Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/323830343a373762343a3a2f33322d313238203d3e20323731313934.roa
File:                     323830343a373762343a3a2f33322d313238203d3e20323731313934.roa (raw, json)
Hash identifier:          QrV2kPc7o9mdMAcX/ErA0D/KceQFmpSadi/cRSliiUk=
Subject key identifier:   26:E7:A6:D4:04:5C:74:BE:02:F5:F9:5C:47:66:53:07:CB:8C:29:E2
Certificate issuer:       /CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
Certificate serial:       79ADB1C8CCF5D1E99AAD7BFC020FAA68D8C7895B
Authority key identifier: 9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/323830343a373762343a3a2f33322d313238203d3e20323731313934.roa
Signing time:             Tue 08 Sep 2026 00:10:25 +0000
ROA not before:           Tue 08 Sep 2026 00:05:25 +0000
ROA not after:            Tue 07 Sep 2027 00:10:25 +0000
asID:                     271194
IP address blocks:        2804:77b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl
                          rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 16:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ad:b1:c8:cc:f5:d1:e9:9a:ad:7b:fc:02:0f:aa:68:d8:c7:89:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
        Validity
            Not Before: Sep  8 00:05:25 2026 GMT
            Not After : Sep  7 00:10:25 2027 GMT
        Subject: CN=26E7A6D4045C74BE02F5F95C47665307CB8C29E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:40:f4:ad:cb:c4:28:ef:23:a2:c1:89:27:
                    09:67:52:e0:90:25:bb:dc:5c:26:76:da:6a:fe:de:
                    5f:be:7c:32:74:ae:57:23:e9:20:98:b6:6a:16:4e:
                    a0:eb:8a:7a:95:99:4a:5f:a0:be:a1:8b:b9:9a:75:
                    6f:6e:65:ee:cf:29:90:58:6f:c9:44:19:cb:03:f2:
                    b1:e5:64:d5:fd:c7:34:e2:0c:59:6e:54:c7:85:c9:
                    2e:1f:2a:f0:20:70:ae:78:34:a7:31:12:6e:d3:16:
                    04:b4:41:ae:0e:6a:5f:d5:23:9c:2a:e6:25:17:f9:
                    bc:ca:c2:e1:af:86:29:76:e4:2a:e0:05:af:48:2a:
                    a1:04:b1:3e:28:a5:5a:5a:aa:b4:c7:ba:97:9c:f2:
                    7e:f4:8f:94:fe:2b:99:f7:6f:16:17:fa:41:3f:f6:
                    61:cd:b3:71:36:98:4e:bf:08:48:95:66:c0:bc:de:
                    6d:63:0a:26:68:3c:4a:9b:1d:39:a3:9c:40:c1:cf:
                    5f:f5:fe:2f:5a:b9:d5:f7:50:70:10:e5:77:45:cd:
                    fd:c3:01:e6:c6:1e:2e:6a:de:aa:86:a8:52:a3:3a:
                    57:b8:81:1c:a1:7d:bd:9c:df:ba:da:80:c8:04:c3:
                    35:91:44:e2:f7:2c:6a:4d:e5:8f:67:7d:e9:8e:56:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:A6:D4:04:5C:74:BE:02:F5:F9:5C:47:66:53:07:CB:8C:29:E2
            X509v3 Authority Key Identifier:
                keyid:9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/323830343a373762343a3a2f33322d313238203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:e4:d3:d4:1a:78:2d:fa:8a:b0:06:ec:af:a1:75:10:6a:bd:
         55:25:ca:94:43:b0:b5:fe:fe:57:f4:84:70:d4:e5:3b:0b:51:
         e3:bb:d1:4d:f4:85:1c:02:3f:c0:7f:bb:1b:a9:ee:dd:a0:cb:
         6b:3a:af:3a:e7:09:b6:c3:32:09:b5:9e:cb:85:69:1b:f9:0c:
         77:a2:e8:46:f0:4d:c0:ea:39:0c:0e:99:15:b4:f0:33:ab:26:
         e9:68:c5:d5:c1:9f:3d:48:5b:64:05:d1:1c:d0:d7:c1:63:02:
         a9:46:f4:50:6d:60:77:28:e7:4d:3e:e1:76:17:3a:7c:56:7b:
         61:ff:bf:75:a8:8b:d9:b4:c2:df:c8:44:d4:42:02:bc:47:f6:
         34:d2:71:25:8c:e6:0f:ee:b2:30:c8:21:9e:24:06:93:e7:5c:
         05:d7:29:ef:0b:81:06:c7:d2:83:69:1f:43:7c:99:cb:63:0f:
         ed:6c:89:05:cf:12:13:7a:50:b3:29:02:af:7a:23:f0:36:c3:
         e3:0a:82:9e:ce:5a:94:51:4b:5f:b8:7c:66:28:7f:f8:86:d7:
         0e:07:a4:33:98:e3:fc:e4:d4:72:1a:a8:61:97:63:67:a1:3d:
         0e:07:ec:4c:97:36:ab:3e:b9:c9:cd:89:29:42:4f:9f:ed:29:
         5c:b7:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:03:50 2026 by rpki-client