Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a383030303a3a2f33332d3333203d3e20323731343733.roa
File:                     323830343a376331303a383030303a3a2f33332d3333203d3e20323731343733.roa (raw, json)
Hash identifier:          9DgRqjjFdn9YbDFtl1FlKqaQSTYJ25voD5ouWd0FlzU=
Subject key identifier:   C1:C7:13:26:3B:FB:36:FF:96:D1:6A:C6:94:98:AC:74:65:91:4A:4E
Certificate issuer:       /CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
Certificate serial:       091E680D226D7550E153554BA067984B0927B937
Authority key identifier: C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a383030303a3a2f33332d3333203d3e20323731343733.roa
Signing time:             Sat 25 Jul 2026 11:00:37 +0000
ROA not before:           Sat 25 Jul 2026 10:55:37 +0000
ROA not after:            Sat 24 Jul 2027 11:00:37 +0000
asID:                     271473
IP address blocks:        2804:7c10:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1e:68:0d:22:6d:75:50:e1:53:55:4b:a0:67:98:4b:09:27:b9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
        Validity
            Not Before: Jul 25 10:55:37 2026 GMT
            Not After : Jul 24 11:00:37 2027 GMT
        Subject: CN=C1C713263BFB36FF96D16AC69498AC7465914A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:17:6a:2d:ad:34:88:41:99:03:fe:09:55:
                    de:07:03:54:d3:5b:07:b5:66:ad:ba:e8:19:98:ed:
                    08:98:ab:fe:a0:ef:48:8c:90:95:7b:a0:44:9d:56:
                    17:76:35:9f:23:65:47:d4:c9:6d:0c:56:00:93:f0:
                    97:1c:f9:c3:53:11:c0:95:b3:e2:d7:ec:b0:a7:98:
                    cd:a7:82:6d:bf:3c:ef:c4:84:6a:22:1e:ed:8a:ea:
                    aa:d2:51:59:41:e6:22:ae:90:1d:11:99:a1:f7:07:
                    1d:7d:dd:90:37:59:28:b2:2a:41:cc:db:d0:82:af:
                    86:ac:b7:61:7e:e5:6d:bb:d4:a9:35:26:e9:10:86:
                    20:29:86:ed:9b:ba:d3:6a:1f:d4:7d:52:0f:26:56:
                    57:9d:8c:1a:43:8a:70:2b:e6:a1:25:fb:da:bd:d6:
                    7b:d0:2f:6b:ec:c5:8e:a6:b7:1d:e5:bb:cb:04:79:
                    ce:10:84:7f:df:20:d9:9e:48:b4:12:e4:fd:30:0c:
                    be:fa:08:c6:f4:5e:a3:17:fd:01:5e:ac:fb:2e:6e:
                    fd:26:ef:06:a1:85:f7:08:b9:f7:be:47:7e:4e:b9:
                    dc:9f:1d:a3:74:b2:70:11:93:e5:d7:6f:cc:15:4b:
                    f1:28:d5:25:6f:f6:af:d9:46:9f:d0:46:7e:22:fd:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C7:13:26:3B:FB:36:FF:96:D1:6A:C6:94:98:AC:74:65:91:4A:4E
            X509v3 Authority Key Identifier:
                keyid:C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a383030303a3a2f33332d3333203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:89:02:b3:e6:ae:be:53:ef:d6:9f:c9:03:85:a8:ee:ad:33:
         3a:f6:a0:97:f3:e5:bc:09:f8:12:89:0b:ad:85:45:51:fd:81:
         7d:42:e3:89:63:15:62:aa:27:6b:ae:71:1f:7e:fb:6c:14:e4:
         d2:52:5c:f1:37:eb:b8:54:34:f1:50:77:6a:bc:bf:17:c4:6d:
         43:21:d7:d4:10:b6:74:5f:0e:47:bd:1f:9f:21:a9:aa:05:0e:
         11:8e:cd:d0:a6:e6:c4:a5:f1:35:8d:67:42:b2:f8:d1:1f:88:
         e6:57:c7:c2:f4:06:83:3c:04:7a:4a:f0:15:02:e4:78:3d:87:
         f9:35:cc:00:e4:b1:c8:a7:70:13:02:d1:a4:41:01:2b:60:a9:
         27:fd:67:ab:c7:66:82:88:42:b2:57:82:69:3d:e0:9e:b0:a4:
         e9:e2:6f:5b:dd:56:de:f0:a7:32:17:80:4e:6e:02:f0:c9:6a:
         99:b6:7d:74:a2:ee:49:b8:0f:08:8c:5a:af:b9:5b:97:d7:6a:
         44:97:bf:93:cb:97:50:33:81:f2:fe:b8:d9:b5:03:93:4b:61:
         97:03:e7:a8:37:77:31:0e:d0:f7:e0:9c:1d:48:b8:3b:e3:69:
         f7:b0:dd:47:e8:5d:91:9f:a0:d4:b9:b2:fc:60:d8:9d:b3:6e:
         ef:20:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 01:42:33 2026 by rpki-client