Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          owMU29iIb5nz41XZjw4MR5I+OwMq8k6TQcLLdUduZHM=
Subject key identifier:   80:8E:F2:6F:10:25:50:69:5F:2C:51:08:1B:6B:E6:F4:04:E4:BE:AE
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       4DB539C7432ED7C2CCAD94F34D91B152A826FA96
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 15 Oct 2026 20:16:43 +0000
ROA not before:           Thu 15 Oct 2026 20:11:43 +0000
ROA not after:            Thu 14 Oct 2027 20:16:43 +0000
asID:                     263357
IP address blocks:        2804:14e4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 10:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b5:39:c7:43:2e:d7:c2:cc:ad:94:f3:4d:91:b1:52:a8:26:fa:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct 15 20:11:43 2026 GMT
            Not After : Oct 14 20:16:43 2027 GMT
        Subject: CN=808EF26F102550695F2C51081B6BE6F404E4BEAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:93:a8:04:db:3b:b3:fe:a2:c3:ef:26:ad:4b:
                    43:69:db:f4:5e:ea:05:59:e0:25:9c:8a:3f:91:78:
                    3f:28:0c:f2:c9:e5:6b:70:55:99:41:85:10:e6:e1:
                    23:ce:7e:72:fc:1f:39:0e:a4:56:8a:35:eb:6e:8b:
                    54:12:99:ff:95:fa:84:bc:3a:4f:ef:8d:15:af:bc:
                    e1:81:cf:b3:50:2b:e4:98:37:a6:39:7e:83:da:62:
                    ed:06:c8:b2:78:5d:92:34:b5:96:87:cd:ec:ef:96:
                    a0:e5:d0:d9:47:9d:fc:0c:fd:a5:3f:14:eb:82:be:
                    76:6a:be:ad:4a:86:6a:1d:03:e5:b9:23:e2:95:18:
                    19:88:0d:0d:28:a2:bb:4e:ee:0c:5a:03:24:1c:04:
                    7a:f9:11:8c:be:40:e6:80:1b:f6:8c:e6:82:1a:f9:
                    27:d2:bf:a4:9d:ab:bb:a7:69:29:c4:1c:d9:cf:cb:
                    97:05:dd:ba:b0:82:16:97:3c:0a:af:db:b2:c2:78:
                    5d:d2:70:60:22:a8:1f:3d:d3:2c:34:8f:dc:00:5f:
                    00:3a:23:55:93:c4:4a:14:a8:3f:42:59:12:e0:dd:
                    63:07:42:b5:b4:0b:62:fb:89:fb:a1:9f:12:47:8a:
                    d3:1c:87:44:57:56:63:d6:58:f0:d4:01:9a:27:56:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:F2:6F:10:25:50:69:5F:2C:51:08:1B:6B:E6:F4:04:E4:BE:AE
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:7c:31:0a:ad:d0:59:45:63:02:29:99:ef:ae:77:fa:e0:
         16:2a:fb:c7:ca:1e:df:6b:93:ef:c4:e6:43:b5:01:2e:e4:4c:
         92:30:fa:d2:be:a4:32:44:80:b2:c3:d4:48:2f:0c:2a:de:a0:
         2e:7d:e6:5f:16:51:e7:26:07:c4:f7:ce:9e:1e:34:99:ed:27:
         62:00:0d:78:3e:ce:02:91:67:03:35:dd:42:85:64:bd:68:aa:
         5e:05:79:10:a9:d8:b7:29:56:f0:24:fd:46:9a:07:4e:a7:9d:
         e6:bb:b1:a9:e5:a2:b6:2f:ce:09:a7:08:d1:b4:76:28:a1:df:
         21:a4:8b:bc:52:8c:3e:02:3f:61:09:31:7d:be:a5:71:18:c1:
         81:4b:f8:2e:3e:27:88:87:e6:47:ad:de:4b:d6:39:c0:ae:41:
         a2:ab:93:e9:65:1c:31:c4:65:54:5a:8b:b5:40:31:d4:90:f8:
         c8:5f:f5:8d:52:a3:88:f2:3e:38:4d:0a:99:c3:cb:d4:dc:67:
         23:cc:e6:b3:75:b1:19:03:af:e0:6d:ca:28:29:19:9b:a1:90:
         b6:d8:21:d7:87:f3:13:2e:3c:32:b2:7a:17:a4:ea:b0:de:de:
         83:55:53:2c:0c:31:09:71:a1:57:09:b8:fb:2c:6b:cc:43:83:
         71:ee:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:26:49 2026 by rpki-client