Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/323830343a336632303a3a2f33322d313238203d3e20323636363431.roa
File:                     323830343a336632303a3a2f33322d313238203d3e20323636363431.roa (raw, json)
Hash identifier:          P2pm6KIUmVwglEWuU3eMiadjWR+CSIWCgzh6YEpDkFU=
Subject key identifier:   5F:D5:B8:09:64:13:A6:46:62:46:27:5C:52:19:66:68:D1:51:03:96
Certificate issuer:       /CN=6620E7E637362D4E42A914BCCAEBB44C4ADE193D
Certificate serial:       4A552F2E0217D457819BD6F98F5B8290A4EBDFE1
Authority key identifier: 66:20:E7:E6:37:36:2D:4E:42:A9:14:BC:CA:EB:B4:4C:4A:DE:19:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/323830343a336632303a3a2f33322d313238203d3e20323636363431.roa
Signing time:             Sun 11 Oct 2026 16:53:48 +0000
ROA not before:           Sun 11 Oct 2026 16:48:48 +0000
ROA not after:            Sun 10 Oct 2027 16:53:48 +0000
asID:                     266641
IP address blocks:        2804:3f20::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.crl
                          rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 12:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:55:2f:2e:02:17:d4:57:81:9b:d6:f9:8f:5b:82:90:a4:eb:df:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6620E7E637362D4E42A914BCCAEBB44C4ADE193D
        Validity
            Not Before: Oct 11 16:48:48 2026 GMT
            Not After : Oct 10 16:53:48 2027 GMT
        Subject: CN=5FD5B8096413A6466246275C52196668D1510396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:82:42:f4:4e:1c:22:62:15:c0:d4:cc:a7:
                    26:39:d8:0a:ca:17:b8:2a:cf:65:69:01:26:33:6d:
                    60:4c:61:8e:6f:71:31:7f:f0:2c:17:7b:98:0b:ed:
                    5f:d3:0d:e0:14:57:06:02:8f:2a:49:c1:88:49:7d:
                    83:db:61:e4:8d:bb:fa:b9:6f:4b:8c:a1:41:3b:9b:
                    af:0c:d4:33:9d:0d:b6:dd:c8:e4:4c:6a:b3:3b:f0:
                    65:96:45:3b:a8:82:6e:d7:72:f1:18:39:9f:28:61:
                    b4:35:61:0e:c0:3d:33:73:39:c5:72:a1:e5:58:ee:
                    64:85:ed:ac:0e:a0:1f:6b:d0:0a:48:e2:53:25:c6:
                    36:99:dc:81:b3:9a:0d:0f:38:96:7c:f1:c8:09:cb:
                    b7:b1:ae:35:96:7e:a3:72:3a:1f:8e:33:c7:7d:c5:
                    c9:cd:11:4e:21:a5:26:01:ca:94:c4:8f:29:66:27:
                    73:91:7b:25:d4:53:bd:58:e3:b8:16:a1:6f:20:09:
                    2a:d6:c1:06:de:4d:a0:93:15:9c:55:35:23:72:3e:
                    da:ff:dc:45:c2:ac:c8:f4:84:3a:7f:d3:bb:65:f2:
                    d8:72:96:95:8b:ff:a7:ab:81:96:e7:99:9b:c3:f2:
                    45:6c:6d:02:ee:51:32:ac:5c:ff:7a:eb:a0:21:e4:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D5:B8:09:64:13:A6:46:62:46:27:5C:52:19:66:68:D1:51:03:96
            X509v3 Authority Key Identifier:
                keyid:66:20:E7:E6:37:36:2D:4E:42:A9:14:BC:CA:EB:B4:4C:4A:DE:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6620E7E637362D4E42A914BCCAEBB44C4ADE193D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cw2NPuKyqz9XCyK4XtunZ8FyUpcbXp536jcevNpJEkhW/0/323830343a336632303a3a2f33322d313238203d3e20323636363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:e4:46:d7:4b:50:a6:32:a3:6c:9f:9e:5b:32:b5:1a:cc:f5:
         68:6d:cd:cd:1f:e5:d9:b6:e6:11:b9:69:66:23:2d:ab:b1:60:
         f7:0e:d6:79:26:0c:4a:22:85:11:77:0e:a4:be:6f:a2:82:f8:
         c5:c9:ee:e8:9b:a7:a7:93:5c:56:ce:bd:94:19:ce:9d:f6:6f:
         64:42:f9:23:b9:07:41:33:e9:3d:1f:6c:13:12:41:22:f0:c8:
         3a:94:05:2a:7e:e5:9e:6b:7b:ea:2e:a1:f2:33:65:0b:59:c4:
         e7:20:3c:94:9b:fa:35:48:90:2f:d6:0c:85:10:2a:0b:c8:d6:
         47:76:8a:50:0c:e1:3c:89:7e:da:33:9d:c2:72:25:d0:3c:7e:
         68:cc:5d:a5:02:2e:4d:82:0e:d2:3d:f6:0d:1b:24:de:5d:e5:
         78:ac:47:f3:1c:7f:b2:23:2b:d1:ab:a5:ec:e5:4a:6a:59:0b:
         ca:53:9d:fd:e5:4a:36:fe:89:a4:10:50:43:12:79:cc:d2:73:
         64:fe:6a:67:12:b4:67:50:6a:0d:1c:41:51:f2:21:92:83:78:
         81:64:78:07:52:23:2b:91:90:60:d9:7e:a3:3a:a1:d6:c1:cd:
         5e:7e:6c:4b:cc:d3:52:13:82:2c:d7:98:0d:b1:96:d2:08:90:
         1e:94:ae:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:31:30 2026 by rpki-client