Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a323030303a3a2f33352d3335203d3e20323635343834.roa
File:                     323830343a333464383a323030303a3a2f33352d3335203d3e20323635343834.roa (raw, json)
Hash identifier:          YAxx3QnNo1lMHD4O5saLH2PjdcUTDe1l1DmBZ41WsJQ=
Subject key identifier:   2F:02:F5:C9:11:F4:3E:00:96:D9:FF:B1:1C:47:FA:F1:7F:D5:AA:94
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       6030DDE75D64691F6E4312EC209BDAA49E275A4D
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a323030303a3a2f33352d3335203d3e20323635343834.roa
Signing time:             Thu 08 Oct 2026 14:50:07 +0000
ROA not before:           Thu 08 Oct 2026 14:45:07 +0000
ROA not after:            Thu 07 Oct 2027 14:50:07 +0000
asID:                     265484
IP address blocks:        2804:34d8:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 15:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:30:dd:e7:5d:64:69:1f:6e:43:12:ec:20:9b:da:a4:9e:27:5a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Oct  8 14:45:07 2026 GMT
            Not After : Oct  7 14:50:07 2027 GMT
        Subject: CN=2F02F5C911F43E0096D9FFB11C47FAF17FD5AA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:f4:19:f8:33:85:52:36:53:f7:7f:b7:34:
                    1f:74:64:01:11:47:11:b2:f7:e0:7e:93:8a:9c:ac:
                    af:c7:99:dc:67:48:6b:f2:cd:cc:9e:2b:8d:ca:ba:
                    8d:34:65:45:b2:cb:73:c8:aa:fd:aa:ed:79:50:b8:
                    81:54:1b:7d:a1:a7:9e:9a:0e:78:0d:ea:e9:9c:54:
                    7c:9e:38:e3:23:33:45:1c:25:43:d5:b6:a4:76:b6:
                    a3:ef:f0:09:9c:80:c8:49:23:ce:0e:d2:f2:94:17:
                    61:15:d7:cd:0e:d0:06:30:f7:c9:b0:ae:94:2a:e7:
                    7c:22:4c:f2:0f:10:03:e5:ec:f6:82:c0:10:d5:8f:
                    ec:cd:b8:b7:bd:ad:d4:7f:0e:06:3b:4f:92:b6:ed:
                    bf:8d:26:f9:bb:f4:6e:45:f4:ea:87:bc:8c:53:24:
                    45:2b:d6:8b:80:d1:ea:f6:61:1e:3f:eb:c1:d8:e8:
                    5e:46:65:be:dc:43:55:69:bc:fe:d3:8f:36:bf:e1:
                    1c:20:b2:b0:25:d9:16:27:1a:78:72:ed:ab:af:e1:
                    bf:13:c2:c2:b4:ca:0c:a6:0a:bf:2c:60:e4:34:27:
                    8f:b0:4b:fa:68:74:81:11:44:4c:04:5d:39:2e:c0:
                    b0:12:1e:ae:55:47:5f:20:41:18:d2:d8:46:24:fa:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:F5:C9:11:F4:3E:00:96:D9:FF:B1:1C:47:FA:F1:7F:D5:AA:94
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a323030303a3a2f33352d3335203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         d2:c0:cf:f7:0e:d2:4f:df:bc:47:d8:17:33:b9:1b:48:8a:13:
         b2:10:56:fe:7f:86:f8:37:8d:7c:3e:fa:a4:62:c1:ea:49:0e:
         8c:76:b0:ac:f6:0b:a7:76:5d:a1:de:00:ed:38:f3:61:2f:4e:
         4f:79:3d:33:ee:71:5c:62:e7:f9:61:92:73:15:bc:21:ba:e3:
         f1:f4:85:7a:4c:0b:27:a4:8c:b4:80:73:40:79:da:09:8d:2a:
         1c:70:33:fd:3b:92:57:d0:7c:fe:77:e0:97:40:c5:80:56:b4:
         5d:f2:63:84:c2:f3:73:e1:7d:eb:eb:71:1d:db:09:a1:4f:04:
         ca:b3:93:d2:16:08:60:15:14:2a:42:a2:2d:8c:c6:13:3f:b7:
         da:83:e4:86:28:84:12:91:ec:79:b3:88:7c:f2:b2:f2:38:44:
         9f:80:c7:88:2b:1d:88:82:91:a2:1d:0f:8f:94:8e:e0:6f:7b:
         35:4e:5b:08:32:38:c7:21:e1:af:81:58:3b:5d:14:01:fb:e0:
         07:20:f7:c3:f3:10:1f:31:67:12:01:f1:6e:f0:dd:4b:13:33:
         18:ce:62:5c:d1:db:72:e1:39:f2:86:f6:1d:6d:20:ca:2e:cc:
         9f:f4:26:35:f0:9e:04:a2:a7:04:42:e7:3d:2a:34:a8:ee:11:
         52:25:b7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:33:25 2026 by rpki-client