Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a34303a3a2f34322d3432203d3e20323639333539.roa
File:                     323830343a363336383a34303a3a2f34322d3432203d3e20323639333539.roa (raw, json)
Hash identifier:          JNSzZHR5sSSj/o8YOw6f1J8kNEY81wt584pbN+knRpQ=
Subject key identifier:   DB:FF:E1:D4:F1:FD:C8:98:6A:AB:0A:84:CB:F7:FC:80:33:02:CA:09
Certificate issuer:       /CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
Certificate serial:       69BE8D23AB1FF723C0814E10BC0DDB618847B71E
Authority key identifier: BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a34303a3a2f34322d3432203d3e20323639333539.roa
Signing time:             Thu 10 Sep 2026 11:28:59 +0000
ROA not before:           Thu 10 Sep 2026 11:23:59 +0000
ROA not after:            Thu 09 Sep 2027 11:28:59 +0000
asID:                     269359
IP address blocks:        2804:6368:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:be:8d:23:ab:1f:f7:23:c0:81:4e:10:bc:0d:db:61:88:47:b7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
        Validity
            Not Before: Sep 10 11:23:59 2026 GMT
            Not After : Sep  9 11:28:59 2027 GMT
        Subject: CN=DBFFE1D4F1FDC8986AAB0A84CBF7FC803302CA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:b2:12:73:c2:08:e8:6c:82:72:6b:df:29:
                    f0:73:85:b2:86:3a:ff:0f:5e:01:90:ab:d5:c9:93:
                    fb:67:e0:95:f3:41:68:3d:2b:3a:0e:da:d2:fe:57:
                    f0:38:ed:c4:6b:3d:ce:57:da:3b:5e:33:80:75:b0:
                    92:4f:7f:8b:1c:cb:b1:0e:e1:05:26:15:08:a9:c6:
                    a7:a3:19:d7:a2:c4:17:fe:55:1b:d9:aa:43:b5:5e:
                    1b:2d:10:2f:63:2b:89:be:66:ff:85:6d:5e:d9:4b:
                    b9:a2:29:17:75:f8:c3:b8:b0:ba:ef:71:05:f7:52:
                    f7:d3:06:ca:5c:69:f5:82:64:41:8c:ff:ba:ba:e1:
                    2e:b3:96:e2:82:0f:cf:11:4c:a2:c7:47:51:39:31:
                    b4:d0:6d:b5:ea:d1:6f:90:d1:b7:17:c9:bc:7a:4a:
                    07:39:4b:0c:06:a3:71:f4:44:d5:88:4d:9a:7a:00:
                    21:ca:4f:18:24:e1:95:81:1e:37:29:e4:53:be:cc:
                    b2:a0:b5:74:f8:87:15:37:25:94:a0:46:1b:fd:7a:
                    00:bf:1e:1d:c7:5b:2e:d1:7d:c0:bd:e0:81:15:d5:
                    ea:48:d9:61:f5:c1:10:5e:26:26:4a:62:5b:eb:a7:
                    de:cd:da:82:18:03:5e:e2:52:61:46:3f:7b:76:3c:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FF:E1:D4:F1:FD:C8:98:6A:AB:0A:84:CB:F7:FC:80:33:02:CA:09
            X509v3 Authority Key Identifier:
                keyid:BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a34303a3a2f34322d3432203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         a9:3b:48:fe:c3:05:ac:85:9a:45:a8:77:79:7d:7c:5d:3a:33:
         70:53:ea:27:dc:0f:6e:43:f9:46:b3:2f:30:a7:91:7a:d7:94:
         96:fe:89:41:6c:49:64:71:6c:b7:d2:9d:f9:5c:e7:8e:8f:94:
         fe:e8:2b:7a:34:86:bd:59:cf:11:f7:ca:08:3d:ca:c7:de:b7:
         eb:25:3c:83:05:b6:93:73:d5:18:20:be:05:e2:18:2a:d2:01:
         69:e1:3a:ae:17:ed:f4:6c:7b:46:82:42:63:b0:29:7c:39:4d:
         14:eb:86:b3:86:54:38:0e:c0:58:27:75:ee:47:3f:1e:03:f4:
         e7:91:fd:79:0d:45:8d:07:95:83:30:5f:39:53:26:3a:a5:89:
         04:59:a9:f1:68:bc:34:35:a1:7c:ff:73:9b:95:3f:2c:19:b1:
         26:98:01:0d:d9:bc:ed:ab:80:93:42:29:62:37:1f:aa:dd:54:
         17:36:ed:2b:74:f1:2c:46:f6:7e:71:bf:61:4a:a1:1e:0e:2b:
         91:b6:4c:31:f0:9e:5f:24:aa:27:6f:4d:48:9c:22:86:ed:ba:
         b9:ec:5e:0c:ad:83:45:cd:a6:ce:ef:08:06:65:0a:37:11:b5:
         ed:0b:f3:51:e6:27:5f:44:41:fc:c1:ff:fd:5b:83:bb:19:63:
         29:8b:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:23:12 2026 by rpki-client