Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa
File:                     323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa (raw, json)
Hash identifier:          zFyk/STMyCd5zfDr2e97p1a82EDARrQ7cavBGe437tg=
Subject key identifier:   3D:D8:31:D8:88:1A:D0:CF:7D:C0:07:A7:F0:49:A9:61:E7:27:06:F1
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       17DF3DF44D091E0463F3B60F802F0CCAE7C4E6F3
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa
Signing time:             Tue 18 Aug 2026 12:55:57 +0000
ROA not before:           Tue 18 Aug 2026 12:50:57 +0000
ROA not after:            Tue 17 Aug 2027 12:55:57 +0000
asID:                     53018
IP address blocks:        2804:354c:8500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:df:3d:f4:4d:09:1e:04:63:f3:b6:0f:80:2f:0c:ca:e7:c4:e6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 18 12:50:57 2026 GMT
            Not After : Aug 17 12:55:57 2027 GMT
        Subject: CN=3DD831D8881AD0CF7DC007A7F049A961E72706F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:83:ef:f6:c5:97:13:f9:c1:74:3c:65:bb:3c:
                    ab:7d:6f:68:96:82:af:10:fe:5f:7e:39:d2:fe:a1:
                    4f:4e:db:67:c2:f1:49:ab:b7:ad:0d:dd:88:99:99:
                    26:83:ef:d7:7d:48:8f:4d:36:11:85:97:bc:f0:4e:
                    cb:66:4b:d5:76:ec:00:2e:80:66:37:35:3b:0c:88:
                    da:0e:42:04:df:e8:6c:70:aa:df:90:1f:0b:a9:5e:
                    72:89:5b:d2:f8:5a:07:1d:dc:28:2a:75:63:20:72:
                    95:ac:5e:60:d5:86:79:e5:78:63:96:67:ab:9c:2f:
                    68:26:64:a2:73:7e:f2:f5:11:bb:5a:00:32:92:5d:
                    48:a6:53:1c:24:4c:e7:a6:59:4f:2b:ff:fe:17:35:
                    61:8f:e1:d0:20:5d:89:d7:71:ef:d2:91:b2:ca:58:
                    6d:50:a9:29:e3:46:ac:64:f2:8b:05:47:7d:11:68:
                    8e:07:6e:39:3c:a0:46:01:8c:69:37:b7:51:be:0e:
                    a0:54:5f:1c:ca:39:f7:55:9e:0d:ce:fc:28:25:51:
                    44:38:37:6a:0c:dc:87:8a:b2:54:76:2c:9c:7b:93:
                    af:89:c6:c5:6f:17:73:b6:f4:42:29:2e:87:b1:96:
                    90:63:35:a2:ed:47:e9:31:4f:d1:30:e4:7a:ea:1d:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D8:31:D8:88:1A:D0:CF:7D:C0:07:A7:F0:49:A9:61:E7:27:06:F1
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:c4:16:7f:f3:f3:6a:5b:d4:12:0b:ad:8c:fa:15:d7:a1:
         54:90:9b:08:e1:52:94:1f:23:31:77:7b:20:b5:c5:d1:2a:bd:
         dc:56:70:bf:27:52:fd:6f:9c:a3:4a:6e:67:6c:81:1d:ed:15:
         c5:cf:5e:d8:d0:06:89:2b:f7:de:bf:59:21:0d:be:04:86:6b:
         b6:81:e2:0d:f3:08:fb:96:a8:d5:2e:8f:ab:e0:aa:48:6c:d5:
         4b:de:9b:36:91:dd:b6:de:25:f4:5d:4f:fc:7b:fa:0a:6b:ab:
         75:c5:d6:17:08:f7:65:aa:e5:67:29:0a:1a:4b:33:0d:2d:c2:
         bc:0a:81:b0:c0:44:1e:e5:4d:b4:20:4d:70:b6:cc:4d:8e:58:
         08:ce:09:0c:ce:5d:f0:02:c3:b4:17:b8:20:91:f2:fc:a4:2a:
         80:7b:fa:33:04:25:d2:63:14:6a:d8:5a:58:57:db:4e:a8:06:
         8a:4a:8f:29:6a:e8:e7:53:ba:dc:e6:84:49:b6:11:f9:c1:e5:
         02:a2:42:49:80:4b:20:13:48:48:85:91:35:1b:b2:ca:2d:3d:
         da:13:d3:2b:95:ee:f1:e8:cc:b9:10:e7:f7:1c:48:fe:33:e3:
         70:b2:e6:f0:09:23:8a:89:46:20:89:d6:eb:30:1f:e7:a2:d2:
         13:46:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 07:47:32 2026 by rpki-client