Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33322d3332203d3e20323731343733.roa
File:                     323830343a376331303a3a2f33322d3332203d3e20323731343733.roa (raw, json)
Hash identifier:          SwcL/Cc+gjidzTzQoNZgZAu16y7DH7Y+y/JHg7eMtp8=
Subject key identifier:   A2:CD:82:F0:5D:B2:FC:ED:CF:80:AC:A2:7E:10:05:63:62:0B:DE:C5
Certificate issuer:       /CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
Certificate serial:       1E6D73B17C06D7ECDED5A8A5C21A0B2B001D52BF
Authority key identifier: C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33322d3332203d3e20323731343733.roa
Signing time:             Sat 25 Jul 2026 11:00:37 +0000
ROA not before:           Sat 25 Jul 2026 10:55:37 +0000
ROA not after:            Sat 24 Jul 2027 11:00:37 +0000
asID:                     271473
IP address blocks:        2804:7c10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6d:73:b1:7c:06:d7:ec:de:d5:a8:a5:c2:1a:0b:2b:00:1d:52:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
        Validity
            Not Before: Jul 25 10:55:37 2026 GMT
            Not After : Jul 24 11:00:37 2027 GMT
        Subject: CN=A2CD82F05DB2FCEDCF80ACA27E100563620BDEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:de:84:05:bf:3a:94:9c:0c:e6:26:0c:c2:
                    be:7d:da:8b:ae:9a:ce:fc:53:d2:2a:8d:ad:d1:71:
                    c3:ba:90:e9:62:13:ca:c8:0c:b0:8f:03:ed:6a:29:
                    16:2c:9d:44:17:0d:1e:7e:ea:e2:e0:1f:3b:88:20:
                    09:80:ca:76:2a:7a:86:df:43:f4:7f:9c:a4:dd:f1:
                    37:40:43:5b:86:fa:c6:53:d8:fc:a9:d3:82:29:9c:
                    13:82:1e:93:50:14:f1:90:56:88:32:22:4d:e2:70:
                    69:40:20:29:35:fd:c2:a9:46:48:69:97:e6:77:13:
                    da:cb:bb:ac:e8:7a:70:6c:d1:7b:7d:2a:05:f4:72:
                    c1:ac:ef:d0:c6:48:1d:b0:aa:f2:e8:7c:24:b3:a9:
                    ca:7a:b1:92:97:c5:8a:6f:6f:8e:a6:c1:a9:21:df:
                    0c:08:2e:88:6d:84:18:d1:db:9e:95:f3:78:b8:f7:
                    eb:82:ca:03:18:3c:1c:9d:55:40:cf:0f:da:50:fa:
                    c0:e2:92:09:e8:25:41:61:a5:8b:7e:38:4f:2c:9a:
                    6d:8f:84:82:11:b9:e7:dd:d0:ec:d2:57:ad:bc:64:
                    c4:de:0c:1a:e6:4d:2a:ba:1b:4d:43:11:74:d2:c7:
                    1b:52:ff:c3:2c:b4:0e:51:37:ec:0b:6b:e7:27:5d:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CD:82:F0:5D:B2:FC:ED:CF:80:AC:A2:7E:10:05:63:62:0B:DE:C5
            X509v3 Authority Key Identifier:
                keyid:C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33322d3332203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:fa:09:72:e0:d0:2a:38:0a:5e:ea:83:02:eb:94:de:b0:e6:
         03:78:35:07:73:c7:ce:92:47:fc:0a:93:68:8e:55:99:09:33:
         9d:8f:a5:2b:c2:1f:14:9f:fe:a4:6e:12:c4:d3:99:59:ad:01:
         17:d6:9e:b0:e3:4f:f7:5b:9d:c4:ce:ad:69:b1:50:aa:f1:30:
         bb:d9:a0:de:a5:de:24:f1:cf:42:49:ef:05:aa:ce:f0:26:46:
         55:2a:b9:4b:e4:74:9a:72:ed:41:ef:94:18:e3:0c:63:bf:25:
         ad:78:3b:f7:89:e1:14:26:68:cd:91:3c:a3:a2:64:ae:d1:0e:
         e0:da:16:a6:ff:a7:4f:af:cf:f9:68:94:68:e9:43:9e:2d:d1:
         18:33:6b:cf:fd:cd:84:a8:61:b0:43:52:16:29:a3:6a:e5:6b:
         55:45:ec:9f:94:cd:ef:02:f1:09:f1:c0:02:f5:cd:25:b9:d7:
         18:10:de:d7:7e:72:ae:20:90:fd:09:80:b8:bb:e8:0c:4c:e4:
         15:c8:75:61:bb:36:7c:21:f7:82:6f:3b:91:c6:8f:80:4a:07:
         39:cd:6c:12:bd:61:61:3a:37:75:d6:54:6f:c7:29:f2:06:a6:
         c3:8d:ec:87:b7:86:9f:b7:12:28:1b:19:a5:78:8f:aa:b9:17:
         3f:6a:6e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:13:30 2026 by rpki-client