Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a383030303a3a2f33332d3333203d3e20323634303235.roa
File:                     323830343a323939633a383030303a3a2f33332d3333203d3e20323634303235.roa (raw, json)
Hash identifier:          VIzi3MASjHA+5sq2MBm9RSUhZVHQhnGT/Vkc+6A8uTc=
Subject key identifier:   61:91:33:8E:90:DE:0E:2C:BD:5C:D3:80:D8:63:53:8E:F1:E6:2B:1F
Certificate issuer:       /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial:       1F967517CE360B9AFAEF3E235D29B7AA86F392CB
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a383030303a3a2f33332d3333203d3e20323634303235.roa
Signing time:             Thu 30 Jul 2026 17:59:27 +0000
ROA not before:           Thu 30 Jul 2026 17:54:27 +0000
ROA not after:            Thu 29 Jul 2027 17:59:27 +0000
asID:                     264025
IP address blocks:        2804:299c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:96:75:17:ce:36:0b:9a:fa:ef:3e:23:5d:29:b7:aa:86:f3:92:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
        Validity
            Not Before: Jul 30 17:54:27 2026 GMT
            Not After : Jul 29 17:59:27 2027 GMT
        Subject: CN=6191338E90DE0E2CBD5CD380D863538EF1E62B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:97:35:fd:5e:66:6a:aa:69:fa:a0:0b:f6:cb:
                    29:7c:85:a7:f8:a6:99:b8:3e:f6:36:d5:cf:dc:d8:
                    a9:72:da:9d:22:43:43:c9:aa:43:a4:c3:2a:a9:81:
                    b0:c6:aa:cf:04:94:e2:28:81:c1:71:03:31:d7:51:
                    4b:72:32:9e:17:40:1f:f6:40:02:dd:b1:f7:69:35:
                    10:4a:df:db:b3:39:6e:85:2f:0f:98:5f:4f:89:21:
                    79:21:e7:74:99:04:b4:ed:8a:90:8c:85:ac:44:09:
                    36:c5:a2:4a:02:30:04:42:62:a2:b1:cb:89:7a:1e:
                    41:d1:16:7c:e8:99:26:05:a7:b8:fd:96:03:86:fd:
                    b1:0e:67:9a:18:8a:45:ac:9a:b0:71:80:d2:fc:9e:
                    ea:d4:ec:3e:ee:d0:18:c8:29:ef:69:ed:fd:5a:55:
                    14:d5:7f:c1:93:88:c8:ee:9b:c6:f0:36:0e:d3:34:
                    f1:43:b0:df:a3:ea:b8:e8:c5:d2:c1:aa:cb:7f:42:
                    1f:a5:88:8e:84:5a:d2:ba:b3:26:fe:96:8a:d9:d5:
                    51:b2:b6:80:8a:94:b0:78:dd:63:c2:ea:2c:d7:07:
                    6f:6b:ce:75:50:8b:ad:60:8e:52:45:cb:a4:8e:c6:
                    82:07:f8:9a:25:86:ad:7b:9c:d2:e7:f5:35:61:e5:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:91:33:8E:90:DE:0E:2C:BD:5C:D3:80:D8:63:53:8E:F1:E6:2B:1F
            X509v3 Authority Key Identifier:
                keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a383030303a3a2f33332d3333203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:9d:a5:e8:ce:cd:a8:6c:fd:1f:e2:9b:74:4e:b7:d0:6d:d1:
         93:fc:4d:ef:11:0f:39:bd:3e:b4:3e:47:c3:0a:03:4a:d8:43:
         e4:63:87:1d:87:44:1d:65:bc:f8:30:a0:89:63:43:80:2c:b9:
         e2:d9:37:66:49:06:a1:ec:49:e1:17:73:f7:0f:4c:a4:16:a0:
         a5:11:de:eb:f5:cf:34:f1:d5:32:ac:b6:d1:16:97:25:ca:ce:
         92:32:08:d6:9c:bb:03:13:14:c9:78:83:5f:3e:10:f4:e5:f6:
         15:9b:53:89:5d:dc:8d:b1:89:82:34:04:e6:19:1d:be:ea:22:
         97:d1:85:06:5e:0f:ee:14:bc:f4:15:3d:fa:33:07:3d:74:bf:
         04:74:eb:69:8e:1e:28:a0:7a:7d:81:f0:ee:4c:e4:75:33:bd:
         2d:61:be:ce:13:43:71:6b:1d:d2:dd:a9:de:96:db:56:f3:c9:
         0f:8c:44:33:08:d8:4c:99:28:50:be:0d:60:b6:5a:02:84:a0:
         d5:5d:7a:5a:ae:cf:90:4a:e7:68:fa:29:20:4e:7e:43:73:61:
         11:b8:43:2b:8e:4e:47:d7:15:bf:5e:55:e0:a3:6b:4d:47:db:
         15:0b:6b:89:5c:bc:68:d9:7b:76:94:f2:c1:76:64:4e:3d:69:
         71:ad:31:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:07:58 2026 by rpki-client