Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          4HkNqJZ3d/DwC/RB1Nfju50t9q3rShyWLYOeAcXv1as=
Subject key identifier:   A2:BF:F0:0D:14:5D:6C:ED:97:43:05:6D:D8:9B:51:6B:B9:62:FE:19
Certificate issuer:       /CN=D4C1800777B6B27702B6747E148FA0063550B046
Certificate serial:       72FEBA43CBF723F251658083E599609BEF4C830C
Authority key identifier: D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 17 Sep 2026 13:50:50 +0000
ROA not before:           Thu 17 Sep 2026 13:45:50 +0000
ROA not after:            Thu 16 Sep 2027 13:50:50 +0000
asID:                     265919
IP address blocks:        2804:3fd8:8946::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fe:ba:43:cb:f7:23:f2:51:65:80:83:e5:99:60:9b:ef:4c:83:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C1800777B6B27702B6747E148FA0063550B046
        Validity
            Not Before: Sep 17 13:45:50 2026 GMT
            Not After : Sep 16 13:50:50 2027 GMT
        Subject: CN=A2BFF00D145D6CED9743056DD89B516BB962FE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:6c:f8:ac:89:e6:03:b5:e8:95:e2:5c:76:
                    55:2f:c8:5a:c5:b7:a3:0c:6e:ab:c4:98:ae:9e:d7:
                    6b:15:29:8f:d6:a9:4e:47:ca:0a:49:79:2b:10:5c:
                    4a:9b:19:9d:98:1b:2c:f0:59:92:a9:0a:44:5f:05:
                    36:9d:8e:d7:69:13:8a:64:81:8c:45:64:7c:3b:82:
                    6c:27:69:fc:83:95:1c:e3:d2:a1:86:aa:3a:3b:f4:
                    fb:c2:25:5b:e4:fb:bd:b5:80:d9:94:63:ab:41:77:
                    16:5a:50:c4:41:2d:dc:c1:db:39:e7:e5:6d:0b:89:
                    a8:dd:46:90:8f:a8:94:20:dc:14:b2:52:7d:0a:ff:
                    3c:52:e0:39:13:17:f2:a2:53:e4:e6:27:e1:ca:88:
                    fc:42:f0:00:61:56:bb:77:b1:fb:c5:c3:f8:90:0c:
                    14:8e:83:98:a0:b6:fd:73:3e:a9:f5:d8:1f:4f:91:
                    41:53:3f:02:d6:a0:57:26:a4:94:bc:41:d1:cc:76:
                    c7:b5:b0:75:c8:d0:4d:f7:ee:93:14:8e:65:30:1c:
                    93:c4:f8:85:3b:24:e0:3d:6c:68:7d:ea:78:68:5d:
                    9e:c2:f6:b4:6d:a9:b3:ff:cf:0f:4b:81:6c:8d:b3:
                    6f:eb:47:d9:d1:94:d5:47:5b:cf:44:7f:9f:e7:08:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BF:F0:0D:14:5D:6C:ED:97:43:05:6D:D8:9B:51:6B:B9:62:FE:19
            X509v3 Authority Key Identifier:
                keyid:D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:8946::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:ad:fe:4a:ac:1f:41:d8:18:6e:d1:3f:23:f3:c2:67:77:91:
         e1:68:e9:03:97:8b:8f:c2:4f:cb:c5:dc:49:02:4e:5f:c1:6e:
         4c:90:ea:cb:70:5b:62:f4:7a:cc:ea:b8:04:aa:09:0f:c2:be:
         b4:05:43:8a:63:1e:d7:7e:27:4d:64:2b:93:09:b7:97:47:e7:
         ee:4d:f0:4a:ff:4a:a4:87:53:b1:76:65:02:49:b1:41:c6:fe:
         29:82:bd:f7:4d:0e:bf:43:6a:34:32:0a:33:00:38:19:fe:f5:
         15:70:67:d5:2e:02:67:04:50:f0:ff:ba:29:41:2f:91:43:c6:
         16:5b:95:63:a8:64:10:7d:66:7f:0f:7e:f7:68:02:55:bf:53:
         c1:bb:c0:21:0a:28:1a:be:27:da:61:50:77:09:a9:c6:37:f4:
         1c:8b:65:ab:29:6c:40:11:32:27:67:94:3b:37:97:79:6c:cc:
         9e:6f:69:41:7b:6a:6e:67:3c:a2:5d:c7:09:7c:db:71:a4:14:
         5c:0d:61:87:bc:c6:b1:45:03:e7:0e:92:1a:a9:69:70:69:28:
         2a:d2:6e:0b:ce:e0:a9:01:03:bd:35:14:43:3a:80:87:2e:ac:
         53:d0:d3:d4:72:1d:18:29:c5:b1:e5:d5:b1:eb:b3:a5:7b:4d:
         e5:88:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:23 2026 by rpki-client