Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d313238203d3e20323639343636.roa
File:                     323830343a363531303a3a2f33322d313238203d3e20323639343636.roa (raw, json)
Hash identifier:          q84x9VdRtE4910MNRBgIFCC7jaQXkJfNwyHPLYncF58=
Subject key identifier:   CD:D7:AC:2D:F4:6F:24:29:61:57:D5:3E:91:E9:B2:B5:06:A3:78:E0
Certificate issuer:       /CN=7893403B3EB816CDE36D55C40DD31AEE2B055F84
Certificate serial:       7D690E6CA714C2C4AD0CD4FD8512C4877CECAE6A
Authority key identifier: 78:93:40:3B:3E:B8:16:CD:E3:6D:55:C4:0D:D3:1A:EE:2B:05:5F:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7893403B3EB816CDE36D55C40DD31AEE2B055F84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d313238203d3e20323639343636.roa
Signing time:             Fri 03 Jul 2026 15:58:32 +0000
ROA not before:           Fri 03 Jul 2026 15:53:32 +0000
ROA not after:            Fri 02 Jul 2027 15:58:32 +0000
asID:                     269466
IP address blocks:        2804:6510::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/7893403B3EB816CDE36D55C40DD31AEE2B055F84.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/7893403B3EB816CDE36D55C40DD31AEE2B055F84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7893403B3EB816CDE36D55C40DD31AEE2B055F84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:69:0e:6c:a7:14:c2:c4:ad:0c:d4:fd:85:12:c4:87:7c:ec:ae:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7893403B3EB816CDE36D55C40DD31AEE2B055F84
        Validity
            Not Before: Jul  3 15:53:32 2026 GMT
            Not After : Jul  2 15:58:32 2027 GMT
        Subject: CN=CDD7AC2DF46F24296157D53E91E9B2B506A378E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:fa:e4:c7:97:ed:5c:0a:6c:91:f3:bc:ae:
                    89:bb:e3:1c:a3:8e:f4:99:16:04:29:9d:c9:f2:41:
                    4c:a7:63:e7:fc:b3:b7:90:2d:53:92:a1:e2:1c:5c:
                    18:be:3a:60:5e:26:9c:b3:aa:66:9e:a8:68:f2:5b:
                    77:93:fc:38:06:94:18:88:0d:3e:11:8e:53:d9:a9:
                    bb:40:8f:df:e3:b1:8b:97:3f:0c:d2:f6:cb:cb:52:
                    af:1e:d6:bf:6a:dd:60:ec:96:aa:73:f4:00:76:c6:
                    e9:fe:a0:62:b1:24:97:b2:ba:a5:bb:aa:a9:b8:35:
                    f2:41:9d:88:0e:01:a4:30:15:68:71:ec:8f:b0:42:
                    03:2f:5d:b2:bf:e4:62:dc:bd:e6:4f:71:aa:3f:31:
                    14:d1:f2:6b:67:2b:5d:e5:9c:76:d7:2d:94:e9:b5:
                    ef:f2:6d:f3:d7:c6:b3:7b:13:19:f5:16:39:c5:5b:
                    07:4f:5e:fe:92:e3:57:53:29:2d:e2:fb:5d:19:ef:
                    9d:7b:c9:e6:bb:b8:6d:25:ea:4d:ce:38:ec:da:95:
                    c7:10:35:02:8a:9d:f6:e6:45:63:04:97:ce:3d:58:
                    c6:14:d4:a8:ad:77:94:1c:86:c4:53:ff:37:79:04:
                    2c:54:bd:cf:b7:db:cb:bb:79:29:2f:ec:bd:b8:f3:
                    19:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D7:AC:2D:F4:6F:24:29:61:57:D5:3E:91:E9:B2:B5:06:A3:78:E0
            X509v3 Authority Key Identifier:
                keyid:78:93:40:3B:3E:B8:16:CD:E3:6D:55:C4:0D:D3:1A:EE:2B:05:5F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/7893403B3EB816CDE36D55C40DD31AEE2B055F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7893403B3EB816CDE36D55C40DD31AEE2B055F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d313238203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6510::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:75:7d:5e:85:c8:dc:e2:67:91:66:35:79:1f:8a:71:b1:15:
         7e:9b:bf:90:a2:e7:0f:75:29:9a:ea:d3:aa:fa:bc:b7:49:3c:
         97:21:e3:18:9c:a6:cd:90:00:ee:87:9b:dc:f3:df:d3:49:e9:
         f5:4f:f6:8d:a8:02:0f:67:a5:7f:83:a8:6f:ef:8f:e2:d5:ee:
         ff:7a:b0:c8:31:6d:1e:42:9f:25:34:e1:3d:ef:6d:51:78:b4:
         f7:5a:69:d1:6a:ce:25:6b:78:65:21:12:da:a5:72:f9:ae:a6:
         63:54:9f:60:a6:77:88:3d:76:c7:fa:ef:75:c4:73:20:a4:85:
         b4:6b:c6:7d:c0:20:4d:8b:c5:0b:4a:5b:3d:a1:fb:a7:a9:0b:
         f8:ea:5e:bf:48:98:e7:8c:23:1a:3b:8c:36:45:5a:86:67:f3:
         bb:9d:62:41:cd:ac:4d:8f:01:93:30:10:4e:d3:35:73:1b:8e:
         fe:0f:e5:e2:de:76:b3:75:9e:fe:fb:bb:08:51:72:82:15:34:
         b4:eb:c6:b0:66:7e:47:c0:35:1e:9a:19:55:19:b7:47:f6:cb:
         f4:78:f8:26:73:07:15:d5:f7:3d:b4:59:b4:46:50:63:a6:52:
         fc:62:17:6e:bc:99:d9:64:e8:7c:1c:75:c8:7b:4a:fc:de:38:
         81:a6:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:06:58 2026 by rpki-client