Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33322d3332203d3e203631373734.roa
File:                     323830343a313932343a3a2f33322d3332203d3e203631373734.roa (raw, json)
Hash identifier:          hER33uFzOyZf7Ztddc+dkb4o6ijVT+m8rV83M11JOK8=
Subject key identifier:   EB:41:2E:9D:6F:CA:6D:7C:7B:A6:E5:35:76:01:EB:D0:C8:6E:EB:AF
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       43EAE8106C5E35AA78BF52065CFFDF124E98AF86
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33322d3332203d3e203631373734.roa
Signing time:             Sun 02 Aug 2026 01:43:33 +0000
ROA not before:           Sun 02 Aug 2026 01:38:33 +0000
ROA not after:            Sun 01 Aug 2027 01:43:33 +0000
asID:                     61774
IP address blocks:        2804:1924::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 22:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ea:e8:10:6c:5e:35:aa:78:bf:52:06:5c:ff:df:12:4e:98:af:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Aug  2 01:38:33 2026 GMT
            Not After : Aug  1 01:43:33 2027 GMT
        Subject: CN=EB412E9D6FCA6D7C7BA6E5357601EBD0C86EEBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:29:3b:2c:cc:42:ee:1f:ed:0d:b0:42:71:
                    55:3c:be:fb:ce:04:b8:1b:82:dd:9d:34:11:30:a2:
                    cf:a4:bb:c9:96:c9:59:ff:d6:02:e5:de:33:ba:1d:
                    d0:0c:d9:6b:11:2e:80:1d:88:24:a2:37:50:72:7f:
                    8d:01:5e:7d:0a:02:60:16:04:07:66:25:19:19:fc:
                    13:bd:99:e1:f8:46:a3:56:b5:ec:d2:2e:d6:f4:b3:
                    e2:04:22:f7:55:be:fa:d1:f2:b0:fe:af:79:a1:ff:
                    6e:4a:ce:e3:2a:41:a7:23:b8:c8:85:54:f1:3c:09:
                    af:58:8a:9c:2f:23:32:ea:99:b4:32:bb:84:fe:85:
                    dc:2a:6a:34:db:b6:1b:d1:8b:73:f6:8c:e3:0d:59:
                    73:90:1c:a5:42:32:e9:39:b9:a1:c8:7f:8d:14:af:
                    a3:d7:ac:cc:bd:57:3a:16:4b:b0:35:aa:bf:56:44:
                    d9:f5:0c:4b:32:fe:81:d2:ff:f6:d7:55:ee:8a:d6:
                    ba:1e:79:25:d7:ab:0c:61:62:ee:4e:1d:e1:67:8d:
                    39:11:4e:1e:36:16:8c:38:f0:63:90:63:4a:34:1d:
                    2b:c9:ab:fe:c9:4e:aa:f7:4e:5c:35:8d:38:6d:4f:
                    be:c0:ea:33:cf:0d:45:c0:75:a9:39:50:1d:16:10:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:2E:9D:6F:CA:6D:7C:7B:A6:E5:35:76:01:EB:D0:C8:6E:EB:AF
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33322d3332203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1924::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:05:1d:26:58:ba:40:aa:c2:00:72:8c:36:0d:11:a3:90:5e:
         be:23:11:5e:88:66:80:45:9d:fc:a3:6d:d6:4a:1a:d8:01:ae:
         b9:66:8c:73:2d:d8:35:ec:a4:9a:30:16:78:82:46:b2:3d:80:
         f7:c3:7d:90:3c:4d:62:79:5c:18:2c:62:72:a8:37:2f:69:3a:
         8f:85:17:b9:6e:d2:9f:1f:2a:38:86:d9:cc:27:d3:3f:38:ee:
         9c:5e:ff:7a:d4:22:6c:69:88:b2:3a:c4:ce:2d:a2:24:70:de:
         31:c8:30:8b:07:d8:16:6b:91:73:9a:cc:17:c4:6a:5f:d9:25:
         be:23:72:80:c5:93:1c:b4:ad:31:79:d1:0b:6d:fa:78:6d:0e:
         40:d4:5f:36:fa:7d:a6:da:dc:f9:26:83:82:7c:fc:50:81:96:
         a3:c6:80:bf:4a:5a:86:21:1d:21:aa:6b:bc:3f:b5:b0:46:6f:
         45:1f:16:50:28:99:eb:b5:45:f6:4f:d9:ad:2d:6a:9d:4c:d9:
         59:55:b4:31:6a:86:4e:b5:99:42:2e:61:af:67:ee:56:10:a0:
         c0:02:2a:3f:c8:64:3b:3b:0d:0f:77:35:04:68:19:1b:33:d5:
         8e:a4:18:01:4e:af:bf:73:4b:29:54:f4:1d:f1:3b:34:94:03:
         57:62:6e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:05 2026 by rpki-client