Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3438203d3e203238333036.roa
File:                     323830343a33343a3a2f33322d3438203d3e203238333036.roa (raw, json)
Hash identifier:          qQN/2bUEqF4bMGXh9x/CRBcNKvttvW3si4MlO7Opcxw=
Subject key identifier:   36:AD:74:61:81:C6:82:CB:62:FE:42:2B:E5:10:60:AB:3B:24:8A:FF
Certificate issuer:       /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
Certificate serial:       5E087C318F169CFC82309ED2548C206B21110CF4
Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3438203d3e203238333036.roa
Signing time:             Mon 26 Oct 2026 13:33:26 +0000
ROA not before:           Mon 26 Oct 2026 13:28:26 +0000
ROA not after:            Mon 25 Oct 2027 13:33:26 +0000
asID:                     28306
IP address blocks:        2804:34::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 02:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:08:7c:31:8f:16:9c:fc:82:30:9e:d2:54:8c:20:6b:21:11:0c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
        Validity
            Not Before: Oct 26 13:28:26 2026 GMT
            Not After : Oct 25 13:33:26 2027 GMT
        Subject: CN=36AD746181C682CB62FE422BE51060AB3B248AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:98:3b:b4:37:1b:92:61:0a:98:79:1c:ef:5d:
                    e7:f4:2e:6a:4e:81:60:63:41:d0:1a:37:42:d5:0c:
                    2f:9f:33:17:81:35:00:ac:41:3e:8c:cb:1f:f4:73:
                    cb:14:13:c3:3c:cd:e8:db:76:39:09:f4:82:66:c2:
                    4a:1e:52:b3:7c:cf:b6:f3:0b:4b:b2:7a:6b:64:4d:
                    08:6d:6f:f5:5d:8a:83:a8:54:f2:c4:f9:8f:a2:ee:
                    07:e2:76:f2:d1:48:29:02:00:34:59:1c:fc:d1:f8:
                    4f:8a:95:24:ff:58:36:28:c0:db:96:ca:f0:62:c9:
                    13:5b:82:32:fe:73:49:51:e8:6d:08:a2:ed:ca:12:
                    22:44:cc:d8:60:5d:fa:66:81:b3:b2:d5:2e:5e:e6:
                    66:02:6b:b2:2c:89:10:23:65:a3:17:7c:aa:43:04:
                    98:e0:55:ca:8b:97:7a:51:28:c9:3c:16:28:ee:da:
                    03:a5:e5:39:22:cf:33:f5:00:1b:5d:55:c6:b1:be:
                    fe:9f:65:72:28:de:1b:99:c4:eb:82:13:1f:e8:3e:
                    cb:72:6c:60:d4:07:68:80:e5:33:78:56:53:c4:8d:
                    10:d5:f4:2b:8c:67:15:9b:73:40:b5:ad:1a:f3:76:
                    0b:e7:d5:a1:7a:3c:6c:2d:89:91:ea:de:1d:8e:c1:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AD:74:61:81:C6:82:CB:62:FE:42:2B:E5:10:60:AB:3B:24:8A:FF
            X509v3 Authority Key Identifier:
                keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3438203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:3a:f0:4d:2a:42:85:2c:6d:ee:3f:68:dc:6d:7b:48:06:24:
         12:18:47:a9:92:d9:3b:42:a8:a7:41:eb:0b:07:04:b3:ee:1a:
         b8:5f:17:21:59:8b:ab:d2:1e:f5:cd:82:46:9b:71:7b:c5:fa:
         3b:ad:1a:03:40:18:7d:6a:64:cf:a2:62:a8:bc:72:38:4d:c3:
         30:0f:11:52:0b:b7:a4:cc:9b:11:b6:b1:ce:4a:b7:d0:d7:8e:
         96:3d:1e:15:47:e4:6c:fc:91:4b:7b:55:df:04:48:39:34:63:
         88:0d:f9:46:ad:4e:13:9d:e4:fd:9b:f0:d5:d8:08:e0:57:6e:
         9a:55:9c:df:3e:4d:90:02:a4:83:58:06:59:26:47:92:7e:c6:
         de:30:e2:fe:ba:c7:e7:27:de:f2:a7:13:62:a6:c3:d5:d1:03:
         ee:ab:fa:24:fb:27:d6:03:86:df:16:1f:92:37:19:c5:b2:17:
         88:9f:3a:7a:17:4a:f8:60:15:13:73:d6:8f:74:fa:3f:44:fc:
         53:19:93:c7:de:4f:b3:51:39:e4:1c:8e:2f:f9:ad:35:6e:e0:
         f4:82:9d:75:e7:60:9e:f2:14:ec:0c:32:51:34:8f:2d:31:a9:
         33:85:82:c9:eb:08:72:cd:94:c7:c4:19:53:03:d1:24:44:90:
         27:79:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:04 2026 by rpki-client