Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa
File:                     323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa (raw, json)
Hash identifier:          ihWXumkCSeBAetDbbGzvcHY38dHLkgn+x1f3oS1Nejo=
Subject key identifier:   32:68:D7:16:6F:1E:00:0F:51:C7:5A:C4:95:D3:1E:2C:72:27:AE:87
Certificate issuer:       /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
Certificate serial:       397AC25B154FF97ACEFE70E678F9BDBF91DF5359
Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa
Signing time:             Fri 25 Sep 2026 17:18:46 +0000
ROA not before:           Fri 25 Sep 2026 17:13:46 +0000
ROA not after:            Fri 24 Sep 2027 17:18:46 +0000
asID:                     263486
IP address blocks:        2804:1298:c000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl
                          rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 23:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7a:c2:5b:15:4f:f9:7a:ce:fe:70:e6:78:f9:bd:bf:91:df:53:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
        Validity
            Not Before: Sep 25 17:13:46 2026 GMT
            Not After : Sep 24 17:18:46 2027 GMT
        Subject: CN=3268D7166F1E000F51C75AC495D31E2C7227AE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:b2:45:11:c1:77:91:1b:96:ff:c4:02:4e:
                    52:d0:97:72:d6:a9:18:3d:3a:bf:3f:29:86:19:ec:
                    0f:e5:6c:b4:f6:2a:09:71:fe:a7:df:52:6f:f1:85:
                    b2:81:29:bc:6a:41:d1:cb:19:c6:b9:22:10:77:76:
                    df:c7:fe:b6:c9:29:fd:69:15:a9:25:e8:e8:0b:4d:
                    b0:a4:da:e0:9a:7b:21:9c:ab:35:25:14:76:77:05:
                    2f:d2:ef:18:74:4b:df:e0:5c:cc:01:5d:1b:fd:44:
                    8a:fd:dd:5f:4c:d9:de:b6:51:31:d9:14:7e:4b:39:
                    55:73:79:31:7d:76:ce:f0:fd:61:de:b6:05:30:32:
                    cb:26:78:6f:f9:3e:ad:c9:95:f3:13:02:8b:36:42:
                    0d:28:4d:6b:2e:6c:7d:39:a5:a2:a4:c2:94:f9:9f:
                    3b:77:66:06:23:52:a0:c6:92:d0:3a:5e:49:49:0b:
                    3d:b7:9d:5c:6e:e6:13:7f:76:80:ed:78:31:da:bd:
                    53:66:e7:d2:44:6f:27:aa:af:8b:7e:b1:ec:c4:7d:
                    c8:2d:fc:5c:76:3d:13:f1:64:6d:25:66:d4:57:ec:
                    6e:8d:07:01:85:1d:90:05:e7:b5:29:5a:51:44:28:
                    aa:a0:1b:ab:d1:f1:8d:b3:07:ca:64:8b:8a:c3:38:
                    69:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:68:D7:16:6F:1E:00:0F:51:C7:5A:C4:95:D3:1E:2C:72:27:AE:87
            X509v3 Authority Key Identifier:
                keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1298:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:3e:96:29:b1:4a:cf:da:97:40:0c:a9:3a:1c:11:63:fe:
         71:33:d5:c1:96:4f:c9:1e:24:13:a0:c3:4b:64:ae:6a:f8:34:
         e0:ff:5d:f9:ad:0d:3d:87:48:4a:1d:0a:96:16:70:04:8b:86:
         e0:89:e6:ce:bc:b5:f6:80:b3:5f:20:99:8d:d6:4f:1a:23:bd:
         70:74:19:0d:32:60:39:0b:51:d1:a0:06:a6:9d:82:98:dc:a6:
         a2:7f:32:a6:b2:60:72:50:29:a0:7e:0a:4f:58:51:db:fd:58:
         73:53:b1:6e:5a:56:40:50:c0:48:69:36:5b:73:71:4d:ed:c3:
         0f:71:07:9c:b7:63:6f:7b:b8:c9:de:31:35:58:e4:c4:11:90:
         46:8a:a7:6e:e0:a4:03:42:37:37:02:cf:92:9c:1e:e5:bb:8c:
         7f:28:85:a5:c1:c2:e7:ec:5e:fd:9a:33:71:59:f2:3d:48:6f:
         e5:b9:9b:fb:20:1e:24:86:96:a8:6f:2b:32:a4:9b:ae:22:e3:
         02:a6:8c:4c:fc:19:ec:c7:e9:89:80:c8:a4:1a:f7:c9:42:f1:
         44:b3:e4:44:72:e5:82:94:a6:45:a0:fb:45:76:ff:98:ba:1e:
         47:28:8a:42:eb:52:5a:0d:06:70:c6:83:91:34:dc:f1:a6:dc:
         f7:96:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:35:26 2026 by rpki-client