Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a31303a3a2f34342d3434203d3e20323638303838.roa
File:                     323830343a353764303a31303a3a2f34342d3434203d3e20323638303838.roa (raw, json)
Hash identifier:          5RsCunbAzVmXRdHhVQ4CwC02oSHSJJgmvyIKzhVGC1w=
Subject key identifier:   A7:CD:7C:01:E0:4D:2D:AC:5F:F1:D9:DD:78:AC:7D:EC:1F:6C:43:9A
Certificate issuer:       /CN=494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7
Certificate serial:       64CD53142F8DDA254CB0D396FE6695814938859B
Authority key identifier: 49:40:69:E5:7B:43:B0:EF:0F:AF:4C:C7:D3:98:9B:C9:18:9B:A9:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a31303a3a2f34342d3434203d3e20323638303838.roa
Signing time:             Mon 05 Oct 2026 22:14:23 +0000
ROA not before:           Mon 05 Oct 2026 22:09:23 +0000
ROA not after:            Mon 04 Oct 2027 22:14:23 +0000
asID:                     268088
IP address blocks:        2804:57d0:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.crl
                          rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 19:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cd:53:14:2f:8d:da:25:4c:b0:d3:96:fe:66:95:81:49:38:85:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7
        Validity
            Not Before: Oct  5 22:09:23 2026 GMT
            Not After : Oct  4 22:14:23 2027 GMT
        Subject: CN=A7CD7C01E04D2DAC5FF1D9DD78AC7DEC1F6C439A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:91:f3:37:7e:61:0a:c0:31:14:82:9f:3e:
                    b1:7a:b0:a9:b5:61:2c:db:4f:76:4b:ce:10:68:77:
                    e6:49:61:bb:ec:63:fb:a3:e1:64:f3:55:eb:bb:a0:
                    f1:46:a0:0b:d4:e6:20:8f:e2:41:5e:c7:f3:2a:2c:
                    8b:cb:23:e5:71:ee:60:6b:23:12:42:61:63:fb:eb:
                    88:89:2c:82:eb:bb:2f:3f:64:b7:12:6a:da:99:9e:
                    24:f1:f4:74:20:06:e4:ad:e4:14:52:67:ba:45:09:
                    d0:0b:d1:dc:bc:2e:a0:70:a4:24:47:5b:24:d3:8b:
                    be:c8:ff:6c:14:59:71:d3:7e:5b:f2:0f:4c:80:92:
                    e7:63:70:56:91:c7:24:07:9f:fd:0b:89:97:ea:3c:
                    b7:94:30:16:09:6f:f5:17:a4:fa:47:ca:ac:f2:8a:
                    ae:61:14:d3:b8:30:ba:97:e9:ae:f2:c4:d8:57:f9:
                    e0:45:82:7b:00:7f:c7:c6:35:6b:7e:95:06:de:c3:
                    95:48:0a:c4:0e:fb:84:06:d9:c0:c9:4d:51:0a:6a:
                    f0:55:a1:46:05:3f:1f:1a:49:20:1c:4a:d4:21:83:
                    ec:a5:fe:8e:01:98:66:28:ab:e3:8a:ba:41:1a:88:
                    14:8d:02:c6:20:66:82:2b:ef:28:0b:50:49:89:93:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CD:7C:01:E0:4D:2D:AC:5F:F1:D9:DD:78:AC:7D:EC:1F:6C:43:9A
            X509v3 Authority Key Identifier:
                keyid:49:40:69:E5:7B:43:B0:EF:0F:AF:4C:C7:D3:98:9B:C9:18:9B:A9:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a31303a3a2f34342d3434203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57d0:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         70:f0:8a:85:a8:2d:c9:7a:f7:3d:27:1d:64:98:c6:44:be:60:
         f5:c1:5f:ad:2a:c4:95:79:89:7e:9a:0a:4b:2a:65:e8:ad:cf:
         9f:38:21:b3:92:c2:ca:2f:5c:85:9a:e1:52:10:2c:19:ca:2e:
         51:c6:94:6c:14:73:87:a9:5b:b2:52:b6:89:4d:74:57:44:2d:
         f1:04:77:3f:d4:72:e7:f5:b7:2a:43:36:cd:0a:32:a2:68:2e:
         9a:e6:35:41:f9:6a:af:de:49:a7:ca:91:31:85:c6:b9:de:d2:
         00:f2:b7:7d:53:35:b9:78:3f:97:b5:83:12:80:85:d3:50:31:
         35:da:cc:0f:43:a4:62:20:3b:6c:23:0d:e2:a2:aa:46:fb:ba:
         ca:5e:e7:44:11:bc:59:7a:96:76:56:f3:fb:e7:b8:ed:9f:93:
         97:8c:55:ce:29:43:2b:a8:1b:77:4d:39:e7:d0:30:23:f4:61:
         4c:d1:c8:d9:6a:da:33:0d:80:1b:28:bb:cd:be:95:7e:e1:86:
         fa:e5:34:48:d6:bd:b0:32:d6:de:e4:be:d3:4b:4c:08:98:3c:
         9a:79:df:b4:ed:f3:32:b7:8d:19:2f:e6:d3:43:a0:b9:fe:b3:
         76:89:3a:f0:d8:5d:51:6e:8e:9b:c7:02:99:09:4d:cf:d3:ee:
         a4:87:d0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:41:15 2026 by rpki-client