Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa
File:                     323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa (raw, json)
Hash identifier:          jlxvbAR8u7K5+89ZWEyk6AE9I/m3SfdCP2NTh5wxgjY=
Subject key identifier:   FF:81:F6:52:E2:01:37:FD:79:1C:0F:BC:B6:0F:5E:8B:DF:07:26:6D
Certificate issuer:       /CN=39617E203F82D2D9B62B447669E4398088A02B16
Certificate serial:       3194DECF278E6F1A8B8B9C88934C3C968608B3C8
Authority key identifier: 39:61:7E:20:3F:82:D2:D9:B6:2B:44:76:69:E4:39:80:88:A0:2B:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39617E203F82D2D9B62B447669E4398088A02B16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa
Signing time:             Sat 12 Sep 2026 14:31:08 +0000
ROA not before:           Sat 12 Sep 2026 14:26:08 +0000
ROA not after:            Sat 11 Sep 2027 14:31:08 +0000
asID:                     61608
IP address blocks:        2804:8270:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/39617E203F82D2D9B62B447669E4398088A02B16.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/39617E203F82D2D9B62B447669E4398088A02B16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39617E203F82D2D9B62B447669E4398088A02B16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 18:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:94:de:cf:27:8e:6f:1a:8b:8b:9c:88:93:4c:3c:96:86:08:b3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39617E203F82D2D9B62B447669E4398088A02B16
        Validity
            Not Before: Sep 12 14:26:08 2026 GMT
            Not After : Sep 11 14:31:08 2027 GMT
        Subject: CN=FF81F652E20137FD791C0FBCB60F5E8BDF07266D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:23:82:3d:65:44:8d:78:3d:ef:fd:e1:1a:
                    6b:85:62:72:ab:3a:15:c0:84:54:8f:2d:b1:d5:ad:
                    13:a5:23:a2:c0:58:39:71:a3:3b:17:6c:05:0a:cf:
                    be:b2:dc:ca:95:5c:6d:ae:c4:ec:96:9d:91:1b:2c:
                    9e:4f:02:0a:7e:89:89:3c:95:57:95:ca:70:ec:22:
                    55:57:2b:86:6c:4d:52:68:83:eb:e0:88:bb:e3:59:
                    d4:c8:5a:39:c8:10:d5:a2:7d:d5:00:47:74:7d:99:
                    30:3e:d9:44:d6:19:e3:d2:70:1a:ad:d5:4a:ed:a6:
                    fc:9f:7a:50:f5:1c:98:e6:69:a3:a5:b3:2e:c0:92:
                    00:ca:60:3c:24:88:fb:1b:ee:72:0c:51:2a:fc:63:
                    29:f9:eb:01:0d:4a:09:e5:be:ed:50:f1:9c:79:a2:
                    43:1a:77:47:f5:d3:ec:76:d5:e2:af:84:11:24:66:
                    b6:97:f4:9f:84:11:e6:83:e8:7d:51:2d:62:37:cb:
                    a6:df:c2:dc:7a:56:07:a2:64:e2:8c:a3:ec:f9:c4:
                    35:40:0c:26:f0:21:b6:ca:b4:5e:ef:2f:50:1d:15:
                    38:e8:8c:cf:8c:7e:a2:2e:b3:ba:c1:1b:4b:f4:0c:
                    ca:0a:45:24:2e:e1:63:da:77:c9:97:c1:dc:ad:ae:
                    17:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:81:F6:52:E2:01:37:FD:79:1C:0F:BC:B6:0F:5E:8B:DF:07:26:6D
            X509v3 Authority Key Identifier:
                keyid:39:61:7E:20:3F:82:D2:D9:B6:2B:44:76:69:E4:39:80:88:A0:2B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/39617E203F82D2D9B62B447669E4398088A02B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39617E203F82D2D9B62B447669E4398088A02B16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:f3:be:49:95:9b:93:b2:dc:ad:bc:6d:63:c4:5d:e7:5b:86:
         7e:7d:4d:dd:fc:75:59:8c:34:04:75:7f:f4:b7:e3:15:8f:d9:
         8c:b4:f9:1f:25:1c:a9:ba:2b:df:39:26:0a:47:df:d6:bd:54:
         e5:32:11:4d:44:db:82:2d:cf:1b:38:3e:0b:2d:48:7a:10:b4:
         11:9a:45:80:a0:42:10:87:b9:08:42:f1:71:a4:7a:4f:63:18:
         01:6c:71:be:be:69:99:e8:38:74:ce:80:f9:c3:c1:b2:96:18:
         61:d8:af:d5:0c:9f:bd:17:34:14:ec:9c:da:e1:7f:b8:71:6f:
         d6:93:5d:ed:3e:b6:ad:95:94:6d:b6:5a:d9:22:13:b4:51:5d:
         47:f0:1a:dc:f4:c4:0f:01:10:53:e3:e4:d8:2e:2b:ca:e4:f8:
         e9:7f:d4:3f:95:41:65:5e:82:5a:e1:c5:d7:f7:37:78:bb:49:
         0b:7d:2f:d7:58:10:0d:a2:32:e2:8a:50:d8:d3:71:d5:1e:bc:
         21:1e:54:96:6d:86:3c:a1:1b:54:ef:ed:16:58:b7:5a:03:58:
         b2:87:64:54:f0:eb:dc:7e:8b:8e:65:96:05:9f:b7:ae:fe:dc:
         af:ba:d5:fe:aa:66:81:01:34:bd:18:84:91:2a:4b:97:05:10:
         f5:92:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:34:25 2026 by rpki-client