Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/323830343a373538383a3a2f33322d313238203d3e20323731303533.roa
File:                     323830343a373538383a3a2f33322d313238203d3e20323731303533.roa (raw, json)
Hash identifier:          av0qXxnbbxZAVhwpCAef9efaR4pCmmQWaR8AuH6OlWw=
Subject key identifier:   A2:B7:AA:9C:E8:F2:67:56:54:66:CD:A5:F6:1B:C7:FF:11:A0:AB:72
Certificate issuer:       /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD
Certificate serial:       78EBDF4BDA339C0267E20065FD09136AC3987511
Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/323830343a373538383a3a2f33322d313238203d3e20323731303533.roa
Signing time:             Tue 01 Sep 2026 21:08:46 +0000
ROA not before:           Tue 01 Sep 2026 21:03:46 +0000
ROA not after:            Tue 31 Aug 2027 21:08:46 +0000
asID:                     271053
IP address blocks:        2804:7588::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl
                          rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 15:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:eb:df:4b:da:33:9c:02:67:e2:00:65:fd:09:13:6a:c3:98:75:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD
        Validity
            Not Before: Sep  1 21:03:46 2026 GMT
            Not After : Aug 31 21:08:46 2027 GMT
        Subject: CN=A2B7AA9CE8F267565466CDA5F61BC7FF11A0AB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:3d:97:53:fc:f6:42:d3:55:1a:88:81:95:
                    8b:8f:57:f0:3c:37:1c:a6:85:47:48:80:cf:bc:96:
                    ff:86:1f:9b:90:f9:47:81:17:c5:56:d2:e2:85:d5:
                    df:c8:e8:41:92:2c:29:3e:11:2f:00:0e:6f:a4:db:
                    32:9e:d6:91:bd:34:e2:d9:45:3b:50:90:ca:89:4b:
                    46:10:c2:37:8c:08:d3:4c:fe:2b:30:90:d6:a5:65:
                    37:49:5e:9b:71:55:8e:5a:1e:ce:59:6c:39:91:1d:
                    3d:4a:b9:40:c9:d7:9e:b3:d7:e8:eb:00:9c:30:16:
                    98:c3:09:bf:7f:a2:bc:98:b8:f6:bf:bd:95:c6:2a:
                    46:06:52:50:63:72:f3:f4:b7:a8:17:05:ef:b7:e5:
                    6e:5b:9e:5f:7c:54:89:43:59:53:30:ad:e0:c0:af:
                    15:12:b5:77:29:a5:45:cf:5f:cc:5c:b9:0a:a9:ad:
                    cd:e2:bd:8c:19:bf:9d:f5:a7:5a:cb:de:be:ce:3b:
                    9f:92:1e:c2:dc:59:8d:9b:3a:2e:65:bf:14:bc:f2:
                    12:93:df:11:22:fb:a9:bb:fd:38:b1:0f:dc:bd:f1:
                    40:e3:a5:33:07:3c:51:3b:90:ad:75:ca:f4:37:d0:
                    a4:52:de:4e:ec:96:4a:b0:7f:37:0a:26:65:e2:d9:
                    c6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B7:AA:9C:E8:F2:67:56:54:66:CD:A5:F6:1B:C7:FF:11:A0:AB:72
            X509v3 Authority Key Identifier:
                keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/323830343a373538383a3a2f33322d313238203d3e20323731303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7588::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:42:15:87:e4:03:f3:19:a5:bd:b0:d8:ba:7e:2a:a8:5a:
         01:e0:f4:0d:c4:89:8b:fe:b7:d3:4e:77:f0:3a:cc:be:61:95:
         48:7f:a1:c6:8a:ac:f3:9b:a7:f2:61:2f:12:8d:c7:5a:23:f4:
         05:e3:38:28:92:d2:20:fb:a3:3a:a4:5c:ac:f3:1e:de:b0:8a:
         75:d9:27:d1:b4:2f:39:2f:eb:2a:de:2c:46:de:58:c7:62:f0:
         50:99:5e:30:3a:12:70:5f:9e:15:a8:70:58:7e:d4:3f:83:d7:
         76:d6:1b:00:eb:90:f8:6b:6e:ec:07:38:de:87:44:4d:0d:fe:
         16:1c:96:89:e1:20:ec:69:94:60:6c:f0:bf:29:a9:36:b7:33:
         38:7f:7f:0e:5b:59:cc:e0:a6:a5:6d:76:eb:a9:12:c9:c5:a8:
         9e:83:db:87:2a:27:e6:77:07:ce:2f:5c:51:ae:d6:61:20:be:
         ec:4e:c8:09:6a:13:83:d2:db:fe:9e:55:63:ad:1d:83:b8:32:
         ea:ca:d0:be:6b:92:46:6b:29:fc:e3:ae:f9:1e:db:d5:94:a9:
         5b:0a:1b:ef:56:58:bd:a0:a7:86:9f:95:75:bd:b1:a4:18:00:
         e3:fe:03:e5:f0:e4:47:c8:d2:27:7f:40:b5:7b:c6:29:2d:1c:
         32:4c:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:40 2026 by rpki-client