Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/323830343a393365633a346336303a3a2f34382d313238203d3e20323734383039.roa
File:                     323830343a393365633a346336303a3a2f34382d313238203d3e20323734383039.roa (raw, json)
Hash identifier:          fl6RBCnDRyki7qja/ZutE9c2TftQTR0oPjx8WzH3cTo=
Subject key identifier:   26:25:83:96:43:46:C1:5F:43:8C:DC:A6:15:43:9A:15:7E:23:2B:A7
Certificate issuer:       /CN=63FC718497734BA2253B9F72B805D1581E1D3C93
Certificate serial:       55AD6A846ACB590604FF2736CE8F25E1A906F35C
Authority key identifier: 63:FC:71:84:97:73:4B:A2:25:3B:9F:72:B8:05:D1:58:1E:1D:3C:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63FC718497734BA2253B9F72B805D1581E1D3C93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/323830343a393365633a346336303a3a2f34382d313238203d3e20323734383039.roa
Signing time:             Mon 21 Sep 2026 17:32:28 +0000
ROA not before:           Mon 21 Sep 2026 17:27:28 +0000
ROA not after:            Mon 20 Sep 2027 17:32:28 +0000
asID:                     274809
IP address blocks:        2804:93ec:4c60::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/63FC718497734BA2253B9F72B805D1581E1D3C93.crl
                          rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/63FC718497734BA2253B9F72B805D1581E1D3C93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63FC718497734BA2253B9F72B805D1581E1D3C93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 19:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ad:6a:84:6a:cb:59:06:04:ff:27:36:ce:8f:25:e1:a9:06:f3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC718497734BA2253B9F72B805D1581E1D3C93
        Validity
            Not Before: Sep 21 17:27:28 2026 GMT
            Not After : Sep 20 17:32:28 2027 GMT
        Subject: CN=262583964346C15F438CDCA615439A157E232BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:9d:de:f3:72:6e:6c:c7:19:c0:cb:96:e1:
                    c8:1f:33:b4:55:38:2b:82:07:a5:c8:e6:1e:07:0e:
                    e9:5b:f8:9b:44:48:3a:21:9c:6a:3b:e6:c5:ca:c4:
                    5a:f5:44:bd:c9:ba:6c:de:23:dd:ee:24:ee:1a:f1:
                    41:93:5e:6b:b6:8a:15:1b:dd:bc:8d:7f:9a:46:1c:
                    02:0d:a9:b5:f0:db:ed:03:44:cb:ff:31:3c:5a:2d:
                    e9:6f:78:e3:87:ea:c7:7b:10:fb:5f:6c:5b:0b:6b:
                    c9:a5:82:b6:95:09:72:31:a0:db:04:d0:ff:27:6e:
                    0b:52:66:38:c1:20:e9:18:f7:5f:f2:33:e0:df:73:
                    f2:e9:8a:b1:9e:37:11:34:11:70:4e:d3:61:11:68:
                    54:35:46:17:e4:dd:20:f9:0c:cf:a5:bf:66:ad:46:
                    3e:78:d9:fc:90:b1:a0:3f:8a:e2:94:eb:86:71:e8:
                    4a:13:6d:3c:24:7f:2d:a9:a7:cb:e4:cf:5d:c2:fb:
                    4e:79:b8:f5:20:85:64:ce:6f:60:a5:d4:d6:9a:45:
                    cc:c4:7f:46:3d:26:0a:c0:66:90:fd:b6:ca:78:fe:
                    25:84:6e:1c:c1:88:0d:9c:13:e4:da:71:bb:0d:a1:
                    a4:f5:ce:85:d4:d5:0a:50:cd:6b:de:ed:05:c7:97:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:25:83:96:43:46:C1:5F:43:8C:DC:A6:15:43:9A:15:7E:23:2B:A7
            X509v3 Authority Key Identifier:
                keyid:63:FC:71:84:97:73:4B:A2:25:3B:9F:72:B8:05:D1:58:1E:1D:3C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/63FC718497734BA2253B9F72B805D1581E1D3C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63FC718497734BA2253B9F72B805D1581E1D3C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/323830343a393365633a346336303a3a2f34382d313238203d3e20323734383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:93ec:4c60::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:93:13:be:05:b7:af:84:c3:61:30:a0:8b:4b:62:84:a7:6a:
         36:74:09:96:b2:42:c4:76:1a:17:2a:19:49:6b:06:fb:ab:6e:
         d7:fc:eb:14:70:20:4a:45:0d:91:65:1c:64:d8:1a:53:4d:43:
         19:1a:fc:8b:39:1a:81:64:0b:21:6d:82:20:e7:c7:06:60:c3:
         21:21:f5:08:2e:06:ad:0f:c7:c7:8b:31:9b:e6:53:4e:b1:27:
         3e:40:fa:c7:87:82:e8:5f:ed:2c:9a:7e:7f:ac:7d:10:b6:c6:
         d7:be:a5:ba:6c:d3:ff:34:8a:55:75:06:ca:51:38:78:6c:f3:
         46:12:7a:7a:a2:6f:84:e8:6d:01:4a:ac:81:c7:68:fa:39:34:
         10:08:8b:4f:17:26:d3:8f:d8:e0:1c:53:9f:47:a4:f9:d0:e4:
         25:4e:4d:43:6a:75:d3:15:b0:b9:f8:fc:db:ce:cf:68:c3:a5:
         5e:c9:d8:79:62:ef:03:2c:c6:9e:a0:da:21:e2:bd:56:9c:23:
         d7:d9:f8:ac:6c:2f:08:bd:8d:39:f7:b0:42:1f:aa:93:1e:f0:
         f1:af:62:c8:da:00:84:45:c9:26:1b:b2:93:a2:e8:8e:02:17:
         a0:1c:fc:f9:2e:4d:34:db:78:0c:92:86:e4:0c:e0:d2:d7:0d:
         e0:9b:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:29:34 2026 by rpki-client