Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          oHD/0cB29kLO+DMu52pYXSwEvfgS7+evEKoAF2Y6PtA=
Subject key identifier:   C6:60:E3:33:99:85:84:E5:4E:91:CB:07:DA:FC:DA:D0:3C:3F:4E:C5
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       165276C41BAC14000D72D5C8202D750642599857
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:42 +0000
ROA not before:           Tue 13 Oct 2026 15:17:42 +0000
ROA not after:            Tue 12 Oct 2027 15:22:42 +0000
asID:                     268296
IP address blocks:        2804:4efc:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:52:76:c4:1b:ac:14:00:0d:72:d5:c8:20:2d:75:06:42:59:98:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:42 2026 GMT
            Not After : Oct 12 15:22:42 2027 GMT
        Subject: CN=C660E333998584E54E91CB07DAFCDAD03C3F4EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:6e:58:31:20:41:38:2e:ca:28:17:f9:6e:
                    18:21:7e:0f:b7:8e:fd:02:e6:53:61:c8:0b:e0:41:
                    98:3f:7d:7e:60:74:96:2f:38:2a:46:00:ce:84:dd:
                    21:fb:47:08:94:1f:f9:6b:0c:fc:93:91:7f:9a:4d:
                    d9:bf:56:ef:10:ea:0b:43:50:f5:9c:a7:84:ea:63:
                    35:2e:99:2c:e1:a4:cc:cc:f5:b4:62:37:da:66:b4:
                    bd:3b:b0:5a:85:7e:d9:3b:1c:c4:77:df:6f:3a:df:
                    7c:8f:a5:63:14:b6:5e:f8:91:a8:4a:79:13:ec:38:
                    00:3e:99:e8:f9:c1:78:ba:cf:c0:d1:b0:42:4c:a6:
                    bf:c3:63:31:6e:89:fa:e8:30:29:7e:99:e1:4a:df:
                    78:9d:b6:dc:8f:a6:fc:67:03:f1:06:e2:2f:9a:ea:
                    97:4d:97:cb:57:04:4c:40:02:a1:58:04:4d:47:45:
                    27:63:79:de:9c:cc:08:7b:0c:92:b7:4e:0e:ec:36:
                    32:2d:3e:70:70:5d:84:b3:f6:5e:10:19:a4:63:ff:
                    51:e0:ed:96:a7:20:7c:a8:6b:e7:01:1d:a4:07:b4:
                    a0:3c:24:68:78:0e:89:1c:4b:8b:be:b0:02:07:82:
                    74:e3:d5:02:f8:fc:9b:b3:43:de:16:b4:56:10:19:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:60:E3:33:99:85:84:E5:4E:91:CB:07:DA:FC:DA:D0:3C:3F:4E:C5
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:5a:ee:8b:30:2d:f3:e6:68:2b:9d:8b:52:fc:ab:62:60:
         17:4d:22:4e:2c:3c:51:2b:fc:92:00:12:aa:ca:7c:09:d2:cb:
         6b:11:26:76:90:9f:8c:e2:da:b9:7d:3c:e0:95:99:04:82:a2:
         fd:1d:51:ce:11:75:a5:64:a9:46:aa:a4:36:c1:60:18:0c:66:
         0e:fe:a9:fa:39:86:67:10:90:3d:2a:53:cb:10:a5:ac:03:18:
         69:c0:9b:a4:83:f5:b6:00:98:85:b0:e6:b4:23:2f:80:f8:ff:
         b7:25:06:ab:79:cd:4e:6f:b9:0d:8d:8a:51:48:d0:d7:c5:2b:
         68:9b:71:30:f7:3d:68:cf:f5:b9:0d:d2:f2:61:2b:02:28:c7:
         e4:c6:85:9b:22:be:6b:5b:ec:ef:ec:8f:d8:e5:6f:6a:b3:84:
         f0:d8:26:a2:f9:7a:25:bd:09:97:2f:96:dd:63:fc:87:06:30:
         62:ea:cc:22:72:81:11:32:e7:c1:fc:08:4a:b0:aa:ec:cf:6d:
         fa:5a:ed:bf:f2:83:b2:3f:7c:03:2f:59:1f:8e:aa:59:01:3c:
         51:ae:58:eb:5c:3b:bf:9e:c2:3c:da:0c:b9:af:db:86:9a:8e:
         3c:1f:f1:e4:64:f9:95:b4:5d:7d:ea:37:ba:8e:fe:3e:d0:76:
         f9:be:65:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:47:10 2026 by rpki-client