Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/323830343a376362383a3a2f33322d3332203d3e20323731353134.roa
File:                     323830343a376362383a3a2f33322d3332203d3e20323731353134.roa (raw, json)
Hash identifier:          t02YOdmpbJ/gwvjY0C9XmZek2ku53g07yCKvizaOO9E=
Subject key identifier:   E6:2E:C3:D8:E5:28:B8:3E:09:C9:AA:E3:1D:AD:C0:4C:25:C6:9A:41
Certificate issuer:       /CN=F204F7A503A8093CC6560627483C5834D61956E8
Certificate serial:       04AEE9CF7F34536AFBD0A5943E9499827F21A1AE
Authority key identifier: F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/323830343a376362383a3a2f33322d3332203d3e20323731353134.roa
Signing time:             Sun 12 Jul 2026 19:13:42 +0000
ROA not before:           Sun 12 Jul 2026 19:08:42 +0000
ROA not after:            Sun 11 Jul 2027 19:13:42 +0000
asID:                     271514
IP address blocks:        2804:7cb8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl
                          rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Sep 2026 12:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ae:e9:cf:7f:34:53:6a:fb:d0:a5:94:3e:94:99:82:7f:21:a1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F204F7A503A8093CC6560627483C5834D61956E8
        Validity
            Not Before: Jul 12 19:08:42 2026 GMT
            Not After : Jul 11 19:13:42 2027 GMT
        Subject: CN=E62EC3D8E528B83E09C9AAE31DADC04C25C69A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:48:32:dd:1e:c3:d7:be:78:67:14:ab:f7:
                    04:87:49:82:6a:79:8e:c7:a1:dd:6e:12:8c:3f:d9:
                    fc:65:04:83:88:2a:7c:1c:9e:30:5b:2d:a7:31:12:
                    aa:92:fa:c9:3e:79:d1:6d:5e:ba:b8:ec:3c:9a:d6:
                    be:0d:f3:5f:d1:81:44:79:3d:80:1f:c0:32:74:61:
                    07:bd:cd:fb:d5:1f:86:14:35:f9:e5:52:de:dc:ff:
                    00:d4:f7:f3:ea:67:91:90:bb:8b:69:31:60:19:c2:
                    22:fe:1a:a3:fb:8e:0a:1a:ec:60:f1:18:2f:89:f4:
                    fd:a0:95:d0:97:dd:39:5b:6c:b6:f8:be:66:56:61:
                    06:2a:7b:3b:3f:d3:07:46:0c:6d:ff:c0:86:21:f9:
                    b7:0e:ba:d7:67:c1:dc:86:78:93:d1:9e:21:da:1a:
                    34:f8:7e:d6:af:bd:90:82:1d:25:17:90:81:21:68:
                    cc:e6:c7:07:40:c6:64:24:4b:8a:74:03:5b:9a:35:
                    a8:a7:23:5b:36:c9:43:e0:2d:4a:0b:a3:70:84:b2:
                    28:92:8b:ec:88:35:f0:8f:85:6b:1e:42:dc:a9:d1:
                    e8:7a:73:da:a9:76:4e:55:1f:67:f7:b8:5e:61:cb:
                    21:78:63:03:7f:21:f5:a8:5c:4b:41:f5:44:71:2d:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2E:C3:D8:E5:28:B8:3E:09:C9:AA:E3:1D:AD:C0:4C:25:C6:9A:41
            X509v3 Authority Key Identifier:
                keyid:F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/323830343a376362383a3a2f33322d3332203d3e20323731353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:4a:83:5d:d2:d7:df:0c:ae:40:fa:04:f9:37:c5:5c:03:25:
         82:a9:d2:54:65:90:ef:47:d5:31:51:2c:81:fb:c7:ec:74:0c:
         54:cb:7d:88:af:25:26:09:a8:27:b5:4f:02:2b:f2:b6:ac:58:
         6a:e2:a3:85:d0:c5:41:02:18:51:b9:53:31:a0:c8:f0:0b:ac:
         fe:f7:8a:eb:de:4b:6b:83:52:ae:b7:dd:57:98:33:bc:56:db:
         a7:46:dd:a5:32:25:5b:37:5a:fb:62:7b:2f:d9:2e:15:4d:41:
         33:56:1a:e8:ad:99:5d:31:90:a6:91:dd:cc:0b:7a:e3:21:30:
         00:49:d1:6f:e3:11:75:ff:83:44:0d:48:38:e4:30:07:e1:59:
         ec:c0:db:46:c6:a9:89:e0:3f:f9:47:4e:d0:0c:fd:fc:f3:b4:
         b8:9b:ea:7a:aa:09:8a:f7:da:30:92:1c:0d:f0:e0:3d:7c:33:
         3b:0b:e1:ce:2b:f5:68:ca:75:c5:b5:a6:f1:50:b2:de:32:a3:
         4b:95:51:7f:3d:60:0b:95:fa:4d:3f:90:b3:8e:40:f7:d8:93:
         bc:91:95:88:cf:2e:c5:6e:b7:7b:e9:3c:37:0f:f0:b3:e7:ed:
         a1:12:e3:ac:82:8b:06:1d:f0:1e:84:5c:50:e5:ae:44:3a:f9:
         f9:ef:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----