Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa
File:                     323830343a333665383a3a2f33322d313238203d3e203532393234.roa (raw, json)
Hash identifier:          yS0vB570c2fkQpOuKNl7mqjmmoMbH9TiHl9rl0HkS7c=
Subject key identifier:   B8:37:C2:CE:AD:32:2A:1D:1A:B0:04:D7:82:CF:8B:BB:D1:E3:98:FB
Certificate issuer:       /CN=88F45CA9F42577057740B3862841E292FEE58105
Certificate serial:       73F31C5FCACF683EB7B5E88423D74EDA0F16AC03
Authority key identifier: 88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa
Signing time:             Sat 12 Sep 2026 15:22:55 +0000
ROA not before:           Sat 12 Sep 2026 15:17:55 +0000
ROA not after:            Sat 11 Sep 2027 15:22:55 +0000
asID:                     52924
IP address blocks:        2804:36e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl
                          rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f3:1c:5f:ca:cf:68:3e:b7:b5:e8:84:23:d7:4e:da:0f:16:ac:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F45CA9F42577057740B3862841E292FEE58105
        Validity
            Not Before: Sep 12 15:17:55 2026 GMT
            Not After : Sep 11 15:22:55 2027 GMT
        Subject: CN=B837C2CEAD322A1D1AB004D782CF8BBBD1E398FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:88:91:6b:94:03:a5:da:81:45:c0:f4:1e:fa:
                    0d:ca:03:4e:02:6a:e0:48:76:13:79:6a:d2:70:ef:
                    3e:48:33:f6:54:69:23:1e:62:7d:d9:96:c8:1e:57:
                    3a:08:a6:ec:b6:43:a5:25:fe:47:64:11:3d:ec:67:
                    32:35:dc:23:08:8b:fb:73:13:37:d6:9e:07:2e:67:
                    87:1c:97:f2:4e:81:39:29:c7:5a:e2:9c:59:0c:8f:
                    2e:38:2a:f0:d9:43:4a:7a:36:c4:db:ef:d8:f2:09:
                    b6:87:23:df:bb:c3:8a:d5:5c:65:65:2a:0f:a4:2e:
                    be:1c:51:ec:78:9f:38:c1:e5:9e:7a:c3:c0:cd:4a:
                    8d:35:09:47:15:e2:f1:0b:bd:57:fb:53:7a:56:35:
                    b8:4e:d9:67:9f:b8:98:27:6c:da:65:19:19:ed:61:
                    66:3f:a7:75:f5:cb:93:4a:17:32:ff:d1:6f:b9:ee:
                    2a:e5:3d:8d:df:7d:f8:3d:74:d2:d6:a4:40:ae:24:
                    45:f7:3f:86:e1:3e:1d:55:6e:e4:af:7f:ac:41:0c:
                    31:86:a4:aa:87:c3:f8:d8:b9:f4:cb:13:77:b7:ad:
                    48:21:3a:ee:ae:85:a9:46:96:37:7a:ab:40:f9:6b:
                    e7:a0:03:e2:b2:06:09:fb:8e:03:8e:8b:32:62:3a:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:37:C2:CE:AD:32:2A:1D:1A:B0:04:D7:82:CF:8B:BB:D1:E3:98:FB
            X509v3 Authority Key Identifier:
                keyid:88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:1d:3c:d5:69:b2:a4:90:65:fb:69:35:67:0e:0e:82:12:ab:
         f4:a4:30:30:f4:f5:f3:a7:ca:d3:cb:e1:d3:b6:64:71:f0:45:
         4c:8f:b9:d9:d6:21:6a:b1:bb:be:32:91:ae:b4:ec:6d:10:a8:
         10:ab:66:70:d4:32:37:e7:91:48:f0:aa:ba:16:d4:78:1f:fb:
         a4:03:72:dc:8c:ea:ca:0d:43:4c:05:a1:f8:73:31:a1:83:df:
         9f:4a:3b:3b:51:c1:30:91:74:9b:f6:5d:94:ae:6e:99:4d:01:
         83:42:f4:0c:5c:a3:0a:ab:0c:48:70:4d:23:52:66:09:71:6d:
         af:a6:14:5d:ef:5a:f6:15:02:80:e5:30:40:c9:9c:a2:0c:80:
         82:d8:1f:b8:07:d3:08:b9:b0:ba:46:3c:5e:da:4e:4d:1e:df:
         e9:e0:75:f0:e1:a3:c6:45:d1:d8:29:9d:af:c4:f2:33:79:5a:
         c7:4e:2e:32:cd:dd:0a:2b:33:9e:c6:8d:2c:e7:8d:68:cf:3f:
         af:8c:e6:60:93:8b:6d:5b:a7:52:53:11:f9:3f:ac:21:56:37:
         65:ab:5e:63:12:7c:b2:47:98:bb:ca:70:01:87:f5:81:6e:ae:
         43:e5:19:e0:32:03:5b:ae:8f:4f:c9:14:35:51:12:77:b0:9e:
         22:93:7b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:59:32 2026 by rpki-client