Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383538303a3a2f34322d3432203d3e20323730333530.roa
File:                     323830343a366161343a383538303a3a2f34322d3432203d3e20323730333530.roa (raw, json)
Hash identifier:          EOyPbqDN6rJXH2h7zRWfUewQjlR8FEU+NanKQF0Klrk=
Subject key identifier:   98:4E:BA:68:1B:3D:4F:8B:89:C4:E6:E7:70:1B:9B:1F:24:F7:F4:4D
Certificate issuer:       /CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
Certificate serial:       2C4EE9E427D568622F408DA179A3615A417BC4C0
Authority key identifier: 18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383538303a3a2f34322d3432203d3e20323730333530.roa
Signing time:             Thu 01 Oct 2026 18:47:50 +0000
ROA not before:           Thu 01 Oct 2026 18:42:50 +0000
ROA not after:            Thu 30 Sep 2027 18:47:50 +0000
asID:                     270350
IP address blocks:        2804:6aa4:8580::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl
                          rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4e:e9:e4:27:d5:68:62:2f:40:8d:a1:79:a3:61:5a:41:7b:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
        Validity
            Not Before: Oct  1 18:42:50 2026 GMT
            Not After : Sep 30 18:47:50 2027 GMT
        Subject: CN=984EBA681B3D4F8B89C4E6E7701B9B1F24F7F44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:57:c7:25:f6:89:b0:62:0f:70:db:2a:d6:
                    e4:bc:d6:87:c7:17:37:af:f4:a4:dc:24:78:ef:45:
                    81:28:10:4a:5d:88:bf:45:b9:d6:03:58:f3:78:b5:
                    61:90:51:5e:39:0e:44:67:b1:30:38:61:5a:52:be:
                    ac:57:81:89:cb:bd:a9:d8:80:b7:ec:88:59:08:91:
                    e1:29:b3:cc:63:a2:7f:cc:72:b9:df:fe:b8:74:1d:
                    16:94:a4:c4:50:72:16:a7:12:41:ef:d1:25:80:1e:
                    97:e3:ce:ab:b5:f1:5d:f7:06:cf:63:4b:c9:42:21:
                    4b:77:49:aa:a0:9d:d6:fc:65:f5:b1:b7:5a:0d:83:
                    af:73:e8:e6:d8:7f:ea:40:bd:b0:38:7f:42:36:4a:
                    ee:e8:f4:74:b1:e7:c1:8f:45:c4:f0:82:44:ae:d2:
                    8d:c3:40:46:20:6e:80:61:f6:20:88:7e:ff:37:ec:
                    62:3c:06:e0:d7:9c:cf:f7:10:0d:52:10:82:f7:ee:
                    90:43:28:2c:41:96:f5:2c:2f:c2:94:2f:7f:ac:e8:
                    fa:35:99:6c:02:c3:8b:09:37:e8:5a:76:ed:a2:3c:
                    a2:f7:f7:44:7e:59:b0:10:5e:20:96:9e:72:23:a2:
                    c3:8c:85:fc:92:ff:5c:a4:7f:d3:4a:ab:62:60:3e:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4E:BA:68:1B:3D:4F:8B:89:C4:E6:E7:70:1B:9B:1F:24:F7:F4:4D
            X509v3 Authority Key Identifier:
                keyid:18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383538303a3a2f34322d3432203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6aa4:8580::/42

    Signature Algorithm: sha256WithRSAEncryption
         ba:f7:79:72:f2:c8:35:e8:52:c8:ad:16:62:af:d7:2a:97:de:
         3b:9f:20:aa:d6:ed:5e:73:67:60:46:dc:62:4b:04:d3:e0:d4:
         65:bc:c1:0b:f0:11:33:bf:f9:40:d6:af:45:8f:6e:78:27:94:
         cb:79:d5:ed:3e:ff:9e:f9:30:27:e1:5b:a9:3c:4d:25:27:ad:
         4e:c3:00:48:44:b3:e8:9a:5c:d8:21:56:d2:29:2d:94:df:5a:
         e0:2d:ea:05:b3:ca:6a:10:16:36:70:03:68:37:ce:92:89:2d:
         03:19:91:fe:a4:df:f4:18:3b:01:8e:74:18:63:af:01:de:01:
         78:58:f6:2e:58:14:64:50:ac:37:83:c9:c4:43:23:6a:cc:05:
         99:60:81:d9:df:0c:16:87:f2:dc:1b:80:c1:d3:37:d9:36:a4:
         b1:60:5b:ff:0e:a7:e8:bc:a2:9e:6c:6b:38:28:c8:4e:6f:e2:
         19:0f:90:b3:25:56:eb:a3:1d:63:86:25:16:5b:ef:8c:b8:87:
         3e:dd:98:63:38:2c:47:bc:a8:18:e4:71:66:36:de:7d:4e:6c:
         06:d8:16:1b:67:90:17:2a:a0:78:0a:e3:ef:59:84:03:69:df:
         5e:0d:88:37:73:6c:99:a6:17:46:50:52:b1:4f:4e:c7:5e:2e:
         da:99:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:34:39 2026 by rpki-client