Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a323030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a323030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          8KOxtj/uzhP7nV0gsMtkEOx1NillBVj6MS4vbtBipR8=
Subject key identifier:   89:A2:27:FB:9D:BF:04:E6:AA:1C:AD:02:12:90:D5:06:29:A4:65:B1
Certificate issuer:       /CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
Certificate serial:       22A50B33BA0600D921E04D9CEB1CC80F1D76B0D5
Authority key identifier: 39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a323030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Tue 25 Aug 2026 11:25:58 +0000
ROA not before:           Tue 25 Aug 2026 11:20:58 +0000
ROA not after:            Tue 24 Aug 2027 11:25:58 +0000
asID:                     272418
IP address blocks:        2804:80e0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl
                          rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a5:0b:33:ba:06:00:d9:21:e0:4d:9c:eb:1c:c8:0f:1d:76:b0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
        Validity
            Not Before: Aug 25 11:20:58 2026 GMT
            Not After : Aug 24 11:25:58 2027 GMT
        Subject: CN=89A227FB9DBF04E6AA1CAD021290D50629A465B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:ad:5b:1e:b8:c4:25:49:d4:b7:b5:7f:2f:
                    85:c1:bf:5b:66:2f:61:34:74:d5:2f:7f:2b:39:12:
                    f8:34:7d:8a:7b:4c:ca:92:c3:7c:71:3b:1f:11:60:
                    3b:00:c1:c8:16:15:3f:ab:d4:8a:b3:62:37:8f:71:
                    6b:16:16:ea:e6:bf:85:87:9c:c1:32:28:33:98:f3:
                    1b:f9:b9:a4:80:60:ea:01:dc:62:07:bf:ce:5b:0f:
                    98:b3:8a:f1:01:a3:69:b9:9d:1d:03:e1:0b:64:24:
                    d8:b9:5e:1a:16:90:09:56:8a:f4:0e:4e:a4:4f:a2:
                    93:cd:1b:31:65:97:58:a6:61:cc:11:b3:6c:17:2c:
                    e7:fb:70:d5:0e:ea:75:f4:19:d8:61:d9:83:b6:f7:
                    fa:f0:7b:d8:d7:f8:09:6d:f4:e0:70:5e:8f:db:e4:
                    04:f9:e3:cd:b4:33:0e:ac:d8:92:41:4f:9a:7e:1b:
                    8e:0f:2e:77:ef:96:bf:99:5e:6d:a8:5a:69:83:80:
                    21:3b:fa:01:44:d1:93:87:21:85:35:25:86:16:f7:
                    c5:4e:ed:3f:c3:32:69:78:52:e7:93:4e:43:24:6a:
                    e8:a4:b9:1b:54:57:f8:7c:a7:4d:5f:0d:54:21:7b:
                    48:6f:4d:92:59:ab:aa:51:24:56:69:70:69:e9:ac:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A2:27:FB:9D:BF:04:E6:AA:1C:AD:02:12:90:D5:06:29:A4:65:B1
            X509v3 Authority Key Identifier:
                keyid:39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a323030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:ef:ae:98:63:ee:70:88:d7:6d:31:52:49:6c:88:6d:e6:
         8b:a0:b7:93:7a:40:46:d1:0e:ee:20:e5:4e:e0:d5:04:2e:48:
         d6:27:0b:ba:bc:da:2c:90:c4:df:b1:fa:fc:6d:ef:e2:00:2d:
         36:fc:d3:8e:c2:21:13:66:cd:fe:66:6c:ad:39:2c:a9:dc:d3:
         db:9d:1a:1d:57:70:18:55:de:d7:0d:65:f0:3f:7a:28:39:29:
         35:c7:35:db:6d:ff:df:28:ff:e0:c0:2a:b2:01:47:24:c4:f4:
         df:06:6a:32:47:9f:cd:53:7b:c3:ef:10:34:e1:2d:69:76:c9:
         73:f5:9f:79:91:94:c3:6f:e6:16:e4:93:02:f9:df:5d:75:80:
         b5:d8:14:fc:02:ba:50:b7:35:33:8b:98:73:7a:e3:dd:4c:ac:
         00:bd:0a:57:20:c5:27:38:23:2a:29:2d:12:31:4a:d8:a8:db:
         25:fc:7b:d6:35:17:d7:63:70:a7:ad:6d:19:b0:9e:68:32:24:
         5e:4d:2b:6d:31:14:f6:34:4f:b8:da:21:3a:c7:84:ef:0e:51:
         10:18:09:5d:0c:9f:11:c2:7d:47:5a:ed:e0:aa:49:3c:da:12:
         45:11:c6:e3:8e:5f:69:df:13:95:33:58:35:42:ca:57:1e:d7:
         47:09:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:42:47 2026 by rpki-client