Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a633030303a3a2f33352d3335203d3e20323635343834.roa
File:                     323830343a333464383a633030303a3a2f33352d3335203d3e20323635343834.roa (raw, json)
Hash identifier:          UZDZrMTYPuB1wyNpfEdt0Uo4V436cwey2MC8QgoUI4Y=
Subject key identifier:   0F:12:38:55:C2:D6:C5:EB:7D:84:82:E7:1B:24:9C:1A:BE:99:69:D6
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       2E22A96738ED21F0844F1DCFBEDBCC59388A7D33
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a633030303a3a2f33352d3335203d3e20323635343834.roa
Signing time:             Fri 09 Oct 2026 19:24:21 +0000
ROA not before:           Fri 09 Oct 2026 19:19:21 +0000
ROA not after:            Fri 08 Oct 2027 19:24:21 +0000
asID:                     265484
IP address blocks:        2804:34d8:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 15:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:22:a9:67:38:ed:21:f0:84:4f:1d:cf:be:db:cc:59:38:8a:7d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Oct  9 19:19:21 2026 GMT
            Not After : Oct  8 19:24:21 2027 GMT
        Subject: CN=0F123855C2D6C5EB7D8482E71B249C1ABE9969D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:1b:42:34:64:8c:c8:91:8d:b4:ff:01:5d:
                    b1:e5:8e:0b:ff:33:0a:d4:df:7c:be:ea:73:94:d5:
                    67:64:35:e1:52:9a:cf:db:91:d1:25:bb:85:19:c0:
                    e7:73:d3:52:4d:da:cd:33:78:11:ae:f4:f4:cc:d3:
                    e4:69:99:b1:8d:74:1c:71:86:b5:db:49:13:88:28:
                    69:2e:13:ef:78:ea:11:b2:34:43:6a:a9:05:a1:e9:
                    bb:b0:4d:ce:ae:3f:cf:b9:84:ab:1b:97:8b:ab:cf:
                    d1:a7:f3:8e:34:ef:d3:72:62:85:1d:2f:da:25:b5:
                    fb:ea:95:8a:3e:f9:be:14:9c:d4:3d:3c:6e:ce:40:
                    af:72:32:c8:f5:f0:34:cb:50:be:71:a0:30:15:d1:
                    46:03:c7:2d:5f:c9:76:28:87:d4:71:78:3a:31:21:
                    c0:85:e6:7e:a2:a9:d1:fe:58:28:49:c3:cb:db:55:
                    0d:f1:6a:5e:cb:03:c2:4b:74:08:e1:80:2c:0a:c7:
                    9c:e7:f1:a9:17:2d:dd:8d:ae:1c:2e:1b:ed:d9:c3:
                    38:ee:27:de:08:b0:70:0a:09:81:b9:b3:be:b1:4e:
                    63:24:8a:1f:1d:32:1b:26:9b:df:77:fa:5d:0d:78:
                    13:ce:75:70:47:66:8f:ba:ca:13:83:a2:f0:5f:41:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:12:38:55:C2:D6:C5:EB:7D:84:82:E7:1B:24:9C:1A:BE:99:69:D6
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a633030303a3a2f33352d3335203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         62:35:6f:a6:03:65:16:4f:26:0d:b5:ad:d6:68:28:a5:63:bc:
         ba:a7:4e:e5:f9:99:96:ed:a2:71:3d:ac:e7:21:b6:6e:ee:6c:
         58:aa:49:26:8a:fa:33:ab:12:28:fd:46:7b:fb:5e:15:13:c6:
         aa:d3:d0:89:24:bc:4b:b0:b4:d4:ef:e0:7b:27:29:b9:1a:5a:
         47:9e:72:7c:c8:08:e4:bd:1b:fa:2f:3d:42:a5:30:9d:62:47:
         52:94:54:3c:50:12:42:db:ee:56:12:e0:30:92:47:f5:c2:31:
         67:0c:a8:ea:18:d1:2c:75:8c:dc:53:3d:8a:56:51:48:2d:00:
         84:ac:24:de:a9:77:95:4f:bd:2a:09:73:e5:f7:ae:ab:81:a4:
         3e:2d:05:ea:a6:f1:3c:8f:f3:62:e3:75:f5:78:3d:51:61:97:
         a7:46:2c:20:64:40:4b:d5:8c:3c:db:40:b3:44:88:03:bb:7d:
         fc:a1:2d:59:93:d1:d4:3f:a5:37:0d:83:7b:f7:3e:74:82:18:
         0c:8c:8a:0a:60:1d:c7:0e:a6:7d:b3:d5:eb:c1:2a:37:83:02:
         51:d5:2c:e7:03:43:a7:56:72:2e:f9:d6:08:64:63:ca:0a:8e:
         81:0a:71:e0:00:3e:79:39:59:42:07:96:a1:a8:38:f4:11:dc:
         4c:7b:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:05:46 2026 by rpki-client