Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d3332203d3e20323636323238.roa
File:                     323830343a336361633a3a2f33322d3332203d3e20323636323238.roa (raw, json)
Hash identifier:          Y3YJKodNHjNXIzAo084zhryR+THG625UYNIX15fVuqY=
Subject key identifier:   9C:F3:C3:ED:0C:4A:35:40:8A:9B:A9:16:E4:B1:4E:89:5C:E1:1E:10
Certificate issuer:       /CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
Certificate serial:       25D473C6E8BC12AC60B6D39E372AD2DB122D6C5F
Authority key identifier: E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d3332203d3e20323636323238.roa
Signing time:             Wed 23 Sep 2026 01:25:39 +0000
ROA not before:           Wed 23 Sep 2026 01:20:39 +0000
ROA not after:            Wed 22 Sep 2027 01:25:39 +0000
asID:                     266228
IP address blocks:        2804:3cac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl
                          rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 09:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d4:73:c6:e8:bc:12:ac:60:b6:d3:9e:37:2a:d2:db:12:2d:6c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
        Validity
            Not Before: Sep 23 01:20:39 2026 GMT
            Not After : Sep 22 01:25:39 2027 GMT
        Subject: CN=9CF3C3ED0C4A35408A9BA916E4B14E895CE11E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:eb:ca:28:20:45:56:3e:52:ce:21:c1:9e:
                    93:e0:cb:f3:9f:95:f1:fd:20:3b:59:90:3c:40:85:
                    19:4c:b8:74:ba:47:78:95:06:ab:d2:d4:e1:0f:11:
                    c3:bb:0a:dd:11:8a:3e:48:db:fb:f2:78:36:7b:66:
                    4d:01:5e:23:bd:27:29:75:87:14:b8:7c:98:1e:8d:
                    cc:12:b4:9f:88:0c:54:d5:b7:40:cb:6f:18:70:76:
                    7a:3d:e0:88:31:fe:20:c5:12:bd:37:32:5f:95:46:
                    28:3e:9c:5c:ef:b0:43:72:a0:c4:ed:ed:9b:49:47:
                    4c:16:06:97:32:55:d7:68:26:28:c4:11:87:0c:95:
                    61:78:66:df:72:1a:7a:94:42:51:17:64:d6:d1:18:
                    a1:44:48:23:d1:1c:27:eb:df:af:de:9c:25:e8:9f:
                    61:2b:9d:3d:3e:84:aa:87:c8:73:02:b2:22:aa:f0:
                    41:16:73:28:cf:09:10:4b:7c:3e:b5:f7:36:68:34:
                    4a:f8:a1:3a:8b:06:4d:bb:60:88:64:aa:f3:78:8d:
                    2b:e3:92:c5:27:94:81:21:0f:96:a8:b6:89:87:be:
                    ff:11:ab:75:87:6b:58:aa:e2:42:11:a8:36:7a:b3:
                    71:83:ec:d4:ce:a4:67:51:61:18:ac:01:5d:71:2e:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F3:C3:ED:0C:4A:35:40:8A:9B:A9:16:E4:B1:4E:89:5C:E1:1E:10
            X509v3 Authority Key Identifier:
                keyid:E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d3332203d3e20323636323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:fb:39:f1:f3:34:0a:77:6e:fc:91:bd:88:1f:f4:4b:7b:6a:
         53:be:b1:a7:b7:bc:52:07:63:44:37:47:7a:6e:dd:d8:88:9b:
         47:a9:f9:f8:1a:9f:4e:88:5e:bb:76:dd:88:e8:fd:e4:ce:1d:
         21:90:de:d6:5f:02:b2:77:d8:2d:f0:d3:6f:b6:21:fe:dd:1f:
         be:d2:71:1c:af:82:39:c3:a0:6a:38:df:59:39:35:0a:33:6b:
         3c:1e:7d:74:5a:86:f2:f9:90:e9:c4:f1:f3:fb:df:01:87:e0:
         dd:99:ed:46:66:4b:a5:fa:df:e1:d5:69:9c:2d:07:cc:cf:80:
         44:be:7d:5f:91:63:45:19:c3:ed:c2:88:77:d6:e0:d5:c1:50:
         b4:9a:7d:59:0d:b7:d1:2e:b4:d8:0f:44:11:95:05:81:cf:f6:
         08:f4:7d:9b:6a:15:ef:aa:ab:9f:33:b2:e5:44:ac:f9:23:37:
         c9:06:ab:41:ff:7b:12:9b:7f:f5:13:22:51:f0:fd:19:cd:fd:
         af:7d:59:c6:b2:c9:73:0a:92:6c:7a:0e:68:c7:c0:4d:1d:59:
         28:24:a0:e8:e3:ad:f6:26:10:f3:40:32:31:60:71:24:c6:ec:
         92:16:c9:56:b5:72:59:8f:a0:a1:e2:ec:56:f2:1c:5b:16:6b:
         f6:c2:66:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:37:21 2026 by rpki-client