Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a3a2f33332d3333203d3e20323634303134.roa
File:                     323830343a323936633a3a2f33332d3333203d3e20323634303134.roa (raw, json)
Hash identifier:          kPBtJdDbSiBqImpttV7gdqacD6oUba3v2xYDx+K559g=
Subject key identifier:   3E:1B:1D:C4:5C:66:BA:3A:DF:B3:89:E5:4C:E6:3C:AB:55:7F:62:A5
Certificate issuer:       /CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
Certificate serial:       46A8B20D3FE17A37BF9EC1B63743F5F789B4753C
Authority key identifier: 76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a3a2f33332d3333203d3e20323634303134.roa
Signing time:             Fri 28 Aug 2026 16:11:43 +0000
ROA not before:           Fri 28 Aug 2026 16:06:43 +0000
ROA not after:            Fri 27 Aug 2027 16:11:43 +0000
asID:                     264014
IP address blocks:        2804:296c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 10:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a8:b2:0d:3f:e1:7a:37:bf:9e:c1:b6:37:43:f5:f7:89:b4:75:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
        Validity
            Not Before: Aug 28 16:06:43 2026 GMT
            Not After : Aug 27 16:11:43 2027 GMT
        Subject: CN=3E1B1DC45C66BA3ADFB389E54CE63CAB557F62A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:96:83:0e:2e:43:35:ff:a4:a6:58:2f:bc:ff:
                    67:4f:ab:79:67:46:fe:ae:56:77:2f:94:7d:d8:ba:
                    f4:d0:81:1f:67:f5:22:64:4b:a5:dc:97:2d:32:7b:
                    f8:7d:63:53:29:7e:1f:40:32:67:46:8c:87:d4:81:
                    d6:f0:c4:6e:53:4b:91:49:bc:a9:ab:1a:67:86:7f:
                    65:a3:c9:39:4e:83:99:22:3b:66:ad:89:b9:d7:66:
                    7e:7f:ed:c1:d3:a9:49:9b:4b:35:e6:e0:71:d0:d8:
                    ec:23:86:57:4f:4f:72:5e:49:a5:4a:3a:c3:d1:17:
                    be:97:82:c5:81:40:cf:9c:d8:1a:5c:9f:63:61:5e:
                    4a:55:c1:df:5f:b5:27:2d:c5:8c:f8:09:8a:31:0f:
                    66:3c:49:ae:0c:f9:8f:61:41:09:c9:01:90:2d:6b:
                    95:8c:f2:4b:bd:c7:a7:56:3c:27:45:25:73:30:c5:
                    3e:6c:32:db:22:bc:fc:d4:7e:a1:8b:2c:ea:a2:0e:
                    0b:bc:f0:df:0e:3c:9a:c6:77:d0:b1:a4:a4:e0:52:
                    fb:12:e4:1f:ff:aa:5b:18:ee:44:e3:aa:72:bf:90:
                    ec:92:d9:de:32:62:aa:28:f2:11:7b:11:76:98:c4:
                    ae:4e:19:6e:2d:16:9a:8b:bf:46:fc:95:ef:4b:1e:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1B:1D:C4:5C:66:BA:3A:DF:B3:89:E5:4C:E6:3C:AB:55:7F:62:A5
            X509v3 Authority Key Identifier:
                keyid:76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a3a2f33332d3333203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:296c::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:a7:91:92:eb:38:a7:29:57:dd:6e:0e:8d:20:a7:41:5f:
         5c:73:aa:fc:ef:9b:de:c5:98:fd:1c:c2:86:e9:40:93:c0:b8:
         ee:d1:30:3b:2a:51:33:e4:b7:d1:f2:08:1c:a9:cd:b8:77:2a:
         3e:d7:ab:53:e4:5d:aa:8f:ef:2c:b2:b9:f7:08:e8:08:a0:b6:
         2f:68:63:d8:4f:ea:65:f5:4f:cf:c1:d6:96:54:5f:1f:a7:50:
         cf:e0:7f:eb:9c:a3:af:70:89:0f:33:f3:37:4b:23:a7:6e:10:
         62:85:9c:b9:2f:9c:89:30:ae:c9:e6:b5:25:4e:c6:d6:7c:44:
         49:f4:05:56:fc:c0:f1:2d:13:11:c1:5d:2b:9f:a3:2e:a0:af:
         83:7c:29:08:f7:9b:c1:72:2b:f1:65:61:23:e4:3e:1b:d1:53:
         4f:99:ad:2a:4e:20:91:9c:76:f5:5d:04:a2:ea:93:39:2f:ab:
         26:84:0d:d3:73:3a:2f:1c:d3:b1:0e:41:59:08:a6:37:0b:c1:
         55:af:cf:b5:d9:38:91:52:45:d5:cc:f3:1d:f3:90:0d:78:10:
         c0:08:53:f3:73:6c:48:5d:09:1c:97:0a:d5:0b:54:5e:b2:1b:
         c2:63:c4:ed:b6:07:87:6f:01:8c:02:d7:86:59:8e:19:d1:69:
         4e:a3:ce:d4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURqiyDT/heje/nsG2N0P194m0dTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0M0ZFRDNFQjkwMTI1OTNFMUNBQ0E3OENGNDY2NEEz
NjJGQUQyMzAeFw0yNjA4MjgxNjA2NDNaFw0yNzA4MjcxNjExNDNaMDMxMTAvBgNV
BAMTKDNFMUIxREM0NUM2NkJBM0FERkIzODlFNTRDRTYzQ0FCNTU3RjYyQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxloMOLkM1/6SmWC+8/2dPq3ln
Rv6uVncvlH3YuvTQgR9n9SJkS6Xcly0ye/h9Y1Mpfh9AMmdGjIfUgdbwxG5TS5FJ
vKmrGmeGf2WjyTlOg5kiO2atibnXZn5/7cHTqUmbSzXm4HHQ2OwjhldPT3JeSaVK
OsPRF76XgsWBQM+c2Bpcn2NhXkpVwd9ftSctxYz4CYoxD2Y8Sa4M+Y9hQQnJAZAt
a5WM8ku9x6dWPCdFJXMwxT5sMtsivPzUfqGLLOqiDgu88N8OPJrGd9CxpKTgUvsS
5B//qlsY7kTjqnK/kOyS2d4yYqoo8hF7EXaYxK5OGW4tFpqLv0b8le9LHqadAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPhsdxFxmujrfs4nlTOY8q1V/YqUwHwYDVR0j
BBgwFoAUdkP+0+uQElk+HKynjPRmSjYvrSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2hu
THgvMC83NjQzRkVEM0VCOTAxMjU5M0UxQ0FDQTc4Q0Y0NjY0QTM2MkZBRDIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NDNGRUQzRUI5MDEyNTkz
RTFDQUNBNzhDRjQ2NjRBMzYyRkFEMjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0VHNGSEt1TXZjZllYVHByWHNRMzVZVzFSUDZCeWJOTEZiN2QyVTdobkx4LzAv
MzIzODMwMzQzYTMyMzkzNjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQpbAAwDQYJKoZIhvcNAQELBQADggEBAB9zp5GS
6zinKVfdbg6NIKdBX1xzqvzvm97FmP0cwobpQJPAuO7RMDsqUTPkt9HyCBypzbh3
Kj7Xq1PkXaqP7yyyufcI6Aigti9oY9hP6mX1T8/B1pZUXx+nUM/gf+uco69wiQ8z
8zdLI6duEGKFnLkvnIkwrsnmtSVOxtZ8REn0BVb8wPEtExHBXSufoy6gr4N8KQj3
m8FyK/FlYSPkPhvRU0+ZrSpOIJGcdvVdBKLqkzkvqyaEDdNzOi8c07EOQVkIpjcL
wVWvz7XZOJFSRdXM8x3zkA14EMAIU/NzbEhdCRyXCtULVF6yG8JjxO22B4dvAYwC
14ZZjhnRaU6jztQ=
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:03:48 2026 by rpki-client