Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/323830343a386536633a3a2f33322d313238203d3e20323733343234.roa
File:                     323830343a386536633a3a2f33322d313238203d3e20323733343234.roa (raw, json)
Hash identifier:          zqpfFPJ/9nzgHybgToUKjlZIBb1DcNoFTaBptmtS8uM=
Subject key identifier:   A9:42:E4:6C:A3:A5:EF:0D:C0:5B:82:3D:7D:BF:17:B0:23:03:AF:8B
Certificate issuer:       /CN=08B572D43EF9C7244018590FAD979C3EF6A3801E
Certificate serial:       4F9431389B5E0ED5110CD2B4AEC5C562B68630A3
Authority key identifier: 08:B5:72:D4:3E:F9:C7:24:40:18:59:0F:AD:97:9C:3E:F6:A3:80:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B572D43EF9C7244018590FAD979C3EF6A3801E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/323830343a386536633a3a2f33322d313238203d3e20323733343234.roa
Signing time:             Tue 07 Jul 2026 18:17:58 +0000
ROA not before:           Tue 07 Jul 2026 18:12:58 +0000
ROA not after:            Tue 06 Jul 2027 18:17:58 +0000
asID:                     273424
IP address blocks:        2804:8e6c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/08B572D43EF9C7244018590FAD979C3EF6A3801E.crl
                          rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/08B572D43EF9C7244018590FAD979C3EF6A3801E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B572D43EF9C7244018590FAD979C3EF6A3801E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:94:31:38:9b:5e:0e:d5:11:0c:d2:b4:ae:c5:c5:62:b6:86:30:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B572D43EF9C7244018590FAD979C3EF6A3801E
        Validity
            Not Before: Jul  7 18:12:58 2026 GMT
            Not After : Jul  6 18:17:58 2027 GMT
        Subject: CN=A942E46CA3A5EF0DC05B823D7DBF17B02303AF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:c1:b3:57:69:e3:bd:09:8d:19:47:86:ee:
                    8b:07:e5:5c:4a:7a:64:cd:17:be:bc:f0:c5:a0:a8:
                    70:a4:5c:48:74:ca:8b:cc:8c:f4:b8:7e:4b:11:1c:
                    6d:17:44:86:dc:a5:9f:09:1c:ed:64:5b:5e:dd:af:
                    65:f7:a8:8b:c8:70:47:3a:88:01:59:0e:e4:e2:20:
                    a2:e4:94:5c:4d:46:d1:95:1c:dd:43:a7:73:1a:ca:
                    52:c6:d2:dc:54:51:1f:09:10:86:d9:bd:79:c6:86:
                    89:fe:e7:ed:ed:92:81:ad:0e:cb:20:e5:0f:ca:c6:
                    41:27:68:a2:98:50:cb:94:38:08:9d:bd:12:f8:95:
                    6c:2f:39:e5:de:2d:b7:4a:f1:2c:f1:c7:a0:a6:57:
                    6d:90:23:5b:c2:f5:9c:39:59:5b:53:56:74:1c:93:
                    f0:c2:31:83:33:cd:95:3a:54:c2:f5:58:85:28:04:
                    6a:44:75:15:65:4f:c7:94:38:cb:a9:9e:22:b6:ae:
                    20:b1:59:11:8b:79:56:ca:29:26:3b:61:9a:91:1e:
                    9d:99:dd:99:18:39:6b:e4:09:b0:a5:d2:68:74:a5:
                    a7:95:e4:a5:93:c3:37:f2:70:ff:a6:35:89:1a:23:
                    36:32:57:10:fd:69:cb:81:f5:1c:33:89:25:32:75:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:E4:6C:A3:A5:EF:0D:C0:5B:82:3D:7D:BF:17:B0:23:03:AF:8B
            X509v3 Authority Key Identifier:
                keyid:08:B5:72:D4:3E:F9:C7:24:40:18:59:0F:AD:97:9C:3E:F6:A3:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/08B572D43EF9C7244018590FAD979C3EF6A3801E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B572D43EF9C7244018590FAD979C3EF6A3801E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/323830343a386536633a3a2f33322d313238203d3e20323733343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:01:b8:1c:16:96:1d:a4:0c:40:e6:77:ca:81:14:a1:c2:23:
         ee:69:26:1e:31:b0:ac:1b:44:6c:67:7e:ba:d1:02:e3:54:a5:
         af:24:08:98:93:70:83:b6:34:12:ed:49:2c:88:d1:32:1c:95:
         07:43:c9:0b:52:84:34:38:7a:01:e2:56:c6:b0:39:33:c5:60:
         a3:ea:4a:1c:3e:98:f9:e7:e0:1b:8b:da:6d:f4:5d:b7:9a:35:
         a7:0d:83:be:0b:ba:43:c3:3d:8d:f5:6b:38:36:8e:f8:79:36:
         68:5d:cb:f0:cc:eb:33:a7:a2:69:95:dd:46:1a:41:0e:36:28:
         a6:d4:b3:f1:ab:aa:54:2b:6d:d2:74:f4:ed:d9:59:20:c5:47:
         77:9d:11:ff:c8:bd:1e:6f:36:30:0a:6f:c0:ec:e2:3a:bb:86:
         1d:4b:32:de:20:73:ea:16:68:67:cb:49:08:c8:d4:9e:e9:cb:
         f4:e0:b7:5c:8b:ef:ba:dc:28:38:f7:4a:05:69:04:56:45:e2:
         e0:7d:b9:9a:ba:cb:dd:1c:fd:76:51:eb:75:5b:f9:ac:f5:af:
         3c:17:ef:83:64:99:a4:33:4d:b2:4f:84:e0:83:f8:70:ce:ce:
         5a:0e:4a:89:dd:f5:54:a3:3b:00:2b:87:03:ef:49:f5:c7:dc:
         89:f5:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:56:33 2026 by rpki-client