Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a3a2f33322d3332203d3e20323638343837.roa
File:                     323830343a353166383a3a2f33322d3332203d3e20323638343837.roa (raw, json)
Hash identifier:          U0amFX4KZxuPwQpw/4Dl6sjfaLwlqH1oBnpFf7KTUrA=
Subject key identifier:   FE:BA:E1:34:4D:BE:F4:A3:62:56:08:E3:CA:1D:64:07:7F:D7:DD:AF
Certificate issuer:       /CN=464B947257F06B70E4456A2AACFED298FBBEE866
Certificate serial:       2FE29A2F80BE829CA5A74CFF8A9C7E5605681916
Authority key identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a3a2f33322d3332203d3e20323638343837.roa
Signing time:             Fri 26 Jun 2026 13:54:19 +0000
ROA not before:           Fri 26 Jun 2026 13:49:19 +0000
ROA not after:            Fri 25 Jun 2027 13:54:19 +0000
asID:                     268487
IP address blocks:        2804:51f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl
                          rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e2:9a:2f:80:be:82:9c:a5:a7:4c:ff:8a:9c:7e:56:05:68:19:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464B947257F06B70E4456A2AACFED298FBBEE866
        Validity
            Not Before: Jun 26 13:49:19 2026 GMT
            Not After : Jun 25 13:54:19 2027 GMT
        Subject: CN=FEBAE1344DBEF4A3625608E3CA1D64077FD7DDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:9e:76:42:15:00:72:39:7f:d7:45:a0:68:
                    b3:34:d6:96:30:a8:5b:db:51:e8:84:bc:15:11:ba:
                    28:db:93:76:93:cc:36:ba:d6:db:c0:db:27:9c:37:
                    54:4e:f1:82:e8:18:af:12:00:c2:3d:d2:c8:b5:14:
                    98:5d:6d:60:48:98:6e:58:3a:f5:db:0e:97:3a:41:
                    86:57:e2:11:73:16:f1:b3:a1:ae:64:97:71:41:ff:
                    6e:14:f2:77:33:a4:66:e5:40:d1:bf:bb:8e:8a:cc:
                    ad:45:3e:68:28:e4:87:9e:57:20:d1:89:a3:c4:ef:
                    f7:55:4e:5a:5a:5f:e6:9c:12:97:53:df:2f:19:0b:
                    60:0f:f2:4d:db:99:8a:8a:6b:59:45:66:90:87:ec:
                    55:d6:70:40:67:93:e1:72:64:64:c8:1d:f8:2c:93:
                    70:95:1b:ad:70:11:c8:5a:e6:a9:c9:37:87:21:be:
                    95:cf:d6:ac:52:de:ed:cf:10:5d:71:f6:9b:15:6f:
                    4d:ba:da:2a:17:43:1e:35:7a:7c:78:99:a5:f6:88:
                    2f:c4:00:92:5a:39:50:1c:d0:ad:b6:30:2a:16:9c:
                    55:bb:6b:23:70:32:55:9c:8c:e7:0f:76:02:30:ae:
                    c2:1e:8d:e4:c2:08:aa:03:51:6d:1c:b5:3c:2e:72:
                    24:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BA:E1:34:4D:BE:F4:A3:62:56:08:E3:CA:1D:64:07:7F:D7:DD:AF
            X509v3 Authority Key Identifier:
                keyid:46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a3a2f33322d3332203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:25:d6:93:a9:97:90:26:58:f2:2e:09:94:be:b2:3a:8d:ee:
         7c:02:c4:4c:41:8f:3c:c5:23:c6:52:3b:45:8c:d3:54:54:03:
         f8:51:7e:af:0f:e4:1b:45:81:43:6d:c0:47:1a:79:3b:5b:21:
         7d:7e:d4:76:27:76:01:47:44:e2:41:60:bc:4a:20:8e:2c:6c:
         58:e7:59:8d:ce:3f:a7:f8:af:cd:83:53:86:5d:c6:9b:4b:d0:
         ef:1b:bb:b1:5f:55:16:df:33:fb:33:cd:95:8b:1e:86:6a:32:
         ed:36:d3:0a:e1:ed:9c:84:e9:fd:78:d9:b3:a3:49:80:2d:55:
         24:3c:8a:7b:15:c2:8f:a7:2e:54:cb:31:91:39:d7:38:e8:aa:
         0a:84:ce:8c:1c:57:95:bb:a2:0e:f8:64:2a:97:c8:64:eb:95:
         10:1d:36:e7:f4:42:32:cf:b6:e5:1d:58:15:88:5e:b0:b5:15:
         5a:11:19:c6:66:82:cb:7c:b0:89:b8:ba:1a:cc:e3:d8:09:5f:
         fa:8e:11:7a:80:be:cc:6b:d4:83:3f:9c:a0:e7:c8:90:b4:ad:
         cf:1f:ab:8c:aa:55:65:19:46:d4:38:33:9d:8f:51:07:0e:bd:
         ce:73:58:e4:c8:55:39:e6:ac:24:bc:fa:cb:92:47:e5:e1:1f:
         40:6f:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:08:42 2026 by rpki-client