Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a3a2f33322d3438203d3e20323637333239.roa
File:                     323830343a346263383a3a2f33322d3438203d3e20323637333239.roa (raw, json)
Hash identifier:          2ieGiJeuqthWyeomp9oRiVA1BT5Ly7H2PuixAshf1lA=
Subject key identifier:   F8:98:BE:C6:22:14:B4:15:69:3B:41:23:07:0C:A9:4A:2F:78:D5:50
Certificate issuer:       /CN=2FA449690518010383B75A40A62E7FA858639347
Certificate serial:       014EEE55DD66C97E8D2D8A3C790DCF3F9F6E203E
Authority key identifier: 2F:A4:49:69:05:18:01:03:83:B7:5A:40:A6:2E:7F:A8:58:63:93:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA449690518010383B75A40A62E7FA858639347.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a3a2f33322d3438203d3e20323637333239.roa
Signing time:             Tue 11 Aug 2026 12:40:02 +0000
ROA not before:           Tue 11 Aug 2026 12:35:02 +0000
ROA not after:            Tue 10 Aug 2027 12:40:02 +0000
asID:                     267329
IP address blocks:        2804:4bc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA449690518010383B75A40A62E7FA858639347.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4e:ee:55:dd:66:c9:7e:8d:2d:8a:3c:79:0d:cf:3f:9f:6e:20:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FA449690518010383B75A40A62E7FA858639347
        Validity
            Not Before: Aug 11 12:35:02 2026 GMT
            Not After : Aug 10 12:40:02 2027 GMT
        Subject: CN=F898BEC62214B415693B4123070CA94A2F78D550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:9f:0e:77:82:a8:75:63:c3:4e:5f:bd:e4:
                    62:a1:fe:f8:b4:07:9c:98:18:8b:19:1a:d4:59:3c:
                    96:ba:51:a5:3a:8a:3b:b8:a5:85:96:78:19:87:77:
                    62:63:b8:3d:ef:80:4f:8c:3b:a3:c8:68:48:f7:c1:
                    6a:ab:99:13:58:6b:e7:20:03:6c:d6:a6:98:73:9e:
                    76:d5:16:96:9d:7e:7c:c7:16:4f:30:14:d0:09:d9:
                    f4:1d:b7:ee:ff:a4:c8:9b:81:d5:64:96:b5:9d:e1:
                    b0:22:dc:87:ab:cf:64:83:20:e0:e9:a4:d7:e2:97:
                    4f:1c:12:a8:5e:56:b0:9d:46:af:2a:f7:35:42:7d:
                    62:7a:eb:a6:8c:a3:1f:4c:4b:49:c4:42:8d:0d:3b:
                    6a:59:0d:dc:59:ef:18:6d:2e:94:76:a9:16:26:f2:
                    69:23:55:91:19:83:ce:7b:66:46:53:5c:fc:78:3e:
                    e9:fc:20:80:93:b8:b6:7b:3f:93:22:5b:e6:47:f5:
                    28:bb:72:58:64:84:f4:43:2a:24:69:38:c9:01:50:
                    4b:fe:0d:2d:d4:43:22:8c:a5:6a:e8:d9:63:61:80:
                    5d:b6:d3:2e:27:e3:bf:b4:7b:3b:60:17:b5:e0:3d:
                    61:0f:b2:de:e7:6f:e3:c0:41:7c:e1:d5:1c:15:5e:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:BE:C6:22:14:B4:15:69:3B:41:23:07:0C:A9:4A:2F:78:D5:50
            X509v3 Authority Key Identifier:
                keyid:2F:A4:49:69:05:18:01:03:83:B7:5A:40:A6:2E:7F:A8:58:63:93:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA449690518010383B75A40A62E7FA858639347.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a3a2f33322d3438203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:64:51:74:88:85:02:b6:44:f1:93:9a:50:0c:94:6d:b2:14:
         49:7f:17:e9:5d:11:52:40:8f:cd:57:fd:59:12:63:4f:d2:fb:
         ae:34:2a:3a:7f:6f:19:e1:71:a1:f5:0c:53:b2:d2:97:e1:6a:
         23:f6:61:e5:20:c8:4a:fb:ae:b8:5a:3b:87:88:c5:ce:d7:30:
         4e:99:9e:e8:a7:b3:4b:f7:0a:c9:0f:bc:13:a7:f7:70:f5:9e:
         8f:2a:20:23:67:3e:10:75:bc:a3:4c:b6:54:28:7e:70:9b:42:
         51:c0:74:a7:6c:3b:85:56:eb:f6:d4:a8:5a:3d:78:ae:dc:d5:
         b6:f2:19:1f:3a:d8:18:cf:19:49:22:1e:a6:67:7f:05:35:b0:
         2d:81:8d:38:bc:af:df:d4:2c:1b:72:0a:10:c1:9e:9a:57:60:
         04:4a:1f:1d:0e:d6:27:48:08:4e:e6:d2:ff:4c:26:ee:b7:af:
         c0:dc:37:0b:d4:0b:f7:45:7d:5e:5a:8f:b8:f3:1d:7b:d1:2d:
         52:47:53:20:3b:81:e9:f4:11:46:ef:75:57:73:f9:c0:8e:b9:
         ec:e3:c4:63:0e:bb:01:38:4e:3d:23:10:ce:9f:14:97:e4:34:
         d9:e3:08:6b:dd:4e:9d:e5:60:97:22:fd:ff:18:0b:7a:7f:91:
         03:5c:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:31:29 2026 by rpki-client