Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a313230303a3a2f34302d3430203d3e20323735383038.roa
File:                     323830343a393964383a313230303a3a2f34302d3430203d3e20323735383038.roa (raw, json)
Hash identifier:          s145wrk9Q0OI99RQ0KjfQ63ijIQZLTDRPCJyX4x3ZHQ=
Subject key identifier:   4A:03:DD:91:FA:24:AE:F1:4D:37:51:B9:21:11:24:A8:B7:6C:D2:95
Certificate issuer:       /CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
Certificate serial:       21EB370D44A1D9E86E4BE360FAA1F9E1E173278C
Authority key identifier: B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a313230303a3a2f34302d3430203d3e20323735383038.roa
Signing time:             Fri 02 Oct 2026 15:50:17 +0000
ROA not before:           Fri 02 Oct 2026 15:45:17 +0000
ROA not after:            Fri 01 Oct 2027 15:50:17 +0000
asID:                     275808
IP address blocks:        2804:99d8:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl
                          rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:eb:37:0d:44:a1:d9:e8:6e:4b:e3:60:fa:a1:f9:e1:e1:73:27:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6044502DCD507645241A3D0C141BE2AEA3F6149
        Validity
            Not Before: Oct  2 15:45:17 2026 GMT
            Not After : Oct  1 15:50:17 2027 GMT
        Subject: CN=4A03DD91FA24AEF14D3751B9211124A8B76CD295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:75:f1:c5:5c:29:d9:7f:92:18:5d:19:ce:
                    5d:8f:c9:c0:02:46:d2:a8:01:9d:3a:fc:92:4d:ca:
                    73:56:8a:a9:3c:5c:c4:e2:81:76:3f:0c:10:2f:d2:
                    b0:ba:cb:d5:2e:f4:7f:30:d9:60:09:6d:3e:47:bc:
                    02:48:19:61:d8:d5:46:fd:8d:c8:e8:45:6f:7c:7f:
                    50:be:7c:ba:eb:d1:54:7b:d4:07:34:bb:51:36:f7:
                    a2:6a:da:10:1a:4e:83:88:a0:e2:3d:e4:ad:57:16:
                    8e:9f:04:d8:4a:cb:67:90:eb:cb:4d:0a:3b:75:85:
                    6b:ad:99:fa:6e:05:86:57:0d:37:df:74:91:85:db:
                    b5:45:46:97:a0:17:97:52:f8:9f:51:43:de:20:8c:
                    1a:0c:42:21:19:d5:be:ee:37:0a:be:f4:13:ff:e0:
                    3a:1b:f8:a2:df:70:68:fd:3a:72:49:85:c9:54:77:
                    fd:7e:0c:ac:07:81:03:82:59:47:e9:9e:88:9f:30:
                    4e:06:27:7c:b7:c6:65:55:e7:48:7e:9f:31:93:d8:
                    c8:b7:5b:f1:d8:7f:05:fc:2a:ed:c7:a2:a2:46:8c:
                    5a:1e:76:ac:ed:8d:11:62:fb:6c:bc:8f:c5:c7:04:
                    91:cb:a8:5f:0c:2d:b2:13:da:29:fa:08:ad:53:23:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:03:DD:91:FA:24:AE:F1:4D:37:51:B9:21:11:24:A8:B7:6C:D2:95
            X509v3 Authority Key Identifier:
                keyid:B6:04:45:02:DC:D5:07:64:52:41:A3:D0:C1:41:BE:2A:EA:3F:61:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/B6044502DCD507645241A3D0C141BE2AEA3F6149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6044502DCD507645241A3D0C141BE2AEA3F6149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuqrRoewBNVsAiKVUBizEAacTMdr2pDLd34CWQxptB54/0/323830343a393964383a313230303a3a2f34302d3430203d3e20323735383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:99d8:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:b1:55:f0:82:82:63:da:93:a7:c5:c2:c1:48:34:9b:59:0f:
         64:a3:ab:d2:dc:a8:ac:05:36:db:30:99:96:a2:e4:9a:ae:a0:
         86:14:ba:a6:4b:9a:52:ce:0a:19:16:b4:85:b9:42:86:9e:bc:
         5d:27:fe:20:f1:d4:8d:ff:86:ba:f6:5b:4d:c7:a1:75:ba:ac:
         69:72:81:59:79:94:de:10:ba:b1:de:cb:9d:c7:aa:b1:5d:4d:
         ef:3c:b2:ba:fe:2f:04:05:a4:5c:4b:21:ca:e1:9e:42:4a:ce:
         d9:ed:76:ce:97:48:de:08:cc:ed:b5:09:7a:32:ed:57:90:56:
         17:3e:4f:ad:9c:7e:8f:dd:87:17:f0:d9:10:18:63:08:e5:6b:
         1a:24:c9:38:36:36:bb:4c:7d:b5:bb:b0:5b:8b:84:c3:83:41:
         71:24:c2:58:23:cf:33:76:27:5f:a6:bc:70:af:b1:33:b4:eb:
         9a:63:ae:db:37:22:a1:58:8a:7b:02:c9:38:55:9f:af:af:72:
         64:b0:1c:2e:08:2a:8b:46:67:39:d3:f8:8d:fb:9e:cd:0e:1c:
         c5:d7:9c:54:48:ee:57:8c:bc:a3:0e:1c:c7:dc:a5:6c:7a:25:
         ad:60:d0:fc:4d:b1:27:de:1e:3c:10:50:0d:30:6a:ad:ec:ec:
         8d:c6:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:36:59 2026 by rpki-client