Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/323830343a366162383a3a2f33322d3438203d3e20323730333535.roa
File:                     323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (raw, json)
Hash identifier:          SWerNr1gykg5ebqT/i93yKm8S3f4VdPrq/M9YiCYkCo=
Subject key identifier:   21:6C:73:0B:FB:A2:73:16:54:93:B8:38:D2:A8:AF:9A:8E:9C:B7:11
Certificate issuer:       /CN=BB451E652135E3F5AE640385552DFD8E3DF60B7A
Certificate serial:       5DB5DE8F10A5ADCFB121B5B2D5F19A0BED84C7FD
Authority key identifier: BB:45:1E:65:21:35:E3:F5:AE:64:03:85:55:2D:FD:8E:3D:F6:0B:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB451E652135E3F5AE640385552DFD8E3DF60B7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/323830343a366162383a3a2f33322d3438203d3e20323730333535.roa
Signing time:             Tue 01 Sep 2026 22:05:00 +0000
ROA not before:           Tue 01 Sep 2026 22:00:00 +0000
ROA not after:            Tue 31 Aug 2027 22:05:00 +0000
asID:                     270355
IP address blocks:        2804:6ab8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/BB451E652135E3F5AE640385552DFD8E3DF60B7A.crl
                          rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/BB451E652135E3F5AE640385552DFD8E3DF60B7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB451E652135E3F5AE640385552DFD8E3DF60B7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 11:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b5:de:8f:10:a5:ad:cf:b1:21:b5:b2:d5:f1:9a:0b:ed:84:c7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB451E652135E3F5AE640385552DFD8E3DF60B7A
        Validity
            Not Before: Sep  1 22:00:00 2026 GMT
            Not After : Aug 31 22:05:00 2027 GMT
        Subject: CN=216C730BFBA273165493B838D2A8AF9A8E9CB711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:ec:0b:d6:61:4e:1e:d5:f0:bd:ea:7b:17:
                    4e:b1:7b:11:99:f2:79:c9:40:f6:88:02:8a:4f:5c:
                    b7:f8:16:23:b2:31:28:88:2a:cf:d4:32:87:f7:d3:
                    4e:82:56:9d:f4:11:01:04:31:3d:df:b9:f4:cb:77:
                    ee:4f:18:7d:34:36:80:45:fa:30:af:a1:cb:00:90:
                    30:8d:e6:0f:68:e6:07:f0:bc:b1:3f:c5:9c:b3:b4:
                    ef:52:2c:5b:f6:29:f2:ee:de:52:2a:88:3c:0b:45:
                    ca:81:91:0c:67:e4:38:10:a1:9c:8f:a5:e4:57:40:
                    53:13:90:db:5a:75:60:6c:67:98:97:4f:ec:89:f2:
                    7f:c4:d6:f5:87:85:37:ea:8a:1b:52:86:21:0d:76:
                    f3:8a:5c:3e:bf:2f:ae:c9:c9:21:f0:d6:d9:e3:9b:
                    50:16:81:fd:43:a6:e6:da:fc:9c:82:dd:ef:da:bb:
                    7c:6a:d5:8c:30:40:d2:2e:1b:2f:db:f6:98:2e:03:
                    7a:a0:0a:37:b8:ac:8e:50:0e:37:ea:ea:d4:93:78:
                    04:95:01:0e:75:bc:c5:02:b2:e0:f7:c3:b3:04:bb:
                    e9:9c:3c:6f:c9:65:77:cb:50:3e:c0:31:86:d2:e4:
                    ea:7a:d5:ec:02:92:3f:e4:07:6d:76:f7:d4:f9:24:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6C:73:0B:FB:A2:73:16:54:93:B8:38:D2:A8:AF:9A:8E:9C:B7:11
            X509v3 Authority Key Identifier:
                keyid:BB:45:1E:65:21:35:E3:F5:AE:64:03:85:55:2D:FD:8E:3D:F6:0B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/BB451E652135E3F5AE640385552DFD8E3DF60B7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB451E652135E3F5AE640385552DFD8E3DF60B7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/323830343a366162383a3a2f33322d3438203d3e20323730333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:f4:9d:7c:e3:a9:7c:e1:ae:45:37:7b:bd:3a:54:fa:a8:
         6b:b5:a1:d0:08:93:3b:ef:bb:39:8d:bf:9c:8c:a2:8b:b6:cc:
         15:8d:44:1f:9c:ca:4e:e7:8c:12:d0:32:e6:ca:84:91:d2:b1:
         ad:2b:c2:ac:34:54:b1:b2:87:48:85:20:7f:75:fc:0a:84:67:
         12:11:b9:11:c3:3e:ac:86:b1:33:6f:61:04:58:a9:e5:8e:d1:
         74:89:27:c9:67:1e:eb:ee:59:7b:f9:b7:d8:6a:1f:36:23:40:
         c6:21:31:7a:6c:fc:52:aa:62:ce:11:ee:90:08:bc:6a:8f:f2:
         ad:44:4f:7e:db:ae:c7:1c:4d:79:c1:12:cc:42:c9:bd:40:75:
         9b:12:28:c1:69:d5:25:e9:d3:44:d4:1f:c5:02:dd:e7:c1:cd:
         cc:68:1e:71:f5:7e:0a:3f:fe:ab:f4:d8:5b:36:c0:50:bb:51:
         e5:3e:4c:90:0c:88:3e:0a:0e:04:23:3b:4a:90:a7:da:ac:3b:
         21:bc:ad:a1:f6:2b:00:98:e5:67:fa:20:6c:70:51:33:c2:e2:
         ab:e6:a6:d4:c1:19:e3:73:9c:17:88:6c:f9:cb:93:0c:c9:15:
         1e:20:ed:01:42:45:13:a7:1f:d8:ee:14:90:c4:7e:32:27:4d:
         bb:37:35:f7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXbXejxClrc+xIbWy1fGaC+2Ex/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI0NTFFNjUyMTM1RTNGNUFFNjQwMzg1NTUyREZEOEUz
REY2MEI3QTAeFw0yNjA5MDEyMjAwMDBaFw0yNzA4MzEyMjA1MDBaMDMxMTAvBgNV
BAMTKDIxNkM3MzBCRkJBMjczMTY1NDkzQjgzOEQyQThBRjlBOEU5Q0I3MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfewL1mFOHtXwvep7F06xexGZ
8nnJQPaIAopPXLf4FiOyMSiIKs/UMof3006CVp30EQEEMT3fufTLd+5PGH00NoBF
+jCvocsAkDCN5g9o5gfwvLE/xZyztO9SLFv2KfLu3lIqiDwLRcqBkQxn5DgQoZyP
peRXQFMTkNtadWBsZ5iXT+yJ8n/E1vWHhTfqihtShiENdvOKXD6/L67JySHw1tnj
m1AWgf1Dpuba/JyC3e/au3xq1YwwQNIuGy/b9pguA3qgCje4rI5QDjfq6tSTeASV
AQ51vMUCsuD3w7MEu+mcPG/JZXfLUD7AMYbS5Op61ewCkj/kB21299T5JJfrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIWxzC/uicxZUk7g40qivmo6ctxEwHwYDVR0j
BBgwFoAUu0UeZSE14/WuZAOFVS39jj32C3owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290
YVEvMC9CQjQ1MUU2NTIxMzVFM0Y1QUU2NDAzODU1NTJERkQ4RTNERjYwQjdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCNDUxRTY1MjEzNUUzRjVB
RTY0MDM4NTU1MkRGRDhFM0RGNjBCN0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJHUWNqU2IzUHg2TTFtcDN6Um5IYWg5ek1RQWJZTUNhUVZLaXRxanNvdGFRLzAv
MzIzODMwMzQzYTM2NjE2MjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARquDANBgkqhkiG9w0BAQsFAAOCAQEAXsH0nXzj
qXzhrkU3e706VPqoa7Wh0AiTO++7OY2/nIyii7bMFY1EH5zKTueMEtAy5sqEkdKx
rSvCrDRUsbKHSIUgf3X8CoRnEhG5EcM+rIaxM29hBFip5Y7RdIknyWce6+5Ze/m3
2GofNiNAxiExemz8UqpizhHukAi8ao/yrURPftuuxxxNecESzELJvUB1mxIowWnV
JenTRNQfxQLd58HNzGgecfV+Cj/+q/TYWzbAULtR5T5MkAyIPgoOBCM7SpCn2qw7
IbytofYrAJjlZ/ogbHBRM8Liq+am1MEZ43OcF4hs+cuTDMkVHiDtAUJFE6cf2O4U
kMR+MidNuzc19w==
-----END CERTIFICATE-----
Generated at Thu Sep 3 14:34:28 2026 by rpki-client