Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/323830343a353637303a3a2f33322d3332203d3e20323637393938.roa
File:                     323830343a353637303a3a2f33322d3332203d3e20323637393938.roa (raw, json)
Hash identifier:          OaUbNNAXKra54A3Jrqt5P676P5xVq2o+NK8zrv+xoFo=
Subject key identifier:   3A:E6:C5:C7:15:EA:27:58:13:78:02:99:9E:AC:98:BC:F7:53:21:9A
Certificate issuer:       /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
Certificate serial:       53B21CDA6B1DF76D801A1A0EB42BAB88CD42FC8B
Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/323830343a353637303a3a2f33322d3332203d3e20323637393938.roa
Signing time:             Tue 25 Aug 2026 21:55:19 +0000
ROA not before:           Tue 25 Aug 2026 21:50:19 +0000
ROA not after:            Tue 24 Aug 2027 21:55:19 +0000
asID:                     267998
IP address blocks:        2804:5670::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 05:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b2:1c:da:6b:1d:f7:6d:80:1a:1a:0e:b4:2b:ab:88:cd:42:fc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
        Validity
            Not Before: Aug 25 21:50:19 2026 GMT
            Not After : Aug 24 21:55:19 2027 GMT
        Subject: CN=3AE6C5C715EA2758137802999EAC98BCF753219A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:51:97:96:5e:10:cd:85:83:88:5a:3b:c1:
                    25:73:9d:5d:3e:0a:99:e2:02:0f:ee:87:51:ff:7f:
                    00:ba:93:2d:4d:0a:7f:00:d6:be:59:e8:c9:34:d4:
                    e9:e5:4a:ec:95:30:a8:6f:fe:e1:43:26:73:4c:2c:
                    70:ef:01:a5:0d:64:ea:42:16:b2:bc:c5:33:5f:f7:
                    68:b6:a8:6e:8b:46:dd:1f:77:ea:dd:30:9b:0b:30:
                    f4:54:47:30:b5:54:fb:1d:a7:4d:0b:ce:bb:a3:2b:
                    32:e0:be:74:2c:19:cf:a5:b9:67:90:de:a6:3c:ad:
                    c8:63:01:f2:e1:cc:3d:d4:fe:bb:f1:74:59:6b:1a:
                    73:b9:9d:a7:55:e7:48:c4:5c:77:73:97:3c:43:a5:
                    fb:79:89:ab:6a:15:42:8c:05:19:d6:29:d1:7b:61:
                    fb:80:ad:29:cb:9e:26:ca:57:89:16:1b:7a:87:dd:
                    75:d3:59:55:bc:00:e5:b2:3e:c3:e8:f5:01:c9:2d:
                    e6:1b:d5:b9:c1:9c:56:d6:10:fb:87:a4:82:f0:60:
                    26:5d:3d:ce:ef:7e:74:c0:da:7c:e2:5e:90:00:19:
                    7f:50:92:85:f0:4f:92:07:85:8c:07:69:ef:00:82:
                    20:55:2c:c3:96:14:98:6b:05:d8:e0:f6:13:ab:51:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E6:C5:C7:15:EA:27:58:13:78:02:99:9E:AC:98:BC:F7:53:21:9A
            X509v3 Authority Key Identifier:
                keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/323830343a353637303a3a2f33322d3332203d3e20323637393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5670::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:1a:1b:f5:58:10:e8:ec:db:eb:c6:89:98:7c:b8:04:c6:28:
         c0:24:c5:8c:8b:6b:90:11:4c:b1:55:ac:19:58:83:b9:88:8f:
         6a:1f:80:e7:ab:5d:e7:77:71:06:54:7f:48:96:d5:f7:f6:95:
         2f:6f:ac:a8:ff:ad:18:57:48:08:3d:90:7e:26:f2:de:e9:dd:
         c1:10:fc:b2:0c:fa:4a:05:37:12:eb:ce:11:ea:dd:32:d8:c1:
         47:32:d6:6c:d9:9d:a7:98:a9:11:ff:c3:df:45:40:f1:95:bf:
         14:40:77:6d:91:5a:37:ef:8f:27:88:8d:34:9f:0e:8e:2c:a7:
         4c:d0:ec:19:b1:6f:34:17:57:1e:6e:7a:9b:0e:d4:c1:25:f8:
         23:d9:00:53:62:63:7d:60:cb:1a:ab:ac:03:46:42:15:75:8a:
         38:b0:bc:3c:77:c3:4f:f9:d4:12:d3:10:4d:45:38:2e:9a:cf:
         d6:75:cb:b0:20:40:17:c4:ea:ac:cb:b2:7f:38:d7:37:72:49:
         8d:54:06:cd:74:98:eb:99:6c:8d:80:62:c1:de:fa:8d:52:f7:
         a3:b8:fb:bb:ba:b0:a4:3f:8d:17:9e:9d:d8:f2:e3:83:a7:2f:
         5e:dd:a7:56:60:49:96:ac:81:73:91:88:3c:7b:82:08:c5:7e:
         fe:6b:71:ab
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUU7Ic2msd922AGhoOtCuriM1C/IswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGQjFFRDVBODg5NERBNzQ5QTdGNUFENEYxMEU4MEM5
NDRENDIxQzAeFw0yNjA4MjUyMTUwMTlaFw0yNzA4MjQyMTU1MTlaMDMxMTAvBgNV
BAMTKDNBRTZDNUM3MTVFQTI3NTgxMzc4MDI5OTlFQUM5OEJDRjc1MzIxOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQ1GXll4QzYWDiFo7wSVznV0+
CpniAg/uh1H/fwC6ky1NCn8A1r5Z6Mk01OnlSuyVMKhv/uFDJnNMLHDvAaUNZOpC
FrK8xTNf92i2qG6LRt0fd+rdMJsLMPRURzC1VPsdp00LzrujKzLgvnQsGc+luWeQ
3qY8rchjAfLhzD3U/rvxdFlrGnO5nadV50jEXHdzlzxDpft5iatqFUKMBRnWKdF7
YfuArSnLnibKV4kWG3qH3XXTWVW8AOWyPsPo9QHJLeYb1bnBnFbWEPuHpILwYCZd
Pc7vfnTA2nziXpAAGX9QkoXwT5IHhYwHae8AgiBVLMOWFJhrBdjg9hOrUXEfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOubFxxXqJ1gTeAKZnqyYvPdTIZowHwYDVR0j
BBgwFoAUEfse1aiJTadJp/WtTxDoDJRNQhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFl
SmovMC8xMUZCMUVENUE4ODk0REE3NDlBN0Y1QUQ0RjEwRTgwQzk0NEQ0MjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExRkIxRUQ1QTg4OTREQTc0
OUE3RjVBRDRGMTBFODBDOTQ0RDQyMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4emhRWW5ZN0tSZEVMbjV0VEpjRkVTTGdVeWV0dXBqSHlWeTJodTJRZUpqLzAv
MzIzODMwMzQzYTM1MzYzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzkzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWcDANBgkqhkiG9w0BAQsFAAOCAQEAWxob9VgQ
6Ozb68aJmHy4BMYowCTFjItrkBFMsVWsGViDuYiPah+A56td53dxBlR/SJbV9/aV
L2+sqP+tGFdICD2Qfiby3undwRD8sgz6SgU3EuvOEerdMtjBRzLWbNmdp5ipEf/D
30VA8ZW/FEB3bZFaN++PJ4iNNJ8OjiynTNDsGbFvNBdXHm56mw7UwSX4I9kAU2Jj
fWDLGqusA0ZCFXWKOLC8PHfDT/nUEtMQTUU4LprP1nXLsCBAF8TqrMuyfzjXN3JJ
jVQGzXSY65lsjYBiwd76jVL3o7j7u7qwpD+NF56d2PLjg6cvXt2nVmBJlqyBc5GI
PHuCCMV+/mtxqw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:59:13 2026 by rpki-client