Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a376630303a3a2f34302d3430203d3e20323733353634.roa
File:                     323830343a393061303a376630303a3a2f34302d3430203d3e20323733353634.roa (raw, json)
Hash identifier:          Nwzvfk5JIh4X1UsmX/3GUi2BLBXe0PC9Fhh3s3Xu7xE=
Subject key identifier:   55:F4:DD:15:78:1D:B2:24:EC:19:61:44:30:88:26:36:40:22:97:CC
Certificate issuer:       /CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Certificate serial:       4E38BF2AC629636A956B1735EB90AE072E3E2D10
Authority key identifier: B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a376630303a3a2f34302d3430203d3e20323733353634.roa
Signing time:             Wed 30 Sep 2026 22:36:42 +0000
ROA not before:           Wed 30 Sep 2026 22:31:42 +0000
ROA not after:            Wed 29 Sep 2027 22:36:42 +0000
asID:                     273564
IP address blocks:        2804:90a0:7f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
                          rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 06:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:38:bf:2a:c6:29:63:6a:95:6b:17:35:eb:90:ae:07:2e:3e:2d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
        Validity
            Not Before: Sep 30 22:31:42 2026 GMT
            Not After : Sep 29 22:36:42 2027 GMT
        Subject: CN=55F4DD15781DB224EC19614430882636402297CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:2b:f1:dd:d1:88:4f:1b:f8:c6:ae:48:f9:
                    87:4d:22:b3:0d:fb:06:bc:10:29:35:c7:4b:07:ba:
                    9f:3c:18:c7:68:58:c9:24:1f:29:b5:b3:a7:44:2c:
                    76:7a:fb:bf:7e:3c:c4:72:36:f3:28:46:41:2e:58:
                    3f:53:42:86:23:ad:b6:01:e5:1e:cc:c9:4c:c9:be:
                    ba:d6:1d:a9:92:7a:7b:ca:9f:17:92:66:b7:de:5d:
                    d7:5e:b7:67:09:53:c6:e7:89:60:fd:07:92:ab:86:
                    7a:01:9f:21:6d:c8:9f:bc:eb:f1:9b:b0:24:8b:dc:
                    59:31:4d:18:c7:fe:1d:19:8d:3a:b3:64:f6:ed:f9:
                    6f:01:02:f5:ad:89:1c:19:fe:57:85:e1:4f:98:d0:
                    fe:ec:86:0f:51:6f:5e:96:b6:0b:e5:60:fb:4f:71:
                    e1:dc:3b:fb:5c:57:07:fe:db:38:fa:47:8b:29:f8:
                    45:d8:71:20:1c:8d:76:9f:a6:3b:c2:7f:c7:74:03:
                    ee:62:16:07:e9:7d:18:0c:58:8b:af:bc:b5:19:6b:
                    e4:80:1b:3b:92:9c:c5:db:b6:70:30:38:30:2d:c2:
                    c8:2f:27:2b:77:51:d4:0a:c9:8c:bc:f9:b4:b9:e1:
                    40:ba:7c:d7:97:4d:42:51:96:09:33:a7:0e:df:3d:
                    8b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F4:DD:15:78:1D:B2:24:EC:19:61:44:30:88:26:36:40:22:97:CC
            X509v3 Authority Key Identifier:
                keyid:B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a376630303a3a2f34302d3430203d3e20323733353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:d6:a9:35:7b:38:af:50:c5:b6:6e:8e:35:53:7a:39:02:c2:
         58:31:d1:88:ef:7e:86:fb:e5:52:db:d7:a6:62:71:00:8c:c5:
         0d:48:cb:04:a6:fc:bd:d0:c0:11:a3:ea:ad:c6:c3:70:24:17:
         eb:82:58:e9:4f:ca:7b:ae:1c:14:fe:34:8f:62:c5:8c:9e:5d:
         8b:3e:45:a4:48:18:81:9a:23:9e:3f:af:23:06:28:ae:26:9b:
         90:9e:e2:99:f3:ac:1f:c3:57:0e:5a:b2:83:18:1d:65:93:1a:
         47:c5:0f:a7:5f:6f:28:6d:c9:dc:71:e1:18:a3:80:31:3c:11:
         07:f3:18:d5:c6:79:5c:e5:e4:7e:45:8b:24:a0:56:27:3b:75:
         1f:61:5a:0b:d3:3c:21:9c:0e:09:97:d1:b4:b8:68:3c:3d:aa:
         27:44:b2:db:54:e4:19:1f:2e:65:2a:e0:2d:5f:f8:a8:a1:8c:
         b5:85:c2:49:38:fc:38:fe:2e:73:ab:9a:37:d3:a6:73:98:ad:
         fe:a1:16:26:c9:31:96:58:90:e6:b2:9d:5c:6a:9d:77:06:bb:
         f7:cc:58:ba:ed:16:bb:97:8e:db:d7:95:55:b7:a4:73:ae:c6:
         35:e5:b0:ea:f1:16:b4:4a:fe:0a:0f:22:92:7f:5a:35:c7:f7:
         0b:9f:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:20:51 2026 by rpki-client