Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/323830343a383162343a3a2f33322d3332203d3e20323732343731.roa
File:                     323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (raw, json)
Hash identifier:          vKmwE5QlCRotl9RLxAHQqFx/qhZXbPuX2IKkBgnt6OY=
Subject key identifier:   A6:62:AA:CB:4F:AE:6A:48:17:95:C8:02:F0:19:7F:61:36:1D:97:E9
Certificate issuer:       /CN=C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9
Certificate serial:       342C80E719C1E56873FEA6A89D53056A7D0AD255
Authority key identifier: C0:49:9C:5F:88:7D:9F:85:CE:5D:B1:28:3D:E9:96:1D:3C:FC:32:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/323830343a383162343a3a2f33322d3332203d3e20323732343731.roa
Signing time:             Mon 10 Aug 2026 17:44:32 +0000
ROA not before:           Mon 10 Aug 2026 17:39:32 +0000
ROA not after:            Mon 09 Aug 2027 17:44:32 +0000
asID:                     272471
IP address blocks:        2804:81b4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.crl
                          rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 07:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2c:80:e7:19:c1:e5:68:73:fe:a6:a8:9d:53:05:6a:7d:0a:d2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9
        Validity
            Not Before: Aug 10 17:39:32 2026 GMT
            Not After : Aug  9 17:44:32 2027 GMT
        Subject: CN=A662AACB4FAE6A481795C802F0197F61361D97E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:b7:8d:60:69:4d:8e:50:44:ec:74:33:31:
                    3f:c4:e7:e3:08:ae:8f:1f:f2:a7:b1:cd:7e:76:af:
                    7c:c3:23:f7:85:2a:29:2b:d1:20:39:fb:c7:8c:95:
                    44:ae:73:a8:0b:96:60:7c:42:1e:e0:45:9b:3c:7c:
                    03:0f:39:d4:c3:4b:f5:25:25:f0:24:c9:e9:43:3a:
                    d1:55:c8:12:06:8f:8a:6c:6f:99:19:51:ef:54:10:
                    c0:07:bb:ed:80:40:8b:16:76:08:1f:04:72:10:72:
                    c5:1f:58:6b:dc:c9:d9:49:aa:7c:63:1e:10:95:0d:
                    75:58:f9:33:96:76:0d:d8:b9:fb:15:c9:24:9c:27:
                    51:87:c3:d3:22:46:16:c1:c8:55:41:5b:d9:94:b1:
                    17:9c:0f:87:f5:54:07:bc:56:42:d8:81:2e:5c:15:
                    91:cc:d1:dd:63:0d:fb:10:fe:7a:ff:ba:8c:ee:af:
                    36:8a:15:af:1b:61:a9:a1:6b:6d:f6:08:9a:66:7d:
                    0d:a3:fe:a6:48:4a:7f:7d:ec:5b:84:42:b9:20:52:
                    9a:ca:84:26:69:70:f1:12:33:aa:b5:4e:09:b8:d9:
                    58:84:72:a5:5e:54:2d:84:bb:83:26:63:e4:dd:12:
                    2e:09:8b:a3:4b:b4:bb:35:22:72:c2:28:ca:ea:cf:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:62:AA:CB:4F:AE:6A:48:17:95:C8:02:F0:19:7F:61:36:1D:97:E9
            X509v3 Authority Key Identifier:
                keyid:C0:49:9C:5F:88:7D:9F:85:CE:5D:B1:28:3D:E9:96:1D:3C:FC:32:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/323830343a383162343a3a2f33322d3332203d3e20323732343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:b3:0d:69:1a:24:7a:e8:6f:05:e2:b3:59:6e:1b:3e:0a:
         1b:96:eb:12:81:de:70:dc:9f:b5:84:fc:05:87:71:78:3b:6e:
         f4:7c:d3:78:7f:2c:84:9a:cd:09:fd:a5:31:13:a1:e5:72:09:
         25:04:2e:57:22:67:67:09:a3:65:31:d0:13:8f:d8:e8:fe:0d:
         be:f5:ab:3a:cf:dd:1b:8a:e7:d1:02:c2:77:27:11:08:a6:16:
         ba:6a:5a:61:d3:42:b8:3e:13:85:30:12:f2:19:fd:51:36:a0:
         e5:8e:e7:e1:96:59:1f:f7:d9:5b:05:c6:eb:bf:35:b1:f9:50:
         93:80:48:51:57:fd:95:d4:ac:f4:62:78:61:89:b7:a6:e7:8c:
         76:7a:32:48:ef:f9:46:ba:1b:da:80:b7:7c:3b:76:0d:2e:35:
         aa:9a:db:49:96:a6:a5:fe:a6:13:61:c0:6a:76:9b:30:fd:84:
         57:03:81:5f:26:d5:7d:59:23:12:a1:a7:2b:37:1a:f3:13:f9:
         5d:11:35:05:ba:43:43:93:2d:f5:8f:71:e8:b3:23:3a:1e:a5:
         f8:4d:8d:e7:4c:90:a1:0e:12:07:be:ae:b5:cb:a1:c9:f4:97:
         55:61:67:a8:6e:20:37:cc:08:ac:3f:74:ee:11:52:48:ad:34:
         74:bd:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:19:05 2026 by rpki-client