Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/323830343a393262633a3a2f33322d313238203d3e20323734373239.roa
File:                     323830343a393262633a3a2f33322d313238203d3e20323734373239.roa (raw, json)
Hash identifier:          2JwzXkzWrXEpT7Lwu60n5V1XgF6YZtpZKv01icaKrBU=
Subject key identifier:   39:5E:0F:2F:F4:82:C2:E3:11:C1:61:00:3D:CB:D8:47:F8:53:1C:03
Certificate issuer:       /CN=7DB259F8914E477AB02343D86C1BA4D33A52A17B
Certificate serial:       0B5D1B829935620A505BE38FAA9BFFF3F38FB89F
Authority key identifier: 7D:B2:59:F8:91:4E:47:7A:B0:23:43:D8:6C:1B:A4:D3:3A:52:A1:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DB259F8914E477AB02343D86C1BA4D33A52A17B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/323830343a393262633a3a2f33322d313238203d3e20323734373239.roa
Signing time:             Fri 24 Jul 2026 20:03:58 +0000
ROA not before:           Fri 24 Jul 2026 19:58:58 +0000
ROA not after:            Fri 23 Jul 2027 20:03:58 +0000
asID:                     274729
IP address blocks:        2804:92bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/7DB259F8914E477AB02343D86C1BA4D33A52A17B.crl
                          rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/7DB259F8914E477AB02343D86C1BA4D33A52A17B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DB259F8914E477AB02343D86C1BA4D33A52A17B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 03:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5d:1b:82:99:35:62:0a:50:5b:e3:8f:aa:9b:ff:f3:f3:8f:b8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DB259F8914E477AB02343D86C1BA4D33A52A17B
        Validity
            Not Before: Jul 24 19:58:58 2026 GMT
            Not After : Jul 23 20:03:58 2027 GMT
        Subject: CN=395E0F2FF482C2E311C161003DCBD847F8531C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:0e:18:7e:ba:9f:47:43:2c:45:fc:dc:21:
                    78:9a:8d:bf:35:cd:7c:cf:aa:ad:43:bd:10:9d:22:
                    f3:9b:93:22:56:95:d3:71:80:9d:89:dc:62:0d:19:
                    8f:01:1f:c7:08:fc:eb:77:2e:4a:21:42:1d:80:a2:
                    80:18:85:69:17:51:0b:5d:48:cf:da:5e:8b:a9:e4:
                    18:0c:56:b9:1d:7b:b3:4a:2d:82:ae:98:56:74:b9:
                    3b:d3:f8:9c:83:b6:c9:94:8d:b7:9c:0c:f4:5f:a2:
                    f1:8c:58:d4:3a:f1:57:db:0a:ab:08:69:df:a5:40:
                    21:3c:07:cd:cf:6b:bd:47:bc:5c:2a:61:61:72:5c:
                    31:f8:e7:f9:16:37:91:85:8a:2f:e2:95:ac:f8:49:
                    90:7d:46:30:6b:22:47:f4:32:98:d3:6b:2f:93:94:
                    25:7f:22:06:55:91:70:09:21:67:43:57:ae:7e:21:
                    b6:72:45:96:40:7c:e7:12:98:b1:96:32:22:ea:eb:
                    f0:f3:b7:4e:87:17:fd:5e:b3:1f:00:fd:ac:c2:9e:
                    ff:e0:44:2c:46:f7:06:2a:0b:37:2c:7a:3a:05:a3:
                    b7:9e:2e:3f:01:a6:e6:a9:1d:0f:d9:43:30:84:c8:
                    55:3f:d5:aa:e7:ce:0b:c3:2d:c2:d6:c3:59:18:1c:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5E:0F:2F:F4:82:C2:E3:11:C1:61:00:3D:CB:D8:47:F8:53:1C:03
            X509v3 Authority Key Identifier:
                keyid:7D:B2:59:F8:91:4E:47:7A:B0:23:43:D8:6C:1B:A4:D3:3A:52:A1:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/7DB259F8914E477AB02343D86C1BA4D33A52A17B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DB259F8914E477AB02343D86C1BA4D33A52A17B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/323830343a393262633a3a2f33322d313238203d3e20323734373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:15:ce:fe:35:f1:8b:ab:df:71:f6:9b:62:97:00:6a:5e:
         b3:8d:9f:75:70:cf:94:51:4d:43:24:0c:6c:0a:4d:a1:61:0c:
         7e:13:f6:fd:38:07:1b:c5:b2:c0:64:80:8c:cc:c1:46:ff:5c:
         6e:6e:f5:ce:fe:a6:7b:1a:50:c9:b2:23:8f:be:8b:d3:8a:5b:
         df:bb:77:cd:f0:47:66:d2:b8:65:bd:73:02:d0:0f:7d:66:aa:
         53:89:18:3b:2b:06:8b:22:cd:c4:97:05:12:07:14:85:d8:62:
         32:15:c2:c7:c7:50:db:44:0d:42:83:7e:23:0b:ab:2b:4e:94:
         da:46:a4:22:f8:b2:29:5a:b9:91:ff:aa:92:30:ed:85:f8:62:
         18:be:42:ee:83:73:98:51:47:ce:37:a2:11:e0:35:8f:4e:ec:
         f8:5a:ba:58:a8:bd:ac:fa:c0:1e:14:12:a3:b4:9e:a4:9b:46:
         04:0d:e1:bc:4e:b3:c5:09:dd:c1:d6:76:f1:58:e2:6f:61:df:
         27:93:c4:28:8a:ac:e9:29:82:fe:46:90:7e:84:88:29:ef:79:
         8a:24:ed:31:06:69:27:25:98:e8:8c:7c:21:0d:e2:89:de:f0:
         49:95:aa:e3:e0:fc:8a:83:68:94:ba:5b:02:68:a0:f1:fa:1a:
         d0:6c:ac:e9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUC10bgpk1YgpQW+OPqpv/8/OPuJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RCMjU5Rjg5MTRFNDc3QUIwMjM0M0Q4NkMxQkE0RDMz
QTUyQTE3QjAeFw0yNjA3MjQxOTU4NThaFw0yNzA3MjMyMDAzNThaMDMxMTAvBgNV
BAMTKDM5NUUwRjJGRjQ4MkMyRTMxMUMxNjEwMDNEQ0JEODQ3Rjg1MzFDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYGg4YfrqfR0MsRfzcIXiajb81
zXzPqq1DvRCdIvObkyJWldNxgJ2J3GINGY8BH8cI/Ot3LkohQh2AooAYhWkXUQtd
SM/aXoup5BgMVrkde7NKLYKumFZ0uTvT+JyDtsmUjbecDPRfovGMWNQ68VfbCqsI
ad+lQCE8B83Pa71HvFwqYWFyXDH45/kWN5GFii/ilaz4SZB9RjBrIkf0MpjTay+T
lCV/IgZVkXAJIWdDV65+IbZyRZZAfOcSmLGWMiLq6/Dzt06HF/1esx8A/azCnv/g
RCxG9wYqCzcsejoFo7eeLj8BpuapHQ/ZQzCEyFU/1arnzgvDLcLWw1kYHGb/AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUOV4PL/SCwuMRwWEAPcvYR/hTHAMwHwYDVR0j
BBgwFoAUfbJZ+JFOR3qwI0PYbBuk0zpSoXswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lmVU43U3ZYdDhOUmZKVkpncTU5N3R1NEE3YmhRZVFtN2RTazNxMlNi
NHkvMC83REIyNTlGODkxNEU0NzdBQjAyMzQzRDg2QzFCQTREMzNBNTJBMTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdEQjI1OUY4OTE0RTQ3N0FC
MDIzNDNEODZDMUJBNEQzM0E1MkExN0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5ZlVON1N2WHQ4TlJmSlZKZ3E1OTd0dTRBN2JoUWVRbTdkU2szcTJTYjR5LzAv
MzIzODMwMzQzYTM5MzI2MjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzQzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBJK8MA0GCSqGSIb3DQEBCwUAA4IBAQBqxBXO
/jXxi6vfcfabYpcAal6zjZ91cM+UUU1DJAxsCk2hYQx+E/b9OAcbxbLAZICMzMFG
/1xubvXO/qZ7GlDJsiOPvovTilvfu3fN8Edm0rhlvXMC0A99ZqpTiRg7KwaLIs3E
lwUSBxSF2GIyFcLHx1DbRA1Cg34jC6srTpTaRqQi+LIpWrmR/6qSMO2F+GIYvkLu
g3OYUUfON6IR4DWPTuz4WrpYqL2s+sAeFBKjtJ6km0YEDeG8TrPFCd3B1nbxWOJv
Yd8nk8QoiqzpKYL+RpB+hIgp73mKJO0xBmknJZjojHwhDeKJ3vBJlarj4PyKg2iU
ulsCaKDx+hrQbKzp
-----END CERTIFICATE-----
Generated at Tue Aug 25 18:25:13 2026 by rpki-client