Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d3332203d3e20323731323030.roa
File:                     323830343a373763633a3a2f33322d3332203d3e20323731323030.roa (raw, json)
Hash identifier:          jy6+ZMDEkumdht3Uwyc+QVU4MDrPMMtfJwYGF4t1blU=
Subject key identifier:   F0:CF:F6:7A:AF:D0:39:EE:8F:2D:96:FC:F4:0C:71:2A:0F:06:BE:52
Certificate issuer:       /CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97
Certificate serial:       70200CBBC0DF87F5710344177EFB6F377462FF25
Authority key identifier: 3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d3332203d3e20323731323030.roa
Signing time:             Sat 15 Aug 2026 20:52:18 +0000
ROA not before:           Sat 15 Aug 2026 20:47:18 +0000
ROA not after:            Sat 14 Aug 2027 20:52:18 +0000
asID:                     271200
IP address blocks:        2804:77cc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 18:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:0c:bb:c0:df:87:f5:71:03:44:17:7e:fb:6f:37:74:62:ff:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97
        Validity
            Not Before: Aug 15 20:47:18 2026 GMT
            Not After : Aug 14 20:52:18 2027 GMT
        Subject: CN=F0CFF67AAFD039EE8F2D96FCF40C712A0F06BE52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fb:45:a4:bb:9f:b0:30:7d:70:b3:0f:d6:9f:
                    f5:33:70:c5:1d:86:6d:c9:64:bc:4f:3f:61:e0:51:
                    72:07:d4:a6:f8:a1:4f:fa:f2:02:9b:59:33:08:60:
                    e9:fc:df:ed:1a:4e:6b:f0:e9:67:c6:91:89:d3:22:
                    5a:e5:de:09:56:ef:54:37:81:cb:d8:68:a4:df:ed:
                    74:d6:d1:4e:3a:a4:46:f9:90:83:bc:b0:df:ee:94:
                    83:71:dd:a9:b7:91:16:56:18:d6:37:1e:ec:12:dd:
                    a8:67:87:f5:c7:9b:bb:d6:48:f9:b7:92:90:16:05:
                    b4:2f:a4:97:98:05:86:6d:11:d8:df:7a:e5:c6:cc:
                    a4:ff:bd:31:3c:93:6e:09:2e:55:e1:02:05:6f:db:
                    94:1c:25:f1:f1:06:2a:bd:7c:4e:d8:d0:79:ff:f1:
                    bf:ef:d6:fa:05:4d:be:21:33:59:f0:ee:49:03:07:
                    6e:27:6d:b8:5c:fb:38:51:f8:de:ef:36:aa:e0:12:
                    39:54:2f:9c:51:9e:1c:87:8a:91:dc:b0:39:fe:6a:
                    75:e0:21:3b:04:db:7e:4e:5c:dd:59:07:dd:52:66:
                    65:27:ff:7e:36:d8:17:55:1d:ae:0a:df:96:74:51:
                    e5:18:4c:7c:58:18:6d:77:44:b7:eb:61:ed:02:80:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:F6:7A:AF:D0:39:EE:8F:2D:96:FC:F4:0C:71:2A:0F:06:BE:52
            X509v3 Authority Key Identifier:
                keyid:3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d3332203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:58:34:67:5c:39:f3:0b:f5:fb:25:10:05:1d:fc:75:15:
         ef:e1:38:d5:b5:21:a1:97:e2:29:99:c1:da:dd:67:85:cb:d8:
         09:1b:c7:93:e3:7e:33:d4:82:ce:2d:68:ac:75:3f:d5:cf:19:
         d1:d9:02:89:11:7c:78:1f:2c:47:0d:02:ef:0f:23:9a:7e:20:
         26:2f:9f:b6:49:59:42:0c:f6:d3:8d:85:16:aa:d2:21:1b:5a:
         eb:52:a6:49:e5:e6:b6:2f:4c:88:3b:66:24:b7:32:c6:fb:89:
         9d:e5:55:1b:c5:11:e8:c7:4f:2d:7e:da:c0:69:ed:77:79:62:
         94:26:97:11:0e:08:07:78:2a:ae:9e:39:88:33:1b:50:47:20:
         e8:66:03:1f:7c:90:22:bd:1a:ec:c9:85:69:c6:19:e4:49:a1:
         56:22:5c:58:07:8a:45:56:25:ba:79:4f:51:ea:e4:12:57:e5:
         23:12:65:8a:b9:8e:92:ca:06:ed:52:9e:1e:3d:2f:b2:21:0d:
         32:ed:d3:25:52:0d:41:31:46:5d:91:7e:88:14:9b:b7:33:cd:
         70:eb:71:9b:ea:d5:09:95:68:7d:3b:71:2c:63:e6:ca:42:91:
         f8:f4:14:1f:7e:5c:a8:86:c7:cb:ca:29:ca:88:91:f6:0e:57:
         be:54:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 17:57:00 2026 by rpki-client