Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33322d3332203d3e20323638323632.roa
File:                     323830343a346537343a3a2f33322d3332203d3e20323638323632.roa (raw, json)
Hash identifier:          cMK45gtyid1h/tia6D3299xnpppSmyrwez+5GS3tgWo=
Subject key identifier:   72:00:D5:30:44:DD:A6:84:B1:04:B4:EC:9F:F0:C7:58:27:0D:C3:4F
Certificate issuer:       /CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
Certificate serial:       2BF936350FF1D69F8EAB49EDE5575B42EAAAE71B
Authority key identifier: AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33322d3332203d3e20323638323632.roa
Signing time:             Fri 18 Sep 2026 12:38:35 +0000
ROA not before:           Fri 18 Sep 2026 12:33:35 +0000
ROA not after:            Fri 17 Sep 2027 12:38:35 +0000
asID:                     268262
IP address blocks:        2804:4e74::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f9:36:35:0f:f1:d6:9f:8e:ab:49:ed:e5:57:5b:42:ea:aa:e7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
        Validity
            Not Before: Sep 18 12:33:35 2026 GMT
            Not After : Sep 17 12:38:35 2027 GMT
        Subject: CN=7200D53044DDA684B104B4EC9FF0C758270DC34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:97:93:69:d6:d2:e2:37:10:5f:9b:cf:d8:
                    7e:ae:c5:20:ac:0d:9a:8c:8a:9f:b0:e7:10:32:f3:
                    c5:dc:02:f8:12:c9:a8:be:d5:c1:c4:df:54:81:c6:
                    81:04:50:21:9f:89:09:84:8e:0b:9c:75:74:a1:c2:
                    a7:59:02:37:1e:cb:7b:99:f7:27:9b:bd:76:cb:b9:
                    65:84:a4:d6:3f:4d:70:ee:0f:85:b1:1c:c4:52:19:
                    34:51:da:b6:03:5e:62:24:6c:b5:91:e9:1a:e6:65:
                    5c:33:97:c5:a9:1f:c8:8e:b0:c5:fc:1d:a6:fc:16:
                    9c:b1:c2:6b:bc:2d:23:9f:49:ae:ae:05:57:04:a5:
                    1a:b0:fc:51:b9:35:7d:66:1f:3f:49:35:db:a4:7f:
                    45:e5:13:73:0c:5f:82:c4:3e:b3:15:13:0e:bc:a2:
                    c1:8c:95:4d:6d:78:94:a4:ea:8f:61:d8:91:40:cf:
                    77:4d:9c:97:9b:59:05:2c:56:d2:16:0f:d0:19:fb:
                    08:e7:c2:66:32:2e:8c:fd:d3:84:7d:b0:de:da:cb:
                    58:e5:a3:75:86:c9:2a:cb:bd:74:b6:88:65:7b:82:
                    aa:35:97:9c:d2:9a:ce:1a:31:22:8c:7f:78:f1:b8:
                    6c:db:d9:2e:45:2a:41:77:33:a3:39:ee:32:53:47:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:00:D5:30:44:DD:A6:84:B1:04:B4:EC:9F:F0:C7:58:27:0D:C3:4F
            X509v3 Authority Key Identifier:
                keyid:AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33322d3332203d3e20323638323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e74::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:66:26:25:e9:fb:51:f8:75:6f:67:c1:b8:d3:fc:cf:aa:b2:
         b9:7e:00:fa:64:e6:8e:3c:d3:c2:4d:df:2e:d2:c1:4d:f0:70:
         bc:53:b6:e9:e5:25:3e:f0:55:1a:1f:81:49:4c:8d:e0:6e:6e:
         16:82:c1:6c:a7:33:ff:f3:5c:ac:30:7f:2d:02:19:e3:7a:70:
         a1:0c:c6:79:ee:6d:fc:55:d3:ea:9b:42:e4:40:22:9b:b6:56:
         54:64:bf:03:4e:be:6e:81:ba:04:df:96:56:cf:dc:4d:3a:7d:
         3f:d0:07:19:54:bc:f5:ff:46:37:1c:8e:1c:50:9c:c8:0f:a6:
         af:37:2a:cc:75:b6:0c:be:ce:41:cf:b3:6d:d6:36:d8:bf:df:
         4f:07:20:ff:45:d0:ca:e1:43:a3:10:ff:0c:4e:6e:0e:28:ed:
         49:2c:f5:5f:0a:98:fb:c0:09:9b:86:9e:01:34:a9:e2:16:f9:
         09:15:bd:26:24:14:de:b4:d7:88:ab:9c:97:6c:7c:d4:0b:55:
         8b:2c:d9:36:f6:f1:9d:5a:0e:45:7d:12:40:67:e5:bc:80:02:
         8c:da:a9:9b:a1:1f:3c:25:de:e4:68:2e:44:90:b3:a7:17:a3:
         7a:ef:5e:9d:ca:56:a6:dc:91:0c:38:76:fd:e1:af:87:f4:d3:
         17:bb:f4:0b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUK/k2NQ/x1p+Oq0nt5VdbQuqq5xswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJCMURFRDU3Njc0QjNBRDlGQzdGMTJFMjMzNzQ3MkMy
RDk1RkJGQzAeFw0yNjA5MTgxMjMzMzVaFw0yNzA5MTcxMjM4MzVaMDMxMTAvBgNV
BAMTKDcyMDBENTMwNDREREE2ODRCMTA0QjRFQzlGRjBDNzU4MjcwREMzNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhw5eTadbS4jcQX5vP2H6uxSCs
DZqMip+w5xAy88XcAvgSyai+1cHE31SBxoEEUCGfiQmEjgucdXShwqdZAjcey3uZ
9yebvXbLuWWEpNY/TXDuD4WxHMRSGTRR2rYDXmIkbLWR6RrmZVwzl8WpH8iOsMX8
Hab8Fpyxwmu8LSOfSa6uBVcEpRqw/FG5NX1mHz9JNdukf0XlE3MMX4LEPrMVEw68
osGMlU1teJSk6o9h2JFAz3dNnJebWQUsVtIWD9AZ+wjnwmYyLoz904R9sN7ay1jl
o3WGySrLvXS2iGV7gqo1l5zSms4aMSKMf3jxuGzb2S5FKkF3M6M57jJTRwJHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcgDVMETdpoSxBLTsn/DHWCcNw08wHwYDVR0j
BBgwFoAUq7He1XZ0s62fx/EuIzdHLC2V+/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl
VmovMC9BQkIxREVENTc2NzRCM0FEOUZDN0YxMkUyMzM3NDcyQzJEOTVGQkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCQjFERUQ1NzY3NEIzQUQ5
RkM3RjEyRTIzMzc0NzJDMkQ5NUZCRkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0WGhOb0RwemJaTmpXVHI5S3IyWVFnN0poRjZlMVZIamNuRms3WDNUZVZqLzAv
MzIzODMwMzQzYTM0NjUzNzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAROdDANBgkqhkiG9w0BAQsFAAOCAQEAgGYmJen7
Ufh1b2fBuNP8z6qyuX4A+mTmjjzTwk3fLtLBTfBwvFO26eUlPvBVGh+BSUyN4G5u
FoLBbKcz//NcrDB/LQIZ43pwoQzGee5t/FXT6ptC5EAim7ZWVGS/A06+boG6BN+W
Vs/cTTp9P9AHGVS89f9GNxyOHFCcyA+mrzcqzHW2DL7OQc+zbdY22L/fTwcg/0XQ
yuFDoxD/DE5uDijtSSz1XwqY+8AJm4aeATSp4hb5CRW9JiQU3rTXiKucl2x81AtV
iyzZNvbxnVoORX0SQGflvIACjNqpm6EfPCXe5GguRJCzpxejeu9encpWptyRDDh2
/eGvh/TTF7v0Cw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:22:23 2026 by rpki-client