Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          vQd2YHr50CRXILlA0pxoa/OXoBheThlOGVRtGjXeV9M=
Subject key identifier:   2C:54:FD:6D:41:00:9A:08:6C:94:EF:8E:DB:7A:52:41:9C:04:63:DF
Certificate issuer:       /CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
Certificate serial:       222AC19E8C4268053461658286B0462997690731
Authority key identifier: DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Thu 17 Sep 2026 18:55:26 +0000
ROA not before:           Thu 17 Sep 2026 18:50:26 +0000
ROA not after:            Thu 16 Sep 2027 18:55:26 +0000
asID:                     269566
IP address blocks:        2804:6688:1071::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2a:c1:9e:8c:42:68:05:34:61:65:82:86:b0:46:29:97:69:07:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
        Validity
            Not Before: Sep 17 18:50:26 2026 GMT
            Not After : Sep 16 18:55:26 2027 GMT
        Subject: CN=2C54FD6D41009A086C94EF8EDB7A52419C0463DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:d5:b2:d5:72:d3:bf:28:37:3c:86:c0:3f:
                    b6:20:38:6c:3d:a7:47:8d:ee:31:c8:d0:0a:d3:43:
                    ef:25:e3:de:c4:96:cf:78:1c:ca:49:f4:f5:0a:d9:
                    b8:73:4c:3a:26:5a:31:83:7e:2e:c5:37:21:16:eb:
                    fe:63:34:10:9b:89:f7:3a:88:c3:a3:b5:35:5b:3e:
                    b0:2d:14:32:9b:4e:49:fa:30:c0:7e:73:e9:5f:74:
                    6d:94:e1:0e:66:f1:9d:ae:30:b8:02:04:09:0c:3b:
                    4a:d8:6c:5e:fe:a2:d9:3b:21:1c:3f:d3:c9:0e:cb:
                    c0:6f:71:53:79:24:a7:7b:8b:ef:c9:62:41:12:f6:
                    71:c2:9c:6d:bb:8d:aa:7e:08:26:04:49:38:f0:79:
                    66:b9:a0:30:bc:59:de:a7:d1:a0:50:10:90:53:4a:
                    4f:0e:38:21:41:2e:47:ee:56:75:87:71:31:f6:4d:
                    d9:57:26:85:29:ec:c7:62:95:07:9f:b9:f2:aa:62:
                    30:27:28:bc:49:34:16:87:fd:8a:d7:16:1d:ee:e9:
                    be:8f:ca:47:db:73:18:e4:18:59:03:9d:9a:e2:97:
                    cd:3d:e9:2d:e0:ad:25:0b:1f:37:3b:24:33:57:e4:
                    97:ae:19:ba:45:cf:8d:ed:72:7b:32:06:7a:a9:28:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:54:FD:6D:41:00:9A:08:6C:94:EF:8E:DB:7A:52:41:9C:04:63:DF
            X509v3 Authority Key Identifier:
                keyid:DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:1071::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:f3:06:c3:f4:4d:90:ae:d7:24:bc:8a:f5:55:bd:14:cc:d2:
         ae:49:7e:c5:b5:ef:55:c5:16:a5:cf:13:16:e6:ab:ec:29:2d:
         45:16:ff:87:02:f7:cc:20:01:f3:17:1a:9e:4b:29:59:40:88:
         0d:e1:e6:60:b1:99:8f:fa:5e:0b:d3:13:ce:c1:97:3d:4e:46:
         f1:32:8a:e9:70:ac:ce:ad:7f:8e:c1:dd:12:1f:3d:fe:f3:33:
         a5:bf:f6:99:c7:97:2d:85:47:1b:54:66:7a:e2:42:f5:09:73:
         e7:73:11:f4:a0:83:aa:5f:59:2f:5c:75:37:51:d4:28:a3:32:
         14:b0:36:82:c2:46:ec:8f:ef:04:62:56:ca:25:b1:9c:b9:df:
         1d:a2:6f:d4:c7:cd:6c:83:74:d0:00:ef:ea:9f:29:96:58:43:
         b5:f9:33:c8:24:bb:03:d2:fc:57:36:47:61:7b:de:4e:e0:59:
         1a:22:ce:25:a7:23:87:36:07:61:d9:d6:3b:48:62:db:b3:d8:
         28:84:08:3b:9c:b0:47:c6:c7:1d:a2:97:67:d2:91:50:87:7c:
         91:e9:7d:e3:cf:ac:ac:4e:00:83:c1:4e:37:4d:23:84:98:f8:
         3a:00:92:94:a2:6e:5a:23:8f:a0:8a:c9:4a:14:fe:5d:06:a6:
         7a:84:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:35:10 2026 by rpki-client