Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a383030303a3a2f33332d3333203d3e20323635343834.roa
File:                     323830343a333464383a383030303a3a2f33332d3333203d3e20323635343834.roa (raw, json)
Hash identifier:          IbfV8z1Nlu6mAXeOlJqD6ntAis9NEAQ4+t6ssFzJETs=
Subject key identifier:   F1:DC:FF:E2:ED:C3:2A:B3:43:45:C4:99:6B:BF:CC:C4:9E:68:F1:93
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       4D10CBD2D79C2F4FF96DBD59F32A907A6AE17D07
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a383030303a3a2f33332d3333203d3e20323635343834.roa
Signing time:             Thu 08 Oct 2026 14:50:51 +0000
ROA not before:           Thu 08 Oct 2026 14:45:51 +0000
ROA not after:            Thu 07 Oct 2027 14:50:51 +0000
asID:                     265484
IP address blocks:        2804:34d8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 21:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:10:cb:d2:d7:9c:2f:4f:f9:6d:bd:59:f3:2a:90:7a:6a:e1:7d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Oct  8 14:45:51 2026 GMT
            Not After : Oct  7 14:50:51 2027 GMT
        Subject: CN=F1DCFFE2EDC32AB34345C4996BBFCCC49E68F193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:3e:e0:02:75:dc:cc:54:c1:a0:72:a1:9e:
                    f8:2b:9d:a5:1a:7c:88:fa:fc:2d:5e:83:bd:8c:4d:
                    23:fb:36:fb:d3:61:3f:52:ed:59:90:62:55:42:13:
                    46:9d:38:45:2a:b6:2f:e9:0b:56:c6:a2:c7:ac:c2:
                    76:98:9a:7a:2b:fe:39:5a:f6:17:29:78:63:c9:5d:
                    d7:aa:86:c8:d5:eb:32:40:d4:77:32:5a:14:82:c2:
                    d4:23:9c:14:5b:30:43:27:d9:bd:84:aa:33:93:08:
                    6b:ae:1f:9d:e9:50:76:a0:fe:3a:53:e0:df:2e:79:
                    c7:35:83:e3:f7:f0:ca:c0:58:75:18:32:3f:cf:2a:
                    88:3e:f7:5b:09:bb:cd:e4:c3:ed:af:c0:99:98:89:
                    9d:23:a8:9e:4b:63:c8:8f:3f:31:10:f0:cd:b5:d1:
                    27:08:a7:a7:e7:56:a0:82:cf:2b:a1:03:e3:88:20:
                    71:8b:75:79:7f:04:56:b3:83:e5:2f:6f:54:64:e1:
                    1d:06:c4:86:09:a6:3b:8c:c7:89:de:50:2a:02:62:
                    67:28:ae:5f:60:ca:c1:b7:14:4d:47:45:1a:fb:88:
                    15:5c:5b:f7:e1:61:66:9f:9b:74:33:9d:02:78:f5:
                    a3:4c:b6:f0:bc:15:14:1c:99:a7:f4:f8:02:15:9e:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DC:FF:E2:ED:C3:2A:B3:43:45:C4:99:6B:BF:CC:C4:9E:68:F1:93
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a383030303a3a2f33332d3333203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9e:90:5a:74:8a:d6:c2:fa:70:2b:60:68:92:3f:21:e4:a0:1c:
         4c:13:85:25:ae:65:7a:6c:80:f6:b2:f6:00:c7:57:fe:44:65:
         0a:8b:c0:b1:9a:46:fb:a4:5e:74:b9:af:a3:97:3f:f9:af:e7:
         46:9c:19:24:e5:fb:f2:ca:0d:79:f9:a1:d0:5c:24:a5:4e:3d:
         c6:8b:00:b8:64:7e:1d:dd:39:e6:a8:46:1f:b7:00:78:97:70:
         14:91:50:8c:69:c1:d8:7e:8b:09:70:8a:db:b2:ec:63:61:3e:
         ee:f4:cc:d5:f4:e1:51:a1:d4:0f:eb:66:6d:3f:49:8f:cc:dd:
         2c:68:ef:b0:b9:45:1b:80:21:e6:3c:71:56:18:7c:ae:93:ed:
         a5:4c:2a:55:f7:6e:4f:e4:5d:01:02:20:fb:51:4e:b2:e8:d9:
         3d:07:53:52:1a:2a:3e:8a:cd:31:5c:62:82:34:d8:a7:a8:fd:
         c5:29:df:c0:73:1d:ce:7b:76:e6:a1:50:7a:03:44:42:2d:a0:
         54:34:43:19:2f:8e:b8:d2:ef:d7:02:d3:1b:0e:bd:28:84:81:
         16:da:61:7e:8d:3e:c8:5c:a5:14:39:c3:de:5e:d3:76:a5:5b:
         b0:a6:9b:2b:9e:fd:37:43:21:67:12:2d:39:26:52:bb:65:b6:
         59:d9:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:39:45 2026 by rpki-client