Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a3a2f33342d3334203d3e20323638343837.roa
File:                     323830343a353166383a3a2f33342d3334203d3e20323638343837.roa (raw, json)
Hash identifier:          cI/1xVjTQqli3iBRXiWapyMghYo/KF9Xa1Wz1fa4Ld4=
Subject key identifier:   4D:35:7B:02:19:06:88:DD:C8:3D:BC:7D:4C:04:06:AF:E3:00:50:29
Certificate issuer:       /CN=464B947257F06B70E4456A2AACFED298FBBEE866
Certificate serial:       4F2092154736D5CA311895BAE6837A287105E173
Authority key identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a3a2f33342d3334203d3e20323638343837.roa
Signing time:             Fri 26 Jun 2026 13:54:18 +0000
ROA not before:           Fri 26 Jun 2026 13:49:18 +0000
ROA not after:            Fri 25 Jun 2027 13:54:18 +0000
asID:                     268487
IP address blocks:        2804:51f8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl
                          rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:20:92:15:47:36:d5:ca:31:18:95:ba:e6:83:7a:28:71:05:e1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464B947257F06B70E4456A2AACFED298FBBEE866
        Validity
            Not Before: Jun 26 13:49:18 2026 GMT
            Not After : Jun 25 13:54:18 2027 GMT
        Subject: CN=4D357B02190688DDC83DBC7D4C0406AFE3005029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:e6:c6:a1:e9:58:f2:fe:7a:2a:cb:95:b1:
                    b4:c2:44:23:42:3b:f5:c0:42:bd:c5:ff:a7:e2:95:
                    f7:1c:85:88:be:45:ee:5d:b9:2e:66:41:ab:bf:4c:
                    c7:8a:e1:3d:40:27:e4:15:6e:af:f2:cf:46:dd:a5:
                    72:5b:c5:82:66:a7:9c:68:54:96:00:08:d2:5d:4c:
                    1b:07:c7:6b:18:06:f1:b9:70:ab:71:d4:e4:79:ed:
                    22:b0:a5:52:bc:c2:a2:ec:ae:80:5f:a2:2f:a7:7e:
                    3f:e5:95:b7:d1:ed:3f:a3:c2:39:9c:cd:5e:ee:df:
                    49:38:30:84:b9:07:2b:53:3e:f2:e9:04:ba:10:81:
                    3d:00:55:4e:11:db:d0:59:ae:43:c9:87:e0:2d:2a:
                    fc:5a:28:b1:06:2e:7a:48:3c:db:96:25:ec:6b:9b:
                    65:0c:30:3f:61:fb:9a:4b:61:e8:38:02:62:7d:a8:
                    a9:01:12:c7:89:79:ef:7b:33:e0:92:19:16:dc:e2:
                    9b:ff:07:91:b5:29:d4:04:42:91:9f:6b:fb:84:5a:
                    d1:cb:87:90:bf:25:5b:67:a3:a6:50:ac:42:c0:37:
                    e3:67:75:da:e8:85:89:bd:37:df:42:81:27:ce:2f:
                    78:b5:54:44:1f:61:e7:1d:2c:57:ac:84:f4:a9:00:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:35:7B:02:19:06:88:DD:C8:3D:BC:7D:4C:04:06:AF:E3:00:50:29
            X509v3 Authority Key Identifier:
                keyid:46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a3a2f33342d3334203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51f8::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:72:f6:63:09:87:00:8f:55:70:82:bf:27:2b:ba:f2:51:a9:
         06:49:69:ac:0a:4f:51:f0:aa:22:fd:f1:e3:1c:25:60:85:35:
         ff:28:9e:86:1d:4a:21:f3:79:98:11:e6:6b:7c:ba:b3:6b:76:
         80:6d:bd:26:44:51:50:49:7f:c2:4d:af:52:a3:07:f4:ef:1b:
         73:1c:c8:f0:59:32:79:fb:23:36:85:9e:cf:5b:57:ab:36:a8:
         84:9f:71:30:42:72:ea:f2:bf:42:cb:36:24:28:de:3a:0f:d5:
         45:4f:e5:3f:2f:6d:cb:ca:05:02:e5:de:e2:60:79:f4:d9:6c:
         27:d5:58:3d:66:46:1d:3b:ab:21:59:c2:c1:67:b4:02:cb:3e:
         ac:55:4e:42:ab:ce:d0:62:7e:96:80:0e:95:68:8e:ce:bb:31:
         ef:2a:c8:6c:5a:96:31:13:4f:42:31:60:19:ec:be:da:08:0c:
         56:8e:55:3d:46:da:90:81:e1:6e:ab:51:50:b9:43:15:b9:a9:
         f5:cc:e2:c6:e6:ff:8d:38:87:5c:71:20:77:15:44:c0:eb:4a:
         20:f4:cd:bf:09:9f:4b:b7:b8:94:ee:17:45:af:7a:b5:9a:79:
         bf:e4:a4:56:3d:87:b1:f5:98:aa:dc:70:c9:2f:6d:6b:d2:02:
         8b:5d:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:00:59 2026 by rpki-client