Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa
File:                     323830343a3264383a3a2f33322d3634203d3e203532353332.roa (raw, json)
Hash identifier:          4jYmi7olN/68ltybpmSWGmrHFKTuWIcfrl5Ly12ieLA=
Subject key identifier:   99:96:45:D9:51:E7:1B:38:55:89:6F:11:6A:F7:D2:17:E4:23:3A:BB
Certificate issuer:       /CN=52FE8B2C29E327E63BABF04EED6E5F0C56455E14
Certificate serial:       76A8C7D02FFFD3CC12C8AA78BAC92E71F3B2AF2F
Authority key identifier: 52:FE:8B:2C:29:E3:27:E6:3B:AB:F0:4E:ED:6E:5F:0C:56:45:5E:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa
Signing time:             Mon 03 Aug 2026 13:45:12 +0000
ROA not before:           Mon 03 Aug 2026 13:40:12 +0000
ROA not after:            Mon 02 Aug 2027 13:45:12 +0000
asID:                     52532
IP address blocks:        2804:2d8::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a8:c7:d0:2f:ff:d3:cc:12:c8:aa:78:ba:c9:2e:71:f3:b2:af:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FE8B2C29E327E63BABF04EED6E5F0C56455E14
        Validity
            Not Before: Aug  3 13:40:12 2026 GMT
            Not After : Aug  2 13:45:12 2027 GMT
        Subject: CN=999645D951E71B3855896F116AF7D217E4233ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:bd:89:01:ef:a5:30:84:4c:d8:bd:2c:a3:
                    b2:5b:99:71:5e:05:61:62:68:67:32:fe:8d:f2:08:
                    39:52:11:c2:eb:43:8d:69:38:d5:66:3d:a3:53:04:
                    2d:87:be:8e:92:69:28:de:f8:14:79:e9:ad:11:c5:
                    b5:bc:53:2c:93:5c:fa:ba:45:c9:ad:61:da:d8:9b:
                    7b:e2:3b:9c:51:63:cc:f8:8f:9e:be:4f:d7:01:33:
                    12:53:89:81:51:c8:92:a8:b8:0e:84:a2:a1:62:fe:
                    04:d1:5c:1c:8c:62:fe:9a:a9:ba:ea:b4:76:cb:ad:
                    f9:90:e0:96:1e:62:83:d9:f1:6c:a5:91:ae:0a:19:
                    d4:a3:fd:88:b4:3c:5c:58:7a:57:f7:22:7e:ab:66:
                    b4:13:f7:88:df:68:00:89:87:3d:70:e5:ea:e7:58:
                    11:54:d5:aa:cb:c0:ac:70:d9:54:48:c6:f3:f7:fd:
                    44:4b:4b:41:32:40:6e:b1:80:1d:8f:64:b7:0e:94:
                    67:65:31:0d:9e:cd:b7:2b:d1:b5:67:85:dd:8b:e6:
                    f3:8a:72:36:bc:08:20:79:df:db:64:c0:8e:5d:11:
                    2d:84:9c:98:bf:2f:dd:29:f2:8f:55:03:27:92:89:
                    c5:94:e6:7a:f7:42:ff:24:30:12:73:2a:80:1a:ba:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:96:45:D9:51:E7:1B:38:55:89:6F:11:6A:F7:D2:17:E4:23:3A:BB
            X509v3 Authority Key Identifier:
                keyid:52:FE:8B:2C:29:E3:27:E6:3B:AB:F0:4E:ED:6E:5F:0C:56:45:5E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:6a:54:88:6b:e6:4e:52:52:8d:0c:6c:f2:d6:e9:ca:e7:e9:
         ca:d6:58:4a:be:97:2e:59:dd:fc:5e:c9:13:e4:c6:a9:23:c4:
         75:37:ac:9d:99:a0:cc:31:d6:bf:14:c8:54:06:96:d5:a0:20:
         09:2e:3c:a7:21:74:a7:c4:d9:f4:9c:05:62:0d:e5:8c:ea:55:
         5c:7b:e4:1a:ea:2e:0a:d8:dc:89:de:de:fd:17:57:3c:bf:19:
         dd:69:85:f5:11:33:68:bb:68:21:ed:dc:5d:a0:0d:92:bd:27:
         d7:a6:2f:3c:50:4d:45:b9:96:e7:64:29:96:88:25:fd:09:e7:
         a5:c1:0b:9a:88:fb:13:d6:09:2f:30:6e:0a:21:5e:a8:a9:05:
         e9:de:3e:e3:ba:e5:6c:98:09:3e:71:3e:92:6b:b3:27:1a:41:
         f2:c8:79:0c:56:1b:5c:eb:c7:27:6b:e1:52:90:53:32:58:e1:
         47:ad:54:bd:81:16:82:af:c6:d0:b3:05:0f:5e:a1:41:50:a1:
         64:45:8a:2d:e7:54:2f:50:4b:25:6a:25:b4:78:f9:95:ad:de:
         4a:b3:5e:82:5c:2e:cf:15:d7:d8:97:b2:7e:36:91:eb:38:ec:
         64:2d:eb:39:3c:6c:7a:14:41:9f:9d:10:3d:23:28:a9:c7:ba:
         ab:eb:9d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:34:32 2026 by rpki-client