Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa
File:                     323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa (raw, json)
Hash identifier:          iHDRZrLEexU1NlgsWimvm9W0XXcWjeX324xeKfA/Iog=
Subject key identifier:   2A:2C:5C:96:68:3A:A0:96:CA:08:37:9D:7D:0A:03:2D:00:50:3D:A7
Certificate issuer:       /CN=D1513638404A484545681236A6B4FFB90E8BE7D2
Certificate serial:       35947F0683528E1D7E5BF2E793A5854C596C701F
Authority key identifier: D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa
Signing time:             Fri 18 Sep 2026 20:59:31 +0000
ROA not before:           Fri 18 Sep 2026 20:54:31 +0000
ROA not after:            Fri 17 Sep 2027 20:59:31 +0000
asID:                     266471
IP address blocks:        2804:3858:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 22:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:94:7f:06:83:52:8e:1d:7e:5b:f2:e7:93:a5:85:4c:59:6c:70:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1513638404A484545681236A6B4FFB90E8BE7D2
        Validity
            Not Before: Sep 18 20:54:31 2026 GMT
            Not After : Sep 17 20:59:31 2027 GMT
        Subject: CN=2A2C5C96683AA096CA08379D7D0A032D00503DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ad:08:9a:08:be:71:10:d0:4c:fe:a0:84:a1:
                    eb:d4:c1:eb:f4:7c:d8:bd:28:3b:6d:13:0c:e2:59:
                    30:f2:1d:e5:b0:b7:38:77:1f:28:62:aa:c9:96:1e:
                    55:72:18:86:ce:a0:94:97:8f:2f:27:06:81:1e:ce:
                    da:70:62:59:59:01:0b:43:37:e0:ef:af:75:02:3f:
                    3e:b1:8b:75:9d:d2:0f:c9:75:e0:dc:26:ec:38:d8:
                    67:c0:ce:52:9b:2b:f3:f5:ff:67:42:65:73:f2:e7:
                    bb:ef:7c:a8:35:d7:61:a2:0f:fc:a9:fe:0b:a0:dd:
                    46:6f:7a:67:24:c4:06:01:fb:e0:7c:89:77:cc:66:
                    56:fb:7c:d6:12:fb:9d:ca:63:c4:07:5d:50:bf:a9:
                    63:e1:7d:81:96:97:92:5f:89:12:e0:2a:9b:d7:df:
                    04:32:35:8e:19:bc:61:14:18:7d:16:21:f4:f3:dd:
                    9e:89:5e:45:32:30:16:f5:14:2f:eb:72:92:81:3b:
                    93:cf:8a:6e:46:32:f7:47:81:46:af:dd:4e:a5:d1:
                    0c:a5:a3:c2:1d:84:14:85:b8:ea:c0:a5:bb:11:d9:
                    61:b9:8c:b2:06:2b:e4:50:c0:9c:72:b0:38:b7:02:
                    f1:97:71:60:8d:98:69:1f:1f:98:15:b9:f3:2a:a7:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2C:5C:96:68:3A:A0:96:CA:08:37:9D:7D:0A:03:2D:00:50:3D:A7
            X509v3 Authority Key Identifier:
                keyid:D1:51:36:38:40:4A:48:45:45:68:12:36:A6:B4:FF:B9:0E:8B:E7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/D1513638404A484545681236A6B4FFB90E8BE7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1513638404A484545681236A6B4FFB90E8BE7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:df:24:92:4d:74:4e:6a:44:26:8f:b6:c9:c3:ae:51:ea:01:
         af:60:6e:e2:6e:c0:1c:ea:3f:b1:31:40:bd:96:91:95:73:3e:
         03:cc:3d:54:f8:b8:3a:eb:31:1e:20:72:bb:8e:aa:21:43:b6:
         56:83:8b:e5:19:f2:03:57:eb:f0:50:8e:76:84:f2:ec:0b:1a:
         71:8a:88:dc:ac:78:43:f3:0b:3b:5d:c2:a0:2a:20:b9:66:56:
         06:a7:29:49:62:35:7b:69:ce:6b:66:fa:4d:2a:01:66:18:28:
         41:35:04:0d:66:a0:e1:7c:fa:41:ad:8b:d8:44:c6:91:8f:fc:
         0b:c2:f0:06:86:7f:7f:0c:28:5d:4e:dc:46:25:04:4c:a5:69:
         28:2b:8c:5f:33:15:91:53:2c:ff:7d:08:01:f9:b8:94:ad:46:
         4c:73:d8:de:56:a3:f3:f4:64:81:16:be:5a:d4:1c:de:fc:4f:
         55:a3:bf:03:6f:b6:66:50:20:a4:4a:1d:e7:c6:74:19:47:63:
         fb:31:80:0b:fd:94:7f:79:05:e6:8f:73:10:36:0e:f1:7a:2d:
         32:5d:e4:21:e9:9e:22:e5:9b:96:81:49:b1:23:bf:b7:a3:77:
         bd:a8:c8:9b:18:4c:68:43:0e:c7:b7:a8:a6:4e:a9:ea:33:8e:
         89:26:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 13:39:43 2026 by rpki-client