Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d313238203d3e20323731343738.roa
File:                     323830343a376332343a643030303a3a2f33362d313238203d3e20323731343738.roa (raw, json)
Hash identifier:          LoG0r8fmQOarHFlR0wqB2E1pqAK996hpxWyftH9eamI=
Subject key identifier:   42:7A:F7:16:1D:31:76:21:73:E5:AA:05:4B:96:0B:0D:66:1A:98:3A
Certificate issuer:       /CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
Certificate serial:       49EEACAA9E934F9A5F9AE37D0307CFCD79D7B0D8
Authority key identifier: 0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d313238203d3e20323731343738.roa
Signing time:             Wed 23 Sep 2026 17:00:40 +0000
ROA not before:           Wed 23 Sep 2026 16:55:40 +0000
ROA not after:            Wed 22 Sep 2027 17:00:40 +0000
asID:                     271478
IP address blocks:        2804:7c24:d000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ee:ac:aa:9e:93:4f:9a:5f:9a:e3:7d:03:07:cf:cd:79:d7:b0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
        Validity
            Not Before: Sep 23 16:55:40 2026 GMT
            Not After : Sep 22 17:00:40 2027 GMT
        Subject: CN=427AF7161D31762173E5AA054B960B0D661A983A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:2e:2f:2c:94:59:42:b8:80:32:23:9f:ab:
                    53:b4:fa:7d:aa:20:a6:bf:f2:26:b6:57:f9:eb:54:
                    da:95:ed:e2:5b:60:7d:91:55:8a:25:55:17:c2:22:
                    00:69:a9:12:9a:27:6e:85:9f:e0:4e:b1:a9:a2:4c:
                    bc:09:13:c3:41:28:ab:ff:ab:d2:57:9a:5b:49:a6:
                    0b:20:74:58:6a:34:aa:4b:19:f9:00:45:c5:19:1d:
                    05:69:c0:4f:d0:48:99:ac:64:03:92:d0:d0:70:c2:
                    1a:33:17:c2:55:54:2f:09:7c:0a:9e:99:b2:4b:c3:
                    1e:0c:d7:40:41:e1:a4:63:88:7f:02:08:31:ce:6f:
                    e1:b8:93:5c:e9:ea:ff:49:9f:98:f2:da:31:46:76:
                    44:b7:7c:b8:c7:b1:9c:98:7e:b1:37:b6:db:cd:7e:
                    cf:75:81:47:17:94:67:74:0f:6c:ad:e1:6f:f0:63:
                    f2:8e:f5:1f:b4:89:95:d9:c3:a4:f1:5b:0f:ac:e2:
                    5b:54:11:83:cd:99:93:15:00:41:e4:7d:b4:b6:39:
                    67:de:ee:3b:c3:cc:fd:35:66:59:01:3b:72:18:1a:
                    ee:84:19:0d:73:31:fb:b1:ed:06:d7:bf:a9:63:b4:
                    70:5a:bf:0d:95:41:c9:e0:e6:58:85:28:d9:16:0a:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7A:F7:16:1D:31:76:21:73:E5:AA:05:4B:96:0B:0D:66:1A:98:3A
            X509v3 Authority Key Identifier:
                keyid:0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d313238203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:fc:3b:03:3e:76:22:20:18:dc:3a:ec:1b:ee:9f:83:e5:6a:
         5e:6b:e4:ce:a8:bf:0c:c1:1f:f8:03:f0:36:53:51:8f:93:50:
         96:68:fe:74:9c:7c:34:c4:ce:9c:72:96:b9:e1:69:88:a7:a8:
         7f:7d:fb:45:17:a3:43:81:b5:4a:fe:b7:90:86:e5:a9:60:2d:
         ee:a1:24:16:f1:41:37:9b:e1:49:92:50:93:2f:2a:aa:ad:d1:
         5b:c2:90:85:bf:9e:bd:ef:a8:81:69:bc:07:30:75:a2:e3:05:
         d3:f7:e1:79:30:28:9e:7e:5b:cc:97:1a:2e:a7:81:49:c7:bf:
         ac:70:07:49:0b:73:df:ba:f5:49:f0:6c:bc:65:31:86:f6:40:
         d1:49:d0:88:f9:b6:0f:11:d2:35:3c:c0:77:b4:94:d6:a6:3f:
         ba:36:3a:e9:d7:3e:4e:90:2d:18:44:53:b5:0c:c0:b5:62:98:
         d8:b9:72:ff:b7:06:26:b9:e0:69:d5:ec:bc:f1:61:1d:c0:a0:
         5a:35:7d:a9:3c:1e:83:2b:30:50:39:16:14:3c:06:00:d7:21:
         ec:25:f9:d3:be:e7:fe:7c:60:fb:5f:99:e4:89:e6:06:49:37:
         83:2f:75:e5:a5:f0:3d:23:68:4e:8c:2e:23:f3:f5:40:10:2e:
         e8:11:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:48:13 2026 by rpki-client