Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/323830343a363366303a3a2f33322d3438203d3e20323639333933.roa
File:                     323830343a363366303a3a2f33322d3438203d3e20323639333933.roa (raw, json)
Hash identifier:          8zdo9TC2njIceEiWdmKpp7SQal+Hyou3n2NPF2A7iuI=
Subject key identifier:   F8:65:C3:F2:DF:70:06:AB:EB:8C:10:1B:BE:D6:64:A2:BC:65:99:ED
Certificate issuer:       /CN=E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0
Certificate serial:       1F02BA7AEAC674FB52A3784D4E99F76EE906FAAD
Authority key identifier: E7:3B:2E:95:58:99:0A:AF:0B:7C:79:48:6A:B6:D0:CD:62:57:D0:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/323830343a363366303a3a2f33322d3438203d3e20323639333933.roa
Signing time:             Sat 05 Sep 2026 01:41:15 +0000
ROA not before:           Sat 05 Sep 2026 01:36:15 +0000
ROA not after:            Sat 04 Sep 2027 01:41:15 +0000
asID:                     269393
IP address blocks:        2804:63f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.crl
                          rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 17:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:02:ba:7a:ea:c6:74:fb:52:a3:78:4d:4e:99:f7:6e:e9:06:fa:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0
        Validity
            Not Before: Sep  5 01:36:15 2026 GMT
            Not After : Sep  4 01:41:15 2027 GMT
        Subject: CN=F865C3F2DF7006ABEB8C101BBED664A2BC6599ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8c:ab:b6:62:90:04:5e:01:e1:01:bf:b7:9d:
                    c8:0f:7d:31:d8:61:ca:89:90:89:27:a8:f5:10:16:
                    7a:0b:19:b0:5f:6a:97:29:22:56:d6:02:38:6d:a9:
                    ba:83:63:fa:26:a1:31:58:25:7f:85:d3:e5:b5:66:
                    ab:88:4a:0f:0e:86:be:ed:1b:fb:c7:31:ba:43:15:
                    5e:dd:be:32:3c:74:93:21:87:85:20:b8:16:fd:47:
                    31:53:30:24:74:43:8f:d5:96:d3:df:46:35:79:8b:
                    d2:f8:cf:ee:8e:b8:3b:94:8c:f8:9b:94:42:30:33:
                    f1:70:ca:55:49:84:42:38:21:98:2d:52:e5:8d:8d:
                    35:4a:e2:7b:00:d6:01:3c:3f:d9:05:5e:42:dd:03:
                    2f:be:fa:55:e2:ac:03:ba:03:85:11:71:d7:75:93:
                    c3:0b:b3:eb:d7:4e:09:28:8a:96:55:0e:99:4d:e3:
                    a2:d2:b0:3c:95:27:14:3e:98:e6:af:46:61:1b:f5:
                    04:98:3c:f3:9d:db:ba:6b:74:58:19:f8:5d:cc:f4:
                    43:9f:7b:7b:1a:64:7e:04:39:a2:81:e8:d5:3d:ca:
                    53:30:20:d5:4a:1f:a4:ce:fb:d8:38:8c:6f:6d:62:
                    09:b0:d6:21:0a:05:ae:4a:78:68:00:ed:9f:0e:f4:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:65:C3:F2:DF:70:06:AB:EB:8C:10:1B:BE:D6:64:A2:BC:65:99:ED
            X509v3 Authority Key Identifier:
                keyid:E7:3B:2E:95:58:99:0A:AF:0B:7C:79:48:6A:B6:D0:CD:62:57:D0:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/323830343a363366303a3a2f33322d3438203d3e20323639333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:bf:6a:1d:ce:61:91:4a:68:a6:56:3a:09:01:f9:08:ec:
         fd:6e:b6:02:ff:33:3f:5c:88:5a:bf:5c:ad:3e:48:17:3d:53:
         a0:61:5b:f3:17:45:04:1a:09:c3:de:77:a3:9c:4c:98:4f:9b:
         23:69:4c:86:ce:a3:dc:36:6f:8d:4f:46:db:af:7d:a9:7a:56:
         59:f2:67:7e:26:5f:77:14:b1:7e:34:e6:49:25:de:4d:ce:0b:
         41:49:aa:0a:65:78:2a:a4:b3:4b:fa:27:36:ba:32:db:80:78:
         f9:74:66:f5:6e:22:ec:ac:5b:76:cb:d7:61:9e:29:49:df:86:
         4a:7b:99:2b:f1:d2:09:76:93:8f:83:7b:8d:29:7c:9d:52:ed:
         86:cb:00:25:b3:06:3b:84:92:7d:78:03:08:5a:85:b3:52:8b:
         b4:05:80:e3:ec:19:4a:88:29:1e:d0:d8:a0:e4:65:20:b0:1b:
         33:22:2a:7a:19:19:74:f3:e7:a2:a3:6b:7a:5f:45:2d:57:9c:
         c8:a4:59:9a:0f:5d:f0:01:91:7c:21:2a:f1:75:aa:70:cd:9c:
         ab:c1:93:51:95:fa:1b:f0:52:cb:13:eb:68:22:30:e4:42:d7:
         23:ea:5b:2b:13:49:e4:2a:2f:5b:80:62:4c:75:48:15:98:56:
         04:ee:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:23:57 2026 by rpki-client