Hash identifier:          gqcwIN1Ls3hiXKx8OtfiIQYYcMXnkSI34l5Y22jX1e0=
Subject key identifier:   A3:13:60:47:5D:43:0B:BD:C8:22:5D:FE:2A:90:68:44:57:5B:7C:67
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       3DF05E1CB700734CE951C0409F3988A5E717920A
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a383030303a3a2f33342d3334203d3e20323639363536.roa
Signing time:             Thu 08 Oct 2026 19:02:33 +0000
ROA not before:           Thu 08 Oct 2026 18:57:33 +0000
ROA not after:            Thu 07 Oct 2027 19:02:33 +0000
asID:                     269656
IP address blocks:        2804:67e0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f0:5e:1c:b7:00:73:4c:e9:51:c0:40:9f:39:88:a5:e7:17:92:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Oct  8 18:57:33 2026 GMT
            Not After : Oct  7 19:02:33 2027 GMT
        Subject: CN=A31360475D430BBDC8225DFE2A906844575B7C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:3c:05:06:f6:5f:54:de:a1:a5:3a:67:a8:
                    62:c8:80:28:0e:06:cd:49:f1:15:57:66:61:37:01:
                    43:20:1c:e6:57:0b:bd:42:4b:cc:92:f9:54:dc:9c:
                    d2:66:b3:10:98:16:9c:b6:d2:8f:23:ea:29:d7:11:
                    81:74:22:37:ce:2b:ce:23:41:f5:8c:59:38:c3:3a:
                    98:08:a6:d0:ce:ed:5e:9f:29:6a:10:16:2a:25:d9:
                    5a:e5:3e:27:10:2a:20:d6:bc:d2:a0:3a:dd:01:7d:
                    6b:55:b2:1c:92:d8:2e:82:5c:a9:1e:6a:66:ba:dd:
                    55:0e:aa:5d:7c:62:c0:50:36:7e:de:27:89:5e:57:
                    03:d6:a6:f0:55:6b:93:ce:13:57:37:cd:3a:fd:b9:
                    7f:de:8e:20:cf:54:d3:90:11:17:29:9e:d3:89:fc:
                    2d:e8:08:27:e2:b1:c2:dc:d8:66:5d:3d:f6:e1:70:
                    c7:03:80:6a:a8:b1:c6:a5:34:fa:a0:0c:3a:73:c1:
                    e5:07:06:e1:32:8d:54:2b:f4:3b:6a:f4:4b:40:58:
                    67:aa:70:ef:ad:fa:1a:ab:2d:ce:47:6f:4b:fb:6e:
                    26:b6:de:da:f1:47:ed:04:2a:7d:d2:35:99:53:b5:
                    cd:c1:7e:90:5a:46:a7:8e:ed:cf:60:89:d5:05:01:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:13:60:47:5D:43:0B:BD:C8:22:5D:FE:2A:90:68:44:57:5B:7C:67
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a383030303a3a2f33342d3334203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:40:7a:7a:e5:ff:a2:83:48:64:57:ef:7c:23:fe:ee:49:57:
         63:d2:62:dd:6f:01:8e:44:2f:12:fc:65:5c:c9:88:41:ed:78:
         21:f5:6b:15:f7:26:43:bb:1a:37:da:87:a2:d6:af:72:0a:be:
         2b:8a:17:d4:2c:8b:e2:13:bd:83:b4:23:4a:5b:19:64:02:4f:
         dc:f0:d4:b3:80:78:63:b2:f3:6f:38:25:2a:9e:5b:a6:30:e5:
         6a:7e:34:60:ca:c8:11:64:f5:9f:01:43:57:57:00:f4:38:6b:
         2e:ce:b7:2a:d7:b4:80:d4:fa:33:7a:a5:9c:51:16:33:28:bf:
         5c:c3:5d:c2:24:ad:a0:07:fd:96:bc:9e:22:2d:0e:2b:1a:6c:
         e2:a2:90:01:f9:d0:32:31:73:34:26:b7:9b:e0:17:55:d7:03:
         42:c8:18:f0:02:c7:24:ee:0f:84:ce:ef:34:07:7c:77:27:d9:
         2c:e0:b9:94:71:fa:b0:cf:43:b0:e9:cf:c2:43:e8:22:9a:a9:
         2f:89:75:c1:65:01:f1:ea:29:e4:1e:ba:ec:53:63:5c:69:9b:
         7e:d1:b1:d5:c0:7e:0f:1a:3d:61:ec:81:19:00:8f:92:ce:32:
         2d:05:87:ec:1e:47:9f:ef:74:b3:aa:cf:bc:9d:73:8e:f8:4c:
         a9:f6:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:40:03 2026 by rpki-client