Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa
File:                     323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa (raw, json)
Hash identifier:          T3AGCL5xdSb6X9ER06oeMb7T3jhdK7Du31kHl5K2XJw=
Subject key identifier:   16:C3:47:84:A9:B9:7A:9E:8A:DF:36:0B:8B:2A:51:1F:18:B2:93:E4
Certificate issuer:       /CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Certificate serial:       174851C61C44551B84437733FA1F20A26AAFB266
Authority key identifier: B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa
Signing time:             Tue 13 Oct 2026 16:31:52 +0000
ROA not before:           Tue 13 Oct 2026 16:26:52 +0000
ROA not after:            Tue 12 Oct 2027 16:31:52 +0000
asID:                     273444
IP address blocks:        2804:8eb8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl
                          rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 18:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:48:51:c6:1c:44:55:1b:84:43:77:33:fa:1f:20:a2:6a:af:b2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
        Validity
            Not Before: Oct 13 16:26:52 2026 GMT
            Not After : Oct 12 16:31:52 2027 GMT
        Subject: CN=16C34784A9B97A9E8ADF360B8B2A511F18B293E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:8a:cc:a7:c7:42:47:ef:87:f5:8e:63:56:
                    82:5a:44:0c:35:44:21:3b:7d:29:5a:06:34:ba:56:
                    53:4f:9a:a7:a8:f5:11:86:ed:a7:4d:42:2e:11:95:
                    32:32:7d:aa:99:6b:a9:04:bd:cd:cb:c2:f2:01:a2:
                    a4:db:d3:bf:43:31:a2:9d:36:94:26:8f:cd:04:fc:
                    2a:db:1f:58:87:db:0a:fb:af:4c:60:d4:af:9e:ed:
                    35:86:38:36:8f:7b:17:80:29:f3:2a:a7:7c:e0:7f:
                    c8:1f:ea:18:28:3a:b9:fa:4c:ab:65:a5:b5:82:bc:
                    41:4b:c6:65:52:19:81:b5:8f:1a:87:27:bd:92:05:
                    f5:bf:e3:0c:27:b5:63:5c:d0:c8:16:c9:2e:35:b8:
                    cd:dd:80:2e:75:bc:95:e1:6f:30:09:9e:7c:df:db:
                    57:28:1a:30:a7:cc:92:34:83:64:70:18:50:5d:74:
                    d1:b2:1f:26:c0:ee:36:f4:8e:98:c4:34:e3:fa:c5:
                    eb:67:d3:87:31:38:a5:ad:13:f9:70:53:dc:6a:2d:
                    03:67:71:50:bd:88:c1:ec:85:e5:2e:90:a0:64:d0:
                    ad:d8:1d:0a:e0:69:bd:ee:e2:04:07:d6:fa:01:10:
                    42:34:44:14:8e:b7:3e:82:69:ed:ae:0e:03:6b:42:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C3:47:84:A9:B9:7A:9E:8A:DF:36:0B:8B:2A:51:1F:18:B2:93:E4
            X509v3 Authority Key Identifier:
                keyid:B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:d0:90:a1:4b:24:2d:74:ac:bf:6e:bb:a4:e5:1b:db:18:e9:
         c8:23:5f:30:0e:cf:a2:38:8a:07:a4:56:2a:40:e7:de:d9:cd:
         59:22:5a:61:be:18:5d:59:75:0b:e4:12:13:a1:3d:27:43:9e:
         3a:9d:45:d9:fe:c8:d0:9e:ac:4c:00:23:34:3d:4c:14:65:30:
         a7:18:89:cd:26:5e:fb:c2:2e:24:35:7a:fa:04:37:8c:ef:58:
         00:b2:b6:f7:94:c2:8c:6e:13:14:22:3b:68:bd:72:10:bf:ed:
         77:a6:c9:ab:b3:45:22:07:29:2d:b7:5f:96:91:49:13:38:99:
         c8:ad:47:e2:27:c5:87:9b:79:d0:d3:09:a7:73:0f:74:4d:86:
         40:38:6f:ba:cd:38:c9:65:37:a3:09:e7:68:ee:d0:c8:98:cb:
         9a:69:0e:5c:94:c6:26:dd:15:e4:fa:12:71:50:68:6e:42:ef:
         50:43:94:3b:f4:1c:8a:18:09:23:45:a6:11:42:9b:5e:8d:81:
         fb:be:89:32:5c:87:49:87:95:64:c8:c7:85:3b:70:a3:ae:83:
         b6:1d:9d:41:51:c6:ad:51:b9:d2:34:6d:ed:ff:0a:be:59:c4:
         01:b1:e1:04:eb:01:a4:9a:ba:a2:00:70:79:77:a6:6e:39:83:
         5c:ae:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 09:55:11 2026 by rpki-client