Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3334203d3e20323635393538.roa
File:                     323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (raw, json)
Hash identifier:          oWlTcm/xeoqkHRnGG1XrvWdrX9abGlKk/7Qg/pr1mHc=
Subject key identifier:   D4:BD:F7:FA:68:E3:B2:B4:47:F1:8F:0A:05:DA:47:4C:AE:FE:0E:B3
Certificate issuer:       /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
Certificate serial:       74A95CC1CAE0E9F95CCF845B62FBCC90040CD92A
Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3334203d3e20323635393538.roa
Signing time:             Tue 15 Sep 2026 20:00:37 +0000
ROA not before:           Tue 15 Sep 2026 19:55:37 +0000
ROA not after:            Tue 14 Sep 2027 20:00:37 +0000
asID:                     265958
IP address blocks:        2804:406c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl
                          rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 19:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a9:5c:c1:ca:e0:e9:f9:5c:cf:84:5b:62:fb:cc:90:04:0c:d9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
        Validity
            Not Before: Sep 15 19:55:37 2026 GMT
            Not After : Sep 14 20:00:37 2027 GMT
        Subject: CN=D4BDF7FA68E3B2B447F18F0A05DA474CAEFE0EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:81:3f:93:ac:a1:59:42:7f:1a:3b:bf:88:
                    24:f7:b5:d1:09:5e:3c:cf:75:10:a9:5e:1c:1e:32:
                    c6:c1:3d:8a:3f:25:49:ea:7c:f1:e9:71:0a:bb:79:
                    69:63:49:39:57:8c:82:7a:5b:cc:08:f4:ab:3c:bb:
                    66:20:f6:f3:45:c2:5c:42:c8:42:dd:81:88:f7:1e:
                    7c:5a:6c:76:2d:e6:64:f7:76:df:b4:15:4e:e2:04:
                    f1:83:18:90:9a:1c:35:0e:dd:30:c8:a6:3f:1c:1d:
                    97:ad:da:8e:42:4a:56:3b:10:14:47:f4:2a:b4:09:
                    e4:cd:d5:b7:b1:d5:a9:e1:fe:ab:ee:50:10:8f:91:
                    df:e6:44:e6:cf:d1:c8:ac:a6:75:ad:64:fe:d8:51:
                    ff:e8:38:83:01:b5:51:c5:00:ca:b7:84:83:c7:f4:
                    56:9a:f3:86:ed:da:c9:ed:61:6f:d5:7b:66:52:d1:
                    a6:69:61:54:6e:70:2b:9f:19:f4:ab:8a:2f:85:ef:
                    31:59:23:d4:5b:d8:14:c3:e3:10:b2:1b:f8:e4:3c:
                    fb:c0:40:c6:9c:5e:51:72:28:18:95:d3:81:93:35:
                    61:36:90:8c:26:67:18:0c:56:49:a9:80:ac:62:c3:
                    8d:3d:56:dc:5c:cd:89:26:fb:5e:99:ce:0c:f7:67:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BD:F7:FA:68:E3:B2:B4:47:F1:8F:0A:05:DA:47:4C:AE:FE:0E:B3
            X509v3 Authority Key Identifier:
                keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3334203d3e20323635393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:406c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:cd:ec:b2:41:dc:e2:0e:40:07:8a:d0:9b:80:65:43:4c:5a:
         8a:56:a4:42:16:70:8c:60:43:f7:89:88:ac:d7:6f:4f:fc:21:
         f4:b4:58:2d:d6:79:66:ba:14:bd:75:d7:ed:7b:80:22:24:f6:
         89:c9:26:83:1d:a1:ba:80:a4:ca:39:16:4c:e8:eb:f7:6a:18:
         cb:f2:1b:2b:db:fb:06:25:fc:a5:05:e7:63:12:9c:31:bb:f2:
         91:52:a3:a5:4a:e9:ad:2a:9b:a8:ae:d8:9c:1b:24:f7:4a:5f:
         60:cd:33:f1:f2:27:8d:2c:02:4b:2e:23:d1:9b:30:81:76:85:
         69:03:0f:19:36:b6:ab:76:d8:33:c5:17:bd:1d:79:94:c4:08:
         7e:13:ea:2f:e3:d8:e5:93:22:80:01:7b:3b:1e:25:51:3c:74:
         2f:9e:9c:6d:04:fe:b3:46:11:f5:6e:5b:49:21:4f:3f:49:e8:
         59:18:71:7f:4e:0b:d9:24:5f:a6:a3:ba:54:19:10:77:f1:d5:
         bb:8e:ec:f5:d3:f5:e4:78:4d:3e:5c:2d:15:52:e8:a0:b3:21:
         76:fe:55:71:30:12:ad:f0:14:03:21:19:5e:b6:61:10:04:7b:
         36:73:4a:78:a8:41:83:a2:57:76:3e:69:e5:65:75:5c:5d:e5:
         3b:56:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:34:53 2026 by rpki-client