Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a3a2f33342d3334203d3e20323638343834.roa
File:                     323830343a353165383a3a2f33342d3334203d3e20323638343834.roa (raw, json)
Hash identifier:          CTQm66zWehehNImdJAMxxMPsBaStJP9Uu2gAhBw14No=
Subject key identifier:   B9:4B:0A:13:30:AA:E7:9D:FE:60:FD:30:9C:27:9C:B5:19:12:C2:8A
Certificate issuer:       /CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
Certificate serial:       73DF31996DEF6A09A49822FCB76D37A958CED166
Authority key identifier: 47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a3a2f33342d3334203d3e20323638343834.roa
Signing time:             Tue 23 Jun 2026 01:25:12 +0000
ROA not before:           Tue 23 Jun 2026 01:20:12 +0000
ROA not after:            Tue 22 Jun 2027 01:25:12 +0000
asID:                     268484
IP address blocks:        2804:51e8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl
                          rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:df:31:99:6d:ef:6a:09:a4:98:22:fc:b7:6d:37:a9:58:ce:d1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
        Validity
            Not Before: Jun 23 01:20:12 2026 GMT
            Not After : Jun 22 01:25:12 2027 GMT
        Subject: CN=B94B0A1330AAE79DFE60FD309C279CB51912C28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:84:97:a1:4f:93:cc:e6:f6:27:5e:9f:2d:
                    f8:53:91:5a:89:47:c2:29:22:3d:39:38:99:f3:3f:
                    fd:56:19:a9:1b:f3:f6:53:8d:72:04:fb:cb:3e:13:
                    f1:98:43:59:7d:42:b0:45:fa:ba:99:3b:09:3f:41:
                    8f:a2:4c:af:88:6a:e7:ba:13:1d:43:1c:91:7e:ef:
                    ce:63:59:de:42:1d:a7:d7:b7:d0:c5:03:8e:5f:bc:
                    fa:e2:50:22:c1:02:c2:95:44:d0:ab:c3:91:ab:62:
                    e5:6c:02:47:35:40:84:88:99:f1:2f:56:49:a8:eb:
                    9c:07:ca:2d:47:04:16:6f:3c:1b:17:4a:3f:55:b0:
                    ec:a7:07:8d:05:f4:cc:de:a0:f3:58:41:26:de:b3:
                    54:b8:cb:80:19:33:2c:40:33:c1:d3:b1:d4:bd:cf:
                    9e:28:2c:8b:e7:28:9f:48:98:3b:9a:86:5a:e4:af:
                    35:9c:f3:38:58:f4:1b:58:c2:78:b3:18:1a:26:32:
                    6d:f5:74:69:40:52:ba:34:84:25:bc:2a:bb:14:63:
                    b2:33:58:87:6e:07:03:ec:e9:56:7e:77:3f:7e:0e:
                    ba:bc:40:38:d1:1b:6c:8a:34:3e:1a:f5:fe:6f:47:
                    e7:37:6b:7a:81:cb:7b:e9:cc:3f:93:22:9b:12:5c:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:0A:13:30:AA:E7:9D:FE:60:FD:30:9C:27:9C:B5:19:12:C2:8A
            X509v3 Authority Key Identifier:
                keyid:47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a3a2f33342d3334203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e8::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:2a:a0:e7:ad:2f:30:e5:10:99:52:4b:0a:51:29:e1:75:
         a8:0e:16:80:47:26:ea:e7:29:46:f8:d2:1c:e0:bc:95:5c:22:
         d8:0d:89:90:de:52:c9:84:f8:d6:4d:2c:84:9d:75:51:47:06:
         7a:c9:05:3e:73:25:7d:c2:0b:a0:aa:73:3e:71:42:f4:02:05:
         01:f7:24:2c:4a:72:09:e8:d0:71:77:c7:4e:bd:6d:9a:8d:e8:
         d2:2f:6e:c9:1b:fc:03:09:4f:1d:62:2a:82:78:f8:28:70:c4:
         45:50:d0:66:38:50:92:71:c5:83:db:b8:d8:a5:75:f8:4d:e5:
         fe:d5:66:67:92:38:c8:51:6e:a2:46:5d:72:56:17:1d:c7:1e:
         c5:7c:ac:9a:ad:bd:1a:c2:49:74:f0:97:17:ca:85:d7:63:43:
         e0:b3:38:b8:79:fc:a7:f0:d2:d3:b3:5b:7a:be:fa:ea:c2:19:
         a5:a4:d0:aa:7b:a6:3b:de:64:92:c1:8e:9b:5f:e3:0f:0a:ba:
         d1:5e:db:46:d6:94:f5:a5:c9:08:b1:7a:1a:36:bd:f1:f6:3e:
         82:1b:17:47:d9:42:22:98:3e:89:b2:88:09:7c:dc:a5:73:aa:
         be:14:bb:f4:12:30:ab:28:33:d7:72:12:ad:72:29:4d:ff:1b:
         fc:80:f5:a8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc98xmW3vagmkmCL8t203qVjO0WYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMzk2MzI1REY5RUJEOERERENCMjE0OUYwMDg0ODIz
RkE2N0IxRTAeFw0yNjA2MjMwMTIwMTJaFw0yNzA2MjIwMTI1MTJaMDMxMTAvBgNV
BAMTKEI5NEIwQTEzMzBBQUU3OURGRTYwRkQzMDlDMjc5Q0I1MTkxMkMyOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCngYSXoU+TzOb2J16fLfhTkVqJ
R8IpIj05OJnzP/1WGakb8/ZTjXIE+8s+E/GYQ1l9QrBF+rqZOwk/QY+iTK+Iaue6
Ex1DHJF+785jWd5CHafXt9DFA45fvPriUCLBAsKVRNCrw5GrYuVsAkc1QISImfEv
Vkmo65wHyi1HBBZvPBsXSj9VsOynB40F9MzeoPNYQSbes1S4y4AZMyxAM8HTsdS9
z54oLIvnKJ9ImDuahlrkrzWc8zhY9BtYwnizGBomMm31dGlAUro0hCW8KrsUY7Iz
WIduBwPs6VZ+dz9+Drq8QDjRG2yKND4a9f5vR+c3a3qBy3vpzD+TIpsSXEjLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuUsKEzCq553+YP0wnCectRkSwoowHwYDVR0j
BBgwFoAUR6OWMl3569jd3LIUnwCEgj+mex4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjMya1Y2M0dMZ1NtZ05HODlxZ3FySmRKQlV1NlNQaVJEY3FmV3hqQllt
NmQvMC80N0EzOTYzMjVERjlFQkQ4REREQ0IyMTQ5RjAwODQ4MjNGQTY3QjFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QTM5NjMyNURGOUVCRDhE
RERDQjIxNDlGMDA4NDgyM0ZBNjdCMUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzMmtWNjNHTGdTbWdORzg5cWdxckpkSkJVdTZTUGlSRGNxZld4akJZbTZkLzAv
MzIzODMwMzQzYTM1MzE2NTM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4
MzQzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARR6AAwDQYJKoZIhvcNAQELBQADggEBAAW3KqDn
rS8w5RCZUksKUSnhdagOFoBHJurnKUb40hzgvJVcItgNiZDeUsmE+NZNLISddVFH
BnrJBT5zJX3CC6Cqcz5xQvQCBQH3JCxKcgno0HF3x069bZqN6NIvbskb/AMJTx1i
KoJ4+ChwxEVQ0GY4UJJxxYPbuNildfhN5f7VZmeSOMhRbqJGXXJWFx3HHsV8rJqt
vRrCSXTwlxfKhddjQ+CzOLh5/Kfw0tOzW3q++urCGaWk0Kp7pjveZJLBjptf4w8K
utFe20bWlPWlyQixeho2vfH2PoIbF0fZQiKYPomyiAl83KVzqr4Uu/QSMKsoM9dy
Eq1yKU3/G/yA9ag=
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:25 2026 by rpki-client