Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33342d3334203d3e203631373734.roa
File:                     323830343a313932343a3a2f33342d3334203d3e203631373734.roa (raw, json)
Hash identifier:          IVXcdtyfcivUkvOvN0FJbladupyThWI+tCHuLiLcMtc=
Subject key identifier:   CA:6C:DB:CB:06:B9:5C:59:BB:71:DF:03:CB:EB:6A:84:90:BB:18:77
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       79C7C609B90A7C77B75850F7010933EFD71FB8AA
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33342d3334203d3e203631373734.roa
Signing time:             Tue 15 Sep 2026 14:35:36 +0000
ROA not before:           Tue 15 Sep 2026 14:30:36 +0000
ROA not after:            Tue 14 Sep 2027 14:35:36 +0000
asID:                     61774
IP address blocks:        2804:1924::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 13:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c7:c6:09:b9:0a:7c:77:b7:58:50:f7:01:09:33:ef:d7:1f:b8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Sep 15 14:30:36 2026 GMT
            Not After : Sep 14 14:35:36 2027 GMT
        Subject: CN=CA6CDBCB06B95C59BB71DF03CBEB6A8490BB1877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:9a:60:a7:da:30:fd:39:75:6e:47:7a:f8:
                    22:af:5b:08:48:52:95:8c:f8:6d:b7:54:83:00:14:
                    c2:90:be:67:39:30:cc:04:72:5f:d3:c1:11:32:d7:
                    1a:0d:4d:dd:7e:d2:cc:15:2f:dd:57:29:0d:8c:94:
                    c9:09:d1:04:24:44:59:c6:6b:db:5b:4a:71:29:3d:
                    c4:15:71:39:ff:85:19:ec:9f:e0:ed:3a:bb:a4:9f:
                    cc:8c:4a:f7:74:9c:16:a8:16:2a:92:91:bb:80:a5:
                    4b:d4:7f:dc:7e:d7:8a:b3:80:cb:fd:bc:11:95:d2:
                    69:c6:07:98:df:a9:af:33:4f:88:cd:be:61:fb:fa:
                    94:4e:2b:a5:df:95:57:7f:29:a5:7a:0e:8e:f2:8b:
                    a7:24:cf:f8:ef:51:82:ed:e9:80:38:f1:1e:cd:35:
                    aa:3d:f3:50:db:43:cb:47:0b:1f:dd:b8:b2:73:d6:
                    60:f5:e4:36:8c:4e:dd:11:3d:c5:6c:f9:d9:81:83:
                    0b:37:e3:25:0e:07:59:c8:f7:4c:70:60:9f:2f:46:
                    6c:76:e5:0d:a6:75:ac:e7:8c:29:0b:ef:69:e3:19:
                    03:af:98:e5:7d:12:c9:aa:2f:17:bb:34:bb:16:99:
                    1c:7f:50:59:fd:db:4d:e9:c6:fa:3d:02:3c:b5:cb:
                    b3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6C:DB:CB:06:B9:5C:59:BB:71:DF:03:CB:EB:6A:84:90:BB:18:77
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33342d3334203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1924::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:29:8a:ae:04:5a:48:9b:af:cc:5b:4f:65:86:d3:bc:b8:
         61:a9:eb:54:e1:b7:8a:d1:bf:5e:7f:eb:4b:11:0b:33:e6:ba:
         07:56:c3:e8:4f:17:4e:3c:30:cd:9c:93:26:14:b0:3a:42:79:
         d4:75:e6:36:b1:65:b8:29:d6:db:13:26:ba:12:b7:e6:74:1e:
         67:f3:4b:d0:8f:6e:85:49:d9:ab:4f:c1:fe:a7:e7:30:0e:13:
         06:61:7e:0f:f3:20:52:3c:a1:d6:24:e6:28:e7:84:3b:8b:de:
         78:dc:23:43:36:b3:20:54:9a:5f:c0:7b:18:ce:83:f3:15:44:
         3a:04:4e:3c:89:69:47:57:d3:2f:54:25:7f:a0:c8:7f:b5:42:
         ac:19:2e:9c:89:3d:f0:15:e9:e5:a1:6a:f4:35:dc:91:1c:ac:
         70:58:90:de:eb:58:12:4e:45:08:78:8c:c2:90:9c:a0:35:c8:
         06:ee:23:6a:c8:17:fc:93:84:55:6a:42:ef:3f:0a:c3:38:89:
         af:dd:eb:2b:a0:0e:75:62:6e:b5:f4:4c:a7:d8:31:ea:35:a3:
         30:0c:ff:0a:4b:7a:15:88:c0:e8:93:c1:a2:5b:b3:c0:e4:6e:
         50:7c:44:e7:76:ed:50:2b:c4:5c:1f:79:22:5e:53:8d:7a:7b:
         95:9f:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:00:46 2026 by rpki-client