Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/323830343a316332633a3a2f33322d3334203d3e20323632383639.roa
File:                     323830343a316332633a3a2f33322d3334203d3e20323632383639.roa (raw, json)
Hash identifier:          W/JoBjEcEwO/mMqAEu5NZqpHYIAy2dNJ7hJn/mLJR5M=
Subject key identifier:   93:21:B5:6B:47:C2:C5:55:68:78:E9:B1:EB:AA:26:79:C0:A0:24:0D
Certificate issuer:       /CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
Certificate serial:       56298F52B21A96989E76A18AB98CA800235352E4
Authority key identifier: B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/323830343a316332633a3a2f33322d3334203d3e20323632383639.roa
Signing time:             Thu 25 Jun 2026 14:20:46 +0000
ROA not before:           Thu 25 Jun 2026 14:15:46 +0000
ROA not after:            Thu 24 Jun 2027 14:20:46 +0000
asID:                     262869
IP address blocks:        2804:1c2c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl
                          rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:29:8f:52:b2:1a:96:98:9e:76:a1:8a:b9:8c:a8:00:23:53:52:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
        Validity
            Not Before: Jun 25 14:15:46 2026 GMT
            Not After : Jun 24 14:20:46 2027 GMT
        Subject: CN=9321B56B47C2C5556878E9B1EBAA2679C0A0240D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:98:8d:35:49:85:51:c7:44:6d:aa:86:6c:
                    a5:b1:3d:0d:5d:5a:be:df:76:f0:a2:2e:0b:a3:ba:
                    fa:8d:79:19:0b:35:f2:d2:58:a4:18:71:57:ec:6c:
                    7e:9c:d3:15:d7:be:28:6c:41:c1:6f:72:58:07:fe:
                    ef:f3:f5:b4:a7:d7:b6:d5:4d:b3:64:e2:8a:d1:cb:
                    d6:15:a2:0a:a6:37:18:c9:94:16:d1:22:54:84:1c:
                    2a:f0:64:7d:00:fe:32:ed:cf:9d:14:36:7e:8d:f3:
                    a6:38:1e:5a:ba:3c:ba:ba:f6:90:83:87:9c:d8:e7:
                    7f:ef:04:3d:97:f8:69:96:99:d9:62:2b:9e:61:55:
                    1d:34:df:f2:ac:f5:bf:0e:c8:a4:30:76:14:93:8f:
                    5f:3a:35:84:53:1e:30:92:7f:d1:5a:f1:ab:7d:d4:
                    56:65:f0:24:d1:da:0e:2e:d1:fc:ad:4e:ca:bd:ce:
                    5e:45:c4:f4:5a:4c:10:4c:2e:67:83:62:a4:72:c6:
                    7a:2c:1a:6d:38:e7:3a:01:6b:24:61:f0:81:d2:49:
                    43:c2:2e:e3:ee:c2:a9:39:c1:18:d6:a2:69:e8:a8:
                    02:2a:8c:61:c0:48:5a:49:5b:42:66:2a:b9:10:a6:
                    91:9a:b4:16:e8:44:7f:fc:0c:c2:91:d9:3a:07:11:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:21:B5:6B:47:C2:C5:55:68:78:E9:B1:EB:AA:26:79:C0:A0:24:0D
            X509v3 Authority Key Identifier:
                keyid:B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/323830343a316332633a3a2f33322d3334203d3e20323632383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:6c:16:96:d5:59:23:2c:ab:8c:2f:ec:62:0f:ae:ea:c5:8b:
         65:04:c8:5f:1a:4a:aa:cf:3a:52:ca:22:b1:d2:92:91:cf:4e:
         6b:b1:53:ba:91:51:50:80:47:d0:55:85:74:45:75:f7:4b:41:
         84:67:9e:b8:5c:55:0e:a0:76:55:f7:2c:92:08:bb:f2:be:94:
         b0:61:30:16:db:71:e4:12:94:4f:12:42:51:9a:f8:f1:1e:73:
         b5:5b:64:a5:dc:81:9f:ab:e9:c5:ec:bc:a8:2c:31:e9:87:77:
         99:ff:1a:c1:b3:33:37:59:32:76:ff:65:d0:3e:84:8c:06:e5:
         b2:ee:11:d5:6a:b3:82:39:59:db:d9:a4:c0:c6:62:4b:52:ce:
         d6:2f:63:56:22:f1:35:1a:7e:d5:be:fb:d2:ad:ca:1d:14:d0:
         1d:0e:f6:68:9b:d1:01:84:fc:1e:98:48:c7:b5:ba:4c:7a:a2:
         da:53:7b:86:6d:76:c1:af:2a:ee:b3:4b:d0:e4:af:1b:85:5d:
         3c:3e:9c:78:71:95:86:13:bc:39:aa:b9:a4:ea:21:ce:9b:31:
         62:1f:c6:73:df:2f:71:1c:09:5f:e3:c5:c4:a5:79:cb:07:fb:
         1c:93:f4:e1:65:35:e1:5e:3b:25:de:77:fe:95:ce:4f:9c:75:
         a5:97:1e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:16:56 2026 by rpki-client