Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3332203d3e20323636343731.roa
File:                     323830343a333835383a3a2f33322d3332203d3e20323636343731.roa (raw, json)
Hash identifier:          XPmTLqac4zmGbtSP/hu/DUnLnz2fOEGbhZPClMceOKQ=
Subject key identifier:   E4:52:52:61:FD:00:25:64:AD:91:DA:AE:00:FF:19:C3:A4:93:BB:E8
Certificate issuer:       /CN=D1513638404A484545681236A6B4FFB90E8BE7D2
Certificate serial:       26D1D27561B0828EC6F4FFA72A53B29F3E706E15
Authority key identifier: D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3332203d3e20323636343731.roa
Signing time:             Fri 18 Sep 2026 21:00:28 +0000
ROA not before:           Fri 18 Sep 2026 20:55:28 +0000
ROA not after:            Fri 17 Sep 2027 21:00:28 +0000
asID:                     266471
IP address blocks:        2804:3858::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 09:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d1:d2:75:61:b0:82:8e:c6:f4:ff:a7:2a:53:b2:9f:3e:70:6e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1513638404A484545681236A6B4FFB90E8BE7D2
        Validity
            Not Before: Sep 18 20:55:28 2026 GMT
            Not After : Sep 17 21:00:28 2027 GMT
        Subject: CN=E4525261FD002564AD91DAAE00FF19C3A493BBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:3e:68:25:bf:67:c8:31:2c:46:11:ff:76:
                    41:18:b7:0c:54:d1:fc:2f:cb:55:cc:5c:a9:73:c1:
                    d8:05:79:e2:4e:ef:77:bc:3d:02:de:c9:54:11:78:
                    04:85:5f:48:0e:2e:71:c2:fc:9f:48:e6:6a:34:e8:
                    4d:93:9b:0c:ce:4e:d6:2d:d9:bf:c0:ed:62:09:29:
                    13:64:28:1a:d2:56:be:fe:d1:ad:d5:98:09:ec:fc:
                    5d:ff:bb:b2:60:03:e2:95:d3:21:fa:4c:84:f8:5d:
                    e4:2f:4d:be:3c:0a:1f:e8:66:95:c1:a2:5f:a6:81:
                    24:0e:86:3b:c1:15:a9:ec:46:f6:95:bd:b5:6e:c6:
                    ec:bb:24:30:b2:04:f9:90:68:36:c5:c2:bb:c6:36:
                    e7:93:4a:f1:23:33:7f:88:00:75:a1:06:bd:61:4e:
                    e2:ce:18:f4:01:fe:81:5c:36:2c:8a:65:b8:ff:22:
                    cf:30:f4:7d:ef:af:a7:16:6a:ce:65:b4:53:b9:1e:
                    7e:ee:7b:58:11:8d:39:1b:be:db:a7:10:73:fc:a9:
                    92:99:d1:9a:0f:35:91:b0:2f:6f:36:8c:b7:2a:a4:
                    a4:fc:95:7d:3b:f9:c4:ce:84:3f:9f:e8:a7:ba:98:
                    27:14:36:0d:65:23:ac:19:b4:80:5e:c2:bf:51:40:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:52:52:61:FD:00:25:64:AD:91:DA:AE:00:FF:19:C3:A4:93:BB:E8
            X509v3 Authority Key Identifier:
                keyid:D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3332203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:52:a0:bf:9c:8c:a3:e4:43:27:da:b2:6b:34:6c:54:e4:df:
         c2:49:03:ce:f6:99:8c:e8:1c:1d:6d:39:30:23:02:b9:b2:9b:
         97:19:f6:0a:e6:7f:ef:70:83:75:3f:fd:5f:1b:be:f7:4a:51:
         e4:29:49:40:57:f9:c6:14:e0:f8:b8:43:29:16:70:55:0d:f7:
         75:94:ff:a7:6a:95:d7:be:95:29:76:fa:a6:5f:48:e5:93:86:
         ac:60:e3:61:86:c1:57:0a:1c:bc:f1:67:fb:5e:73:c6:96:b9:
         37:7d:91:c9:93:5b:29:b8:c0:56:4f:47:c2:08:9e:b3:e9:44:
         50:bb:a8:20:ce:77:69:ae:65:c8:8e:51:84:6d:de:6e:68:b6:
         2d:c1:62:0e:94:78:b1:4d:af:2b:90:1f:bb:b6:c1:4e:59:f4:
         1a:ef:83:3d:32:c4:9b:16:e5:f6:70:74:12:e2:0c:4b:12:1c:
         a2:cf:2f:2e:a5:9c:d0:5c:95:33:6a:b2:9d:41:b8:14:2c:81:
         f8:3e:94:92:c5:6f:30:4c:9a:f4:2b:65:6d:77:3d:b1:e7:a4:
         b8:2d:73:c4:69:80:2d:65:0d:88:6a:76:4c:c6:de:5b:9d:55:
         c6:81:d5:be:6d:ac:77:cb:be:91:5f:45:dd:64:d3:45:08:42:
         86:b3:d5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:50:54 2026 by rpki-client