Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/323830343a343731343a3a2f33322d313238203d3e20323637303330.roa
File:                     323830343a343731343a3a2f33322d313238203d3e20323637303330.roa (raw, json)
Hash identifier:          B4XGqXAp37Ma1V3ze0rYbzVdHd/M8ea2u6QwK7m17zg=
Subject key identifier:   4F:EE:05:A3:92:C7:FC:21:6C:60:90:AB:D6:C1:ED:C2:A1:A9:8B:71
Certificate issuer:       /CN=541B978FF1E0442599DD2C4370AA37746009FC8E
Certificate serial:       72C59F422572396A95B42C3225EFC08D0FEEDDCE
Authority key identifier: 54:1B:97:8F:F1:E0:44:25:99:DD:2C:43:70:AA:37:74:60:09:FC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/541B978FF1E0442599DD2C4370AA37746009FC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/323830343a343731343a3a2f33322d313238203d3e20323637303330.roa
Signing time:             Wed 19 Aug 2026 12:43:36 +0000
ROA not before:           Wed 19 Aug 2026 12:38:36 +0000
ROA not after:            Wed 18 Aug 2027 12:43:36 +0000
asID:                     267030
IP address blocks:        2804:4714::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/541B978FF1E0442599DD2C4370AA37746009FC8E.crl
                          rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/541B978FF1E0442599DD2C4370AA37746009FC8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/541B978FF1E0442599DD2C4370AA37746009FC8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c5:9f:42:25:72:39:6a:95:b4:2c:32:25:ef:c0:8d:0f:ee:dd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541B978FF1E0442599DD2C4370AA37746009FC8E
        Validity
            Not Before: Aug 19 12:38:36 2026 GMT
            Not After : Aug 18 12:43:36 2027 GMT
        Subject: CN=4FEE05A392C7FC216C6090ABD6C1EDC2A1A98B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:81:53:69:9e:f4:c4:8f:c2:bf:9c:2d:36:
                    55:e7:9b:cb:7a:df:ad:0e:2f:d4:10:3d:52:89:61:
                    fa:28:7f:6b:f3:ac:2c:e1:18:9b:b2:80:bc:5a:05:
                    44:1e:b3:71:99:eb:3b:4a:10:dc:48:90:2f:28:f5:
                    6e:ad:ce:f7:8e:4d:b7:de:4a:71:db:5c:b2:d0:32:
                    bc:bd:84:6a:13:c3:31:0b:a1:e9:9e:58:32:47:bf:
                    77:86:c1:57:da:0e:b2:35:dc:0b:04:83:eb:ab:25:
                    36:7b:7c:c9:43:ed:59:6e:25:a2:4e:12:ed:67:99:
                    31:e4:14:7e:20:a4:c2:ef:4d:b4:0d:47:48:5e:6e:
                    0c:02:00:67:5f:d8:d1:7d:d6:2f:50:8d:43:c5:7e:
                    64:88:18:05:ef:c3:ed:6b:ec:ea:01:ee:e8:4f:4b:
                    79:08:e1:10:65:fd:36:69:16:eb:ce:ee:87:52:f2:
                    dc:37:95:13:3a:b8:f2:18:2b:75:0a:c7:1c:2d:85:
                    d4:ea:24:71:e5:e9:ff:97:1d:16:b3:d7:91:b8:17:
                    db:40:b0:53:a0:8a:12:32:53:87:88:db:c8:ae:1a:
                    15:05:1e:b7:29:5d:2d:94:92:04:3b:aa:f7:a4:c5:
                    1b:5b:19:97:77:fc:34:a7:a5:16:85:99:e9:67:28:
                    de:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EE:05:A3:92:C7:FC:21:6C:60:90:AB:D6:C1:ED:C2:A1:A9:8B:71
            X509v3 Authority Key Identifier:
                keyid:54:1B:97:8F:F1:E0:44:25:99:DD:2C:43:70:AA:37:74:60:09:FC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/541B978FF1E0442599DD2C4370AA37746009FC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/541B978FF1E0442599DD2C4370AA37746009FC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/323830343a343731343a3a2f33322d313238203d3e20323637303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4714::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:6d:84:c1:4e:3b:19:d2:d3:1a:ef:8b:80:31:ce:c9:89:35:
         d8:0c:51:52:73:e6:f1:7b:13:64:28:19:89:50:e5:55:7e:3e:
         0a:d0:b8:d5:8f:47:a7:2d:9d:65:c1:82:98:81:00:ee:b9:f3:
         30:e2:5d:39:da:59:d0:6a:f6:d6:14:ee:62:6e:97:5c:2f:78:
         d8:33:4f:5b:71:5b:b0:ac:7a:27:3c:a1:03:fc:e4:d5:f6:49:
         10:bc:ac:c0:d0:c2:77:07:5a:54:23:a5:ad:c1:c1:9c:48:fa:
         e1:96:ef:64:ed:15:54:c0:37:e8:3c:80:29:96:21:3d:34:1c:
         08:a4:03:d5:4a:3a:33:86:9a:96:0d:ad:23:a0:5c:8d:55:6f:
         1c:5f:33:cb:86:fe:04:2f:ae:fa:56:fa:ff:30:ad:12:fa:f4:
         c5:93:38:25:8d:96:4a:f4:75:17:94:e8:67:5b:ec:01:c7:4a:
         b5:25:fd:75:ac:98:97:e0:56:65:06:c2:97:31:fc:97:62:a7:
         0e:c1:63:fe:2a:2a:ec:66:1a:5b:fc:a4:bb:b3:c0:70:bf:36:
         01:03:34:7d:67:eb:ea:ab:4c:17:6f:f2:64:97:6a:39:aa:30:
         da:9e:24:40:c9:81:6a:b2:18:2f:c9:fe:d6:42:b8:8d:8e:c8:
         c9:56:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:26:53 2026 by rpki-client