Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a383030303a3a2f33342d3334203d3e20323733353134.roa
File:                     323830343a386664303a383030303a3a2f33342d3334203d3e20323733353134.roa (raw, json)
Hash identifier:          8dPnQZhloMz5Pw+QY5q6CUFcg/TQ+dWxxT1DyUAdqgU=
Subject key identifier:   8A:04:6D:4F:22:BA:FC:93:D0:15:B4:3B:41:9A:59:EF:E4:57:16:66
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       18255811B9C90F0A9D091FD33B70B0F392D984C2
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a383030303a3a2f33342d3334203d3e20323733353134.roa
Signing time:             Sat 08 Aug 2026 17:10:24 +0000
ROA not before:           Sat 08 Aug 2026 17:05:24 +0000
ROA not after:            Sat 07 Aug 2027 17:10:24 +0000
asID:                     273514
IP address blocks:        2804:8fd0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 18:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:25:58:11:b9:c9:0f:0a:9d:09:1f:d3:3b:70:b0:f3:92:d9:84:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Aug  8 17:05:24 2026 GMT
            Not After : Aug  7 17:10:24 2027 GMT
        Subject: CN=8A046D4F22BAFC93D015B43B419A59EFE4571666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:54:73:8d:12:34:72:dc:a6:59:25:fa:7c:
                    10:6c:58:ca:03:b2:31:8a:50:7b:01:79:c4:e4:1e:
                    a4:c0:15:ff:6e:7a:e5:a0:60:74:e4:a2:8b:0a:f8:
                    ed:b0:3c:87:a3:2a:f9:61:26:4c:b7:d6:da:0f:f2:
                    17:23:f9:e3:b6:3f:c1:e6:a3:31:be:79:d0:aa:8c:
                    e3:1b:ef:29:5a:b2:c9:d1:95:3b:00:4c:6f:00:8f:
                    79:a3:9f:5d:e6:e7:b0:f9:c9:87:72:20:2a:ef:40:
                    c8:32:e2:a3:a3:01:93:7d:18:1e:1e:f8:27:f5:62:
                    13:43:79:fb:12:e3:ca:17:63:2b:58:5e:de:e5:57:
                    ae:ec:1d:b3:62:57:3f:46:b5:f0:c3:0f:ec:be:6f:
                    20:17:c4:25:af:08:c3:b1:18:20:6e:11:9b:2c:47:
                    e5:9b:6e:35:53:3e:7b:cd:09:27:bf:0c:89:2d:f9:
                    fb:88:ea:f0:a0:1e:16:14:9c:d6:1d:08:fa:ff:03:
                    87:f0:a9:13:5a:2c:07:8d:75:fc:55:a5:1d:4e:f7:
                    a1:8d:32:c8:d5:12:57:76:39:bd:09:33:1b:d2:b4:
                    04:75:b0:24:fb:eb:33:15:11:44:21:ea:57:aa:c0:
                    eb:ca:4f:54:f3:ed:bb:b7:50:22:7b:c2:95:fb:5f:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:04:6D:4F:22:BA:FC:93:D0:15:B4:3B:41:9A:59:EF:E4:57:16:66
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a383030303a3a2f33342d3334203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fd0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:5f:87:50:52:7f:de:5f:0d:1e:96:6d:cd:60:7d:bd:04:65:
         ac:65:72:cc:4b:f7:48:c3:c1:07:bf:8f:f5:94:93:c5:fc:e4:
         3e:83:b3:e8:e4:a6:30:83:d1:d8:e3:12:c7:ed:8f:a3:6a:aa:
         af:e4:b2:36:d8:b8:a2:51:56:7a:b1:53:9b:86:53:45:7a:cc:
         0d:08:bb:89:dd:6e:74:c2:40:7e:64:06:bf:2e:81:55:d4:4e:
         73:02:06:cd:aa:bb:93:05:e0:27:74:ea:b6:c0:8e:94:ce:87:
         0d:0c:fd:18:b2:5d:b2:24:38:31:a8:2e:7b:c6:76:2b:49:fc:
         1c:a4:39:af:d8:33:da:4f:55:2b:19:27:e6:c0:a6:a5:dd:15:
         02:ea:83:f2:14:51:ed:38:a1:8b:52:d7:1b:75:06:69:53:0c:
         3e:b0:bf:c0:4c:fe:f3:7e:bf:e9:12:b5:ce:e1:aa:08:77:e5:
         85:15:da:e7:47:e2:fe:fb:58:fc:a0:95:a0:8f:8d:d7:db:67:
         23:1b:51:7a:ea:48:41:a3:de:e6:9d:34:37:d4:b3:e5:4d:45:
         99:13:66:2c:5e:d3:ea:d6:3c:61:43:24:69:f7:37:48:13:27:
         19:aa:b0:0f:d6:d9:02:1c:d8:15:75:b2:06:f1:c8:a5:37:7a:
         8e:6e:7d:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUGCVYEbnJDwqdCR/TO3Cw85LZhMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzRkMyMkY1M0YxMDExRDhEMjEzRjZFQjAwQzVBNDcy
RTkyMzVEOTAeFw0yNjA4MDgxNzA1MjRaFw0yNzA4MDcxNzEwMjRaMDMxMTAvBgNV
BAMTKDhBMDQ2RDRGMjJCQUZDOTNEMDE1QjQzQjQxOUE1OUVGRTQ1NzE2NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgmlRzjRI0ctymWSX6fBBsWMoD
sjGKUHsBecTkHqTAFf9ueuWgYHTkoosK+O2wPIejKvlhJky31toP8hcj+eO2P8Hm
ozG+edCqjOMb7ylassnRlTsATG8Aj3mjn13m57D5yYdyICrvQMgy4qOjAZN9GB4e
+Cf1YhNDefsS48oXYytYXt7lV67sHbNiVz9GtfDDD+y+byAXxCWvCMOxGCBuEZss
R+WbbjVTPnvNCSe/DIkt+fuI6vCgHhYUnNYdCPr/A4fwqRNaLAeNdfxVpR1O96GN
MsjVEld2Ob0JMxvStAR1sCT76zMVEUQh6leqwOvKT1Tz7bu3UCJ7wpX7XwIPAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUigRtTyK6/JPQFbQ7QZpZ7+RXFmYwHwYDVR0j
BBgwFoAU5D/CL1PxAR2NIT9usAxaRy6SNdkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81MUdKWm9RTkJWR1pFc2NvNzZMR2k5TWtwak1COURWaVNRZnZHNGZwUmlk
LzAvRTQzRkMyMkY1M0YxMDExRDhEMjEzRjZFQjAwQzVBNDcyRTkyMzVEOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNDNGQzIyRjUzRjEwMTFEOEQy
MTNGNkVCMDBDNUE0NzJFOTIzNUQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
MUdKWm9RTkJWR1pFc2NvNzZMR2k5TWtwak1COURWaVNRZnZHNGZwUmlkLzAvMzIz
ODMwMzQzYTM4NjY2NDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzczMzM1MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEj9CAMA0GCSqGSIb3DQEBCwUAA4IB
AQAQX4dQUn/eXw0elm3NYH29BGWsZXLMS/dIw8EHv4/1lJPF/OQ+g7Po5KYwg9HY
4xLH7Y+jaqqv5LI22LiiUVZ6sVObhlNFeswNCLuJ3W50wkB+ZAa/LoFV1E5zAgbN
qruTBeAndOq2wI6UzocNDP0Ysl2yJDgxqC57xnYrSfwcpDmv2DPaT1UrGSfmwKal
3RUC6oPyFFHtOKGLUtcbdQZpUww+sL/ATP7zfr/pErXO4aoId+WFFdrnR+L++1j8
oJWgj43X22cjG1F66khBo97mnTQ31LPlTUWZE2YsXtPq1jxhQyRp9zdIEycZqrAP
1tkCHNgVdbIG8cilN3qObn2W
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:55:42 2026 by rpki-client