Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/323830343a343432343a3a2f33322d3438203d3e20323637363035.roa
File:                     323830343a343432343a3a2f33322d3438203d3e20323637363035.roa (raw, json)
Hash identifier:          gHrlxgoLhbLuTAfhIOUyLaVhH1RJtly2FOIC93OGxQo=
Subject key identifier:   4E:56:AB:11:16:30:FD:45:91:D4:C4:EA:8E:F4:78:00:7B:E8:D0:A8
Certificate issuer:       /CN=A8D6F853C127D85A0E619E7DC31EF9248B9C9429
Certificate serial:       65528DA015FFF6DAB02AA6341A706BDF7CB8244B
Authority key identifier: A8:D6:F8:53:C1:27:D8:5A:0E:61:9E:7D:C3:1E:F9:24:8B:9C:94:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/323830343a343432343a3a2f33322d3438203d3e20323637363035.roa
Signing time:             Tue 01 Sep 2026 21:17:34 +0000
ROA not before:           Tue 01 Sep 2026 21:12:34 +0000
ROA not after:            Tue 31 Aug 2027 21:17:34 +0000
asID:                     267605
IP address blocks:        2804:4424::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.crl
                          rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 23:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:52:8d:a0:15:ff:f6:da:b0:2a:a6:34:1a:70:6b:df:7c:b8:24:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D6F853C127D85A0E619E7DC31EF9248B9C9429
        Validity
            Not Before: Sep  1 21:12:34 2026 GMT
            Not After : Aug 31 21:17:34 2027 GMT
        Subject: CN=4E56AB111630FD4591D4C4EA8EF478007BE8D0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:63:4d:b9:d7:80:30:fa:4a:b8:e3:82:11:8b:
                    76:d8:54:d5:cf:07:be:19:11:60:5f:24:a1:54:01:
                    0b:a3:1f:4e:08:9b:b6:00:8d:08:dd:ea:e8:5a:98:
                    da:72:e0:5f:98:2b:ce:a9:ee:04:b9:db:d9:02:e6:
                    52:47:f3:12:da:84:78:a1:d3:c0:0f:f4:99:21:0f:
                    30:dc:de:fc:b7:bd:68:ee:b2:36:70:58:0a:c5:33:
                    c8:24:9e:39:32:67:4f:b2:23:a7:98:b8:05:18:2c:
                    a0:f1:0f:f3:1e:fd:82:27:c8:ac:f4:99:32:ef:7c:
                    ce:08:7a:f8:1d:9b:23:56:ce:e9:5f:c9:36:36:3e:
                    b5:ac:59:b4:55:77:53:ff:e3:b3:d0:b0:db:49:ae:
                    7b:dd:03:06:a6:3e:ae:51:44:39:df:5d:2a:26:93:
                    4a:05:82:54:f4:a5:72:ff:18:85:d9:b5:4f:bb:f7:
                    60:5d:3f:88:76:cd:51:2c:2f:57:b3:cd:58:8d:ec:
                    18:05:c2:c8:93:24:46:65:d7:b6:b4:b5:ad:a5:01:
                    16:aa:58:44:e3:90:f0:8f:d6:e9:3f:62:8c:b5:82:
                    ad:ac:ce:18:a0:1f:90:c0:fa:80:48:db:c1:34:20:
                    7c:2e:a4:05:49:1a:f8:01:af:43:a8:12:dc:0d:b8:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:56:AB:11:16:30:FD:45:91:D4:C4:EA:8E:F4:78:00:7B:E8:D0:A8
            X509v3 Authority Key Identifier:
                keyid:A8:D6:F8:53:C1:27:D8:5A:0E:61:9E:7D:C3:1E:F9:24:8B:9C:94:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/323830343a343432343a3a2f33322d3438203d3e20323637363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4424::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:e5:55:27:bd:ac:e1:1f:02:b5:61:35:3c:8e:cf:45:79:
         08:24:6b:22:dc:64:f4:49:65:e0:0e:ad:d8:d8:26:56:fe:ed:
         32:7e:61:e1:d1:57:5a:ee:93:70:96:43:b9:e0:a6:5d:8e:b3:
         cb:98:90:12:0a:2b:8a:7e:b2:5a:da:5f:31:b7:93:d8:b7:c4:
         73:96:f6:c2:5f:3f:7f:d5:8c:81:d9:43:e7:80:9a:40:e0:4f:
         7e:ab:3a:0d:35:fc:66:fb:30:d2:93:07:c8:e5:10:bc:e4:8d:
         be:8d:2a:8e:1e:a6:9c:6d:28:a4:0d:f8:7d:9a:14:d9:08:f4:
         63:62:fc:6c:bf:27:1b:1f:de:e8:bf:c7:89:a7:20:91:ae:35:
         53:b3:5f:f6:27:06:6d:79:4e:a0:42:09:be:4a:01:ef:6c:00:
         72:1d:d5:44:ea:86:f6:f8:d5:ef:58:a5:60:92:31:67:2f:af:
         fc:1e:9f:9f:f9:59:7b:39:1b:db:b4:59:4b:51:5e:a1:0c:84:
         0d:38:f1:04:69:73:c5:27:05:58:90:b4:ff:a9:4c:e8:6f:a6:
         42:75:c8:c3:a3:d6:8d:ab:bf:69:fb:25:20:88:c9:68:f4:a8:
         ce:60:d8:a1:f0:1e:6a:5e:50:11:b5:0f:70:80:7c:c0:fe:18:
         bd:a8:71:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZVKNoBX/9tqwKqY0GnBr33y4JEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThENkY4NTNDMTI3RDg1QTBFNjE5RTdEQzMxRUY5MjQ4
QjlDOTQyOTAeFw0yNjA5MDEyMTEyMzRaFw0yNzA4MzEyMTE3MzRaMDMxMTAvBgNV
BAMTKDRFNTZBQjExMTYzMEZENDU5MUQ0QzRFQThFRjQ3ODAwN0JFOEQwQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtY02514Aw+kq444IRi3bYVNXP
B74ZEWBfJKFUAQujH04Im7YAjQjd6uhamNpy4F+YK86p7gS529kC5lJH8xLahHih
08AP9JkhDzDc3vy3vWjusjZwWArFM8gknjkyZ0+yI6eYuAUYLKDxD/Me/YInyKz0
mTLvfM4IevgdmyNWzulfyTY2PrWsWbRVd1P/47PQsNtJrnvdAwamPq5RRDnfXSom
k0oFglT0pXL/GIXZtU+792BdP4h2zVEsL1ezzViN7BgFwsiTJEZl17a0ta2lARaq
WETjkPCP1uk/Yoy1gq2szhigH5DA+oBI28E0IHwupAVJGvgBr0OoEtwNuLltAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUTlarERYw/UWR1MTqjvR4AHvo0KgwHwYDVR0j
BBgwFoAUqNb4U8En2FoOYZ59wx75JIuclCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkN4dE5pa0xaZEZ3RUZiQ3hxU2QzVkxKREN2RVBvQWkxVXN0MkxZelpt
N0cvMS9BOEQ2Rjg1M0MxMjdEODVBMEU2MTlFN0RDMzFFRjkyNDhCOUM5NDI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RDZGODUzQzEyN0Q4NUEw
RTYxOUU3REMzMUVGOTI0OEI5Qzk0MjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZDeHROaWtMWmRGd0VGYkN4cVNkM1ZMSkRDdkVQb0FpMVVzdDJMWXpabTdHLzEv
MzIzODMwMzQzYTM0MzQzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAREJDANBgkqhkiG9w0BAQsFAAOCAQEAiiblVSe9
rOEfArVhNTyOz0V5CCRrItxk9Ell4A6t2NgmVv7tMn5h4dFXWu6TcJZDueCmXY6z
y5iQEgorin6yWtpfMbeT2LfEc5b2wl8/f9WMgdlD54CaQOBPfqs6DTX8Zvsw0pMH
yOUQvOSNvo0qjh6mnG0opA34fZoU2Qj0Y2L8bL8nGx/e6L/Hiacgka41U7Nf9icG
bXlOoEIJvkoB72wAch3VROqG9vjV71ilYJIxZy+v/B6fn/lZezkb27RZS1FeoQyE
DTjxBGlzxScFWJC0/6lM6G+mQnXIw6PWjau/afslIIjJaPSozmDYofAeal5QEbUP
cIB8wP4YvahxHA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 13:13:15 2026 by rpki-client