Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
File:                     323830343a3362303a3a2f33322d3438203d3e203533303632.roa (raw, json)
Hash identifier:          oBrG8PhvuSptjCO5LyieiHOiuwoyTulJX2yLjxyFJek=
Subject key identifier:   AC:85:FC:1E:34:0E:EA:90:70:A3:60:2F:EA:B2:37:72:AE:45:02:FD
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       2B4D62CE784B5D5BB845DF3B6E49AF541ACD0CD4
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
Signing time:             Thu 17 Sep 2026 00:23:09 +0000
ROA not before:           Thu 17 Sep 2026 00:18:09 +0000
ROA not after:            Thu 16 Sep 2027 00:23:09 +0000
asID:                     53062
IP address blocks:        2804:3b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 13:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4d:62:ce:78:4b:5d:5b:b8:45:df:3b:6e:49:af:54:1a:cd:0c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Sep 17 00:18:09 2026 GMT
            Not After : Sep 16 00:23:09 2027 GMT
        Subject: CN=AC85FC1E340EEA9070A3602FEAB23772AE4502FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:27:0e:be:b5:12:44:b9:2f:2d:c0:d9:e3:a0:
                    16:28:21:e5:37:3d:ee:86:d5:25:fe:89:6e:67:fd:
                    a6:ec:62:d4:c9:8c:19:76:13:31:a3:9d:ff:5c:5e:
                    ef:af:a5:41:7e:bc:16:4e:31:3f:2c:aa:4b:a8:52:
                    3a:36:97:00:1d:f0:0a:f8:88:ae:ca:6d:07:91:cb:
                    77:a7:e2:3c:d6:d2:e4:2b:d3:14:98:6a:50:a4:ae:
                    51:a8:31:83:a0:e0:2a:9c:40:37:9f:76:55:70:7e:
                    22:7c:49:b3:d7:a1:87:a3:db:af:7a:9f:cd:17:45:
                    e9:3f:18:96:74:87:96:73:67:da:6d:d2:f9:10:03:
                    e1:4d:3e:a7:e0:e7:7f:d6:11:3b:81:82:e2:35:a4:
                    dd:c8:e4:65:a7:b5:47:0c:ad:48:b8:a0:73:5c:dd:
                    c9:79:20:f5:24:b7:37:67:a6:5a:14:03:87:f4:dc:
                    03:fc:c0:b4:ab:70:08:5a:42:3c:7c:82:ef:4a:e1:
                    3a:2c:b1:18:dd:8f:03:23:2a:78:8a:67:a7:07:e6:
                    46:7d:0e:70:9e:09:ab:6c:fc:df:26:75:65:b2:cb:
                    5a:69:7b:34:a0:b0:8a:94:48:10:d7:65:b9:fe:91:
                    d5:1f:7b:3f:70:71:de:da:53:68:d9:4b:d8:35:87:
                    8a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:FC:1E:34:0E:EA:90:70:A3:60:2F:EA:B2:37:72:AE:45:02:FD
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/323830343a3362303a3a2f33322d3438203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:70:22:86:c2:b4:81:e6:ba:6f:73:56:05:40:23:fc:5d:
         0f:c1:25:48:d6:ea:3f:07:5f:ff:82:e2:be:7b:34:09:a2:72:
         b6:03:af:6d:ef:39:b6:29:91:1d:96:90:d8:4b:cd:b7:dd:7f:
         de:c8:4f:32:8d:cf:02:2f:93:7d:e6:72:3e:44:2c:16:02:a8:
         76:dd:df:1c:f5:8e:70:1c:44:52:ec:d7:6c:58:71:4a:8d:ae:
         c0:c3:e1:bb:28:99:e3:d0:80:fd:1f:9f:76:79:b0:f9:4d:81:
         1a:bb:38:ea:89:b6:a8:ff:d5:56:ef:a5:2c:11:c1:1b:30:f1:
         aa:c6:11:e8:94:bf:69:6c:71:8c:2a:29:ed:5d:e5:96:3b:de:
         cd:fc:a2:17:65:60:c2:f4:fd:c2:a3:ec:0d:10:11:38:00:34:
         8c:23:7d:c0:4a:38:27:34:b0:aa:f0:69:93:58:fc:d2:14:fc:
         63:e5:c8:bc:da:d9:4b:48:4e:b8:67:24:46:c9:bc:d1:29:ad:
         66:b6:75:c6:ed:b9:f2:08:06:1f:cd:74:45:6f:38:7a:c7:55:
         e6:1a:0e:cb:dd:21:5e:48:2f:8a:0e:9d:88:2e:61:60:f1:47:
         a2:d0:f9:7a:be:3a:58:75:c1:16:9a:3c:87:b4:aa:85:46:87:
         ae:96:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:58:35 2026 by rpki-client