Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a343030303a3a2f33342d3334203d3e20323639353032.roa
File:                     323830343a363539383a343030303a3a2f33342d3334203d3e20323639353032.roa (raw, json)
Hash identifier:          FonFhiBVQxGLkOqMq/KghKIvElar21FQ3WT9RmGFwbQ=
Subject key identifier:   9A:2D:48:58:4F:11:CC:49:9A:AC:17:1B:CB:A8:15:FE:49:CD:75:6F
Certificate issuer:       /CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
Certificate serial:       62D838F18A2C083E239AA60DB15583EC609446E9
Authority key identifier: B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a343030303a3a2f33342d3334203d3e20323639353032.roa
Signing time:             Sun 04 Oct 2026 14:04:09 +0000
ROA not before:           Sun 04 Oct 2026 13:59:09 +0000
ROA not after:            Sun 03 Oct 2027 14:04:09 +0000
asID:                     269502
IP address blocks:        2804:6598:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d8:38:f1:8a:2c:08:3e:23:9a:a6:0d:b1:55:83:ec:60:94:46:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
        Validity
            Not Before: Oct  4 13:59:09 2026 GMT
            Not After : Oct  3 14:04:09 2027 GMT
        Subject: CN=9A2D48584F11CC499AAC171BCBA815FE49CD756F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:de:cb:35:a5:53:0d:1c:35:3b:6b:6f:af:
                    57:0b:a4:c6:ff:c0:96:0b:64:da:63:83:bf:28:5d:
                    81:0e:fa:89:51:d5:da:3c:83:90:dd:c9:6b:83:ed:
                    e3:61:28:1d:01:9d:a9:c0:52:a2:5e:70:37:72:50:
                    dd:af:ea:7c:f4:3a:71:b2:f1:40:a4:5b:23:a3:81:
                    80:30:fc:c5:c7:25:98:9b:21:a5:70:86:fa:4b:6f:
                    3c:d9:60:dd:25:67:18:a9:43:44:60:d8:32:dd:e2:
                    7b:86:75:6d:d6:73:8f:40:92:7c:38:92:47:6c:49:
                    90:c4:bb:88:f5:91:f1:2a:47:3f:8b:95:02:ed:52:
                    79:6f:45:fe:83:e4:cd:f9:60:f2:2a:f0:ba:54:43:
                    37:7c:00:53:19:bf:16:ef:02:d1:fc:93:9b:57:16:
                    68:9b:93:47:01:b5:0e:33:06:fe:23:8c:ba:2e:47:
                    28:ee:34:91:89:ed:38:82:99:7f:be:47:71:62:63:
                    e8:ef:03:36:3f:37:4f:f3:1c:0a:03:ed:8c:f9:3e:
                    e9:e4:b0:58:02:6d:0a:70:b3:db:96:60:40:c9:19:
                    05:6b:79:fc:e4:e2:f4:05:33:63:2b:76:ad:f0:94:
                    7c:4e:48:50:41:41:c5:f4:84:72:f2:f7:cf:a1:ea:
                    64:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2D:48:58:4F:11:CC:49:9A:AC:17:1B:CB:A8:15:FE:49:CD:75:6F
            X509v3 Authority Key Identifier:
                keyid:B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a343030303a3a2f33342d3334203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:cb:01:70:6b:6f:56:e9:e0:47:a2:81:e8:1a:94:dc:69:
         e6:75:e0:77:60:e6:03:62:06:ec:f3:a5:ad:bc:d3:72:c7:0f:
         90:ac:b7:40:01:99:6c:e2:93:5b:55:4d:b9:27:a2:82:01:79:
         3a:1b:9e:a6:d9:1b:72:d7:8c:36:17:1e:c5:a1:58:c3:b7:16:
         da:7a:0d:f4:36:c0:fd:0e:f8:de:b9:82:9b:c9:be:2e:b2:23:
         75:7e:70:6f:8b:0f:ed:a9:d9:c9:17:e9:22:81:16:0d:d4:9a:
         17:49:bb:c6:8d:87:fb:c5:55:f6:26:10:0c:ec:36:7d:e6:19:
         33:51:d1:a0:f9:46:3e:5a:66:c3:5b:48:4a:7f:f0:cd:0d:e4:
         87:9c:ab:8a:43:a8:3a:ff:f2:f1:74:a9:7e:01:c3:4a:0d:34:
         fd:0b:4b:c3:76:d2:59:b3:6c:05:97:9e:d8:84:f8:e7:b9:cb:
         91:5c:d7:9e:68:7a:a1:67:ea:db:7e:36:f8:27:18:8e:6f:de:
         d6:18:3e:81:3d:f0:31:8d:cb:fd:ec:44:58:b2:ef:a1:d1:80:
         66:d8:29:86:64:8c:4d:15:9e:84:5d:0b:30:2f:83:84:23:53:
         53:79:22:e7:13:e0:80:4f:c1:7f:4e:71:fa:5b:ad:19:e1:10:
         cf:8c:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:26:51 2026 by rpki-client