Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a3a2f33332d3333203d3e20323637363238.roa
File:                     323830343a343435633a3a2f33332d3333203d3e20323637363238.roa (raw, json)
Hash identifier:          WRmwYTgROfHwIWcqiDtELTJy+r37KUM8/QJM8KWIDuU=
Subject key identifier:   DB:00:3F:A6:DB:EF:49:A4:A6:6E:7F:F4:B6:02:32:3E:51:6D:92:97
Certificate issuer:       /CN=1BF980B5FE300DE9C6E04A0593E2B16B4B14C213
Certificate serial:       5706FFAF5AC0796998DEB692CDC52EA1FE289CA8
Authority key identifier: 1B:F9:80:B5:FE:30:0D:E9:C6:E0:4A:05:93:E2:B1:6B:4B:14:C2:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a3a2f33332d3333203d3e20323637363238.roa
Signing time:             Wed 14 Oct 2026 18:26:53 +0000
ROA not before:           Wed 14 Oct 2026 18:21:53 +0000
ROA not after:            Wed 13 Oct 2027 18:26:53 +0000
asID:                     267628
IP address blocks:        2804:445c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.crl
                          rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 22:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:06:ff:af:5a:c0:79:69:98:de:b6:92:cd:c5:2e:a1:fe:28:9c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF980B5FE300DE9C6E04A0593E2B16B4B14C213
        Validity
            Not Before: Oct 14 18:21:53 2026 GMT
            Not After : Oct 13 18:26:53 2027 GMT
        Subject: CN=DB003FA6DBEF49A4A66E7FF4B602323E516D9297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:e8:a4:51:2d:dd:65:97:ef:c9:f3:84:45:
                    d0:a3:eb:44:d8:86:ac:dd:d1:64:89:a7:bd:54:75:
                    51:df:ee:75:5d:53:83:9c:61:c1:f0:48:9f:35:7e:
                    b5:3c:5e:28:e8:be:8a:91:bd:12:d0:e3:80:40:cb:
                    54:e1:d4:12:88:4d:e7:6e:81:6f:71:51:8d:9a:5b:
                    ec:f7:23:cd:9d:71:8e:fa:b5:39:cf:e2:7a:bd:d6:
                    35:6b:8f:49:79:a4:bb:bd:c3:ae:85:81:c7:ec:4f:
                    ea:18:c7:a3:a9:94:f8:00:ee:c6:1e:e0:38:af:7f:
                    e6:92:ff:67:ce:bc:a9:52:39:43:fa:90:63:2b:a7:
                    64:0b:2b:13:b4:90:6d:ab:bd:ac:d4:c9:18:cf:b8:
                    0e:d4:05:ba:72:a0:24:ef:0a:91:6f:5d:52:a8:e4:
                    d7:c5:3e:cb:b7:03:d3:65:27:0f:80:c9:a1:31:c6:
                    b3:3d:0e:95:87:02:bb:45:05:33:f6:87:18:51:bf:
                    95:4e:56:88:97:db:39:3f:77:ef:7b:f3:0c:7d:4e:
                    b6:c8:8d:b3:3d:1a:d8:00:a8:22:d8:b0:90:b6:24:
                    05:c7:22:75:ba:0b:08:c7:3c:9d:8e:cf:01:e3:4d:
                    12:1e:f5:0b:bf:dc:64:9c:c3:0d:4b:2e:fe:d9:36:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:00:3F:A6:DB:EF:49:A4:A6:6E:7F:F4:B6:02:32:3E:51:6D:92:97
            X509v3 Authority Key Identifier:
                keyid:1B:F9:80:B5:FE:30:0D:E9:C6:E0:4A:05:93:E2:B1:6B:4B:14:C2:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BF980B5FE300DE9C6E04A0593E2B16B4B14C213.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a3a2f33332d3333203d3e20323637363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:445c::/33

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:d0:71:a0:08:e8:69:d4:04:72:61:0c:84:af:fe:39:7d:
         0e:77:46:be:e2:ca:f6:fd:c5:f7:c6:98:b5:8b:b8:df:94:f7:
         53:a4:b6:46:df:9e:ec:61:cf:39:bd:82:4a:c1:3e:ae:ee:ea:
         02:c0:c0:d6:d7:83:f7:12:bf:84:e5:f1:d9:0c:f2:e1:c0:bb:
         20:0c:cc:84:27:ee:2c:41:30:27:46:21:c5:7b:1e:c6:73:64:
         a8:19:f2:d7:ea:15:2e:81:ab:7d:aa:5d:7e:ae:d6:8f:d5:a5:
         13:cb:2c:b6:86:db:09:23:bf:76:85:6f:22:cc:3e:90:52:0e:
         b8:0a:23:0a:77:cc:f9:ce:e9:b3:3a:28:fd:98:08:fd:4a:51:
         4b:08:5e:76:3a:6c:3e:e9:b0:e1:10:7d:c8:7f:ae:6f:13:e5:
         13:bc:45:cb:04:00:a6:f4:cc:7c:9a:35:11:29:f5:5a:30:b8:
         30:c7:3c:de:18:4c:d2:cd:4f:86:c5:29:06:18:35:52:c7:bb:
         1f:9e:c7:df:2b:74:86:da:07:a6:b0:35:3d:1b:f7:21:99:e1:
         9b:0a:b3:fe:b1:a1:65:87:68:98:aa:9d:b2:1a:25:89:91:cc:
         69:6d:97:c7:4d:b0:a2:0b:9a:34:8c:20:0e:3d:35:ba:29:f2:
         58:37:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 01:51:01 2026 by rpki-client