Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a313030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a313030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          nZAgCH1VCEkm6LOmn/O6dv5Wd2N8L0AWR/FuuyUtuws=
Subject key identifier:   E6:8E:7A:96:3D:2E:EE:70:AD:91:38:DE:00:6D:E7:90:58:12:C2:AD
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       5FF60A6E9346EFA8DF25CD62AFC6AAC46AAAE4F5
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a313030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:27 +0000
ROA not before:           Mon 07 Sep 2026 15:54:27 +0000
ROA not after:            Mon 06 Sep 2027 15:59:27 +0000
asID:                     268009
IP address blocks:        2804:5690:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 19:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f6:0a:6e:93:46:ef:a8:df:25:cd:62:af:c6:aa:c4:6a:aa:e4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:27 2026 GMT
            Not After : Sep  6 15:59:27 2027 GMT
        Subject: CN=E68E7A963D2EEE70AD9138DE006DE7905812C2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:0d:55:62:3a:9a:c1:f5:73:fb:ed:0e:67:
                    86:e1:1f:5e:5b:62:59:e4:9f:d1:88:5d:60:1a:da:
                    a7:e8:40:e5:d5:08:22:1a:93:23:1b:ff:7f:be:14:
                    62:f6:ed:7d:fe:cd:02:29:83:eb:fa:96:67:96:38:
                    89:3d:81:44:ed:af:e0:9c:97:75:4f:dc:41:32:e2:
                    c1:00:95:73:4e:a0:60:ae:2b:ba:3f:33:b7:b5:99:
                    67:e4:71:c0:3d:b6:15:c5:1f:aa:d3:95:bf:f0:ad:
                    c3:68:19:b7:ee:3e:ab:29:0e:c2:33:62:da:f5:5e:
                    8e:3d:74:4b:0f:03:29:c8:cb:ec:7e:c0:39:78:87:
                    1b:6a:01:22:66:53:0b:e3:42:1e:3c:79:28:43:3f:
                    07:dd:14:35:fa:5d:b6:07:63:db:18:6d:87:f9:b3:
                    ac:3d:2f:8d:99:b8:5f:64:81:3a:82:9c:1b:67:8e:
                    81:04:51:b7:f3:1f:95:64:b6:3d:92:ea:95:a2:67:
                    1c:07:f4:de:95:03:a3:f8:69:f3:72:76:a9:be:3e:
                    36:5c:4b:83:1e:77:34:20:20:ab:b4:a4:29:7f:3f:
                    69:3f:51:94:56:9a:8d:9a:7b:43:d5:e7:ff:1a:e8:
                    61:f1:b5:e5:a4:59:12:d3:f1:7e:e1:ce:13:46:9d:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8E:7A:96:3D:2E:EE:70:AD:91:38:DE:00:6D:E7:90:58:12:C2:AD
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a313030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:64:38:3e:44:8d:9e:85:4b:c9:1b:cb:40:d2:d6:89:77:
         c5:52:d2:78:d1:4a:c2:6b:c6:43:23:17:ab:c2:ad:3b:b1:ce:
         97:8c:67:0a:8d:1e:68:57:5e:78:7c:0e:2e:5d:7d:33:8d:d1:
         1f:24:57:2f:e2:37:68:24:10:95:2d:52:a0:7b:85:75:a3:d5:
         c6:d2:25:c8:d9:6d:b8:f5:eb:fb:1d:61:f1:ea:79:66:2a:8b:
         dd:20:ff:e2:70:48:9b:34:40:91:c8:d1:23:2b:d4:98:40:de:
         53:de:1f:28:7c:2f:66:91:78:b7:35:52:42:98:5f:18:9d:55:
         dd:97:99:cb:3a:6a:62:c0:08:27:09:85:34:7c:48:d3:a6:ff:
         51:a5:4e:3a:42:86:38:e7:85:3a:6c:d2:04:0d:a8:43:f9:6f:
         06:8f:b5:2b:09:61:07:9d:51:51:85:f8:e6:99:16:ef:23:bc:
         fa:3d:5a:d7:b4:d5:57:af:42:ca:59:3c:50:45:52:07:73:dc:
         46:74:a5:fe:7b:e5:1e:15:2e:2a:33:2c:c9:f5:2c:f8:f5:c0:
         f5:fb:50:f8:10:c4:6a:9e:16:0c:d2:bb:c7:01:9d:92:2b:ca:
         c2:d5:92:2f:87:2f:31:db:86:1b:fc:17:a1:0b:6c:30:25:a9:
         db:71:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:00:42 2026 by rpki-client