Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a633030303a3a2f33362d3336203d3e20323638353738.roa
File:                     323830343a353335383a633030303a3a2f33362d3336203d3e20323638353738.roa (raw, json)
Hash identifier:          VCQVU0Bz1cyNMMTQe9t9TiJQgIAJPImRvQALVI9dEJs=
Subject key identifier:   88:BD:CA:C2:81:B1:98:33:06:07:E7:62:91:E9:26:46:33:A7:9D:CB
Certificate issuer:       /CN=AC4877562548C664D7DBA0D327B2F231710DC102
Certificate serial:       1AC1918AF852757F2502492F6EA0EC99F0CE42DD
Authority key identifier: AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a633030303a3a2f33362d3336203d3e20323638353738.roa
Signing time:             Thu 17 Sep 2026 02:39:08 +0000
ROA not before:           Thu 17 Sep 2026 02:34:08 +0000
ROA not after:            Thu 16 Sep 2027 02:39:08 +0000
asID:                     268578
IP address blocks:        2804:5358:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 02:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c1:91:8a:f8:52:75:7f:25:02:49:2f:6e:a0:ec:99:f0:ce:42:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4877562548C664D7DBA0D327B2F231710DC102
        Validity
            Not Before: Sep 17 02:34:08 2026 GMT
            Not After : Sep 16 02:39:08 2027 GMT
        Subject: CN=88BDCAC281B198330607E76291E9264633A79DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:7c:21:3b:da:b5:34:48:25:78:05:26:6a:
                    38:69:89:1d:59:c6:de:8b:51:d5:40:d2:a0:55:45:
                    a3:2f:93:c4:c8:77:83:7c:1a:b4:83:dd:0f:7e:cd:
                    93:a8:fe:f2:40:25:c5:a7:60:5c:7d:f9:fa:87:a4:
                    38:3d:ce:5d:20:40:e4:58:fe:22:4d:56:ea:c2:9b:
                    87:ec:78:44:b8:0a:ed:9c:2d:64:21:79:81:d4:e9:
                    3d:cd:79:b5:4b:b7:fa:19:36:07:92:12:76:22:bc:
                    c7:da:06:15:40:8d:3c:af:b1:e1:28:9c:00:88:6f:
                    1e:77:b0:6d:2d:2e:35:e5:57:dd:e9:6c:6b:15:7c:
                    a2:57:b2:1e:22:91:ba:39:99:85:4f:8d:f9:af:8a:
                    f8:89:4a:7d:cf:54:32:7b:cf:75:95:6d:fa:18:9f:
                    01:31:89:ab:94:ab:f8:19:cf:59:8f:06:e8:16:7b:
                    1e:48:38:2d:9a:19:5c:c7:96:be:bb:07:2e:d6:e1:
                    75:63:9c:fd:60:8d:d8:2b:50:b3:b1:1b:0c:43:24:
                    ca:18:9c:d8:ab:66:5b:e7:bf:27:bb:b0:fd:14:4f:
                    b6:88:85:13:f3:29:20:db:fe:58:18:10:25:a5:7d:
                    47:49:81:7b:13:60:a5:e5:bf:e1:e6:82:71:b6:8b:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BD:CA:C2:81:B1:98:33:06:07:E7:62:91:E9:26:46:33:A7:9D:CB
            X509v3 Authority Key Identifier:
                keyid:AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a633030303a3a2f33362d3336203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5358:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:6d:6e:fc:67:97:d4:11:30:72:9e:1e:0d:8f:45:43:f6:
         3f:f3:24:77:39:0c:69:4e:eb:ee:d2:7d:7c:8c:a2:e8:96:ae:
         b2:a6:8e:e5:2d:7d:94:3c:c6:dd:bf:12:86:2a:e5:0c:5a:e5:
         17:d7:0a:d4:b5:34:c9:bf:a7:fc:6e:93:ae:3a:c0:c9:a9:46:
         5e:7b:0c:b4:5f:ab:8a:fe:b6:81:6a:a1:f1:45:a6:d1:36:ab:
         6f:01:77:01:4f:b3:94:69:fc:1a:9c:32:7b:3f:b7:9c:4e:f4:
         41:2a:bb:c8:43:86:c8:98:0f:3d:f5:f5:cf:ab:25:a0:4b:f7:
         d0:16:d9:50:48:f1:86:1a:88:e6:17:33:a4:e3:21:31:f5:69:
         5f:60:69:04:28:c5:91:3d:22:98:6a:ce:88:0c:f9:47:cb:66:
         d5:9f:a2:2b:6c:ac:10:e8:ff:d3:d1:ff:27:28:7a:37:46:a6:
         39:23:f6:0d:dd:1c:40:1c:f8:f6:92:ab:3a:a3:dc:3c:73:60:
         ba:c8:83:3c:18:61:de:2a:c6:16:76:e1:9f:43:7e:08:72:2b:
         53:d5:fe:ec:e1:fa:4d:09:7a:6e:1d:a3:49:fe:2b:ad:9f:e0:
         b5:e4:57:03:3d:91:ac:92:20:7d:35:fc:20:53:ea:9d:96:35:
         92:72:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:57:31 2026 by rpki-client