Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a3a2f33322d3438203d3e20323635313138.roa
File:                     323830343a326163383a3a2f33322d3438203d3e20323635313138.roa (raw, json)
Hash identifier:          hhf/drgoUyB+KRU5+c0ZAryrvnbREU5FSXHqPS99nqw=
Subject key identifier:   C3:F2:F6:F7:B2:66:9C:2D:4C:62:24:60:39:DC:91:19:59:5E:8F:1A
Certificate issuer:       /CN=F4735C985E6A593DA454F47D310B234BEA1E0A2E
Certificate serial:       0CF0E1AAB082C76B23459BEACF115016E1EB2939
Authority key identifier: F4:73:5C:98:5E:6A:59:3D:A4:54:F4:7D:31:0B:23:4B:EA:1E:0A:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4735C985E6A593DA454F47D310B234BEA1E0A2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a3a2f33322d3438203d3e20323635313138.roa
Signing time:             Thu 30 Jul 2026 15:01:34 +0000
ROA not before:           Thu 30 Jul 2026 14:56:34 +0000
ROA not after:            Thu 29 Jul 2027 15:01:34 +0000
asID:                     265118
IP address blocks:        2804:2ac8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/F4735C985E6A593DA454F47D310B234BEA1E0A2E.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/F4735C985E6A593DA454F47D310B234BEA1E0A2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4735C985E6A593DA454F47D310B234BEA1E0A2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 14:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f0:e1:aa:b0:82:c7:6b:23:45:9b:ea:cf:11:50:16:e1:eb:29:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4735C985E6A593DA454F47D310B234BEA1E0A2E
        Validity
            Not Before: Jul 30 14:56:34 2026 GMT
            Not After : Jul 29 15:01:34 2027 GMT
        Subject: CN=C3F2F6F7B2669C2D4C62246039DC9119595E8F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:7e:e8:0c:fc:60:17:97:30:b0:e4:40:7e:
                    8f:c8:41:eb:79:e9:57:d9:88:7f:bd:c4:02:cd:6f:
                    32:90:ac:1e:d6:40:93:fa:d5:12:3e:55:32:f8:6f:
                    46:7e:48:a3:77:ec:5c:ad:29:48:b6:42:9c:8b:0d:
                    c3:7c:50:f8:2a:39:1a:dc:e4:f7:17:66:6a:c2:d0:
                    a0:8a:ac:c7:2e:6a:72:54:58:d3:f2:ee:91:59:02:
                    2a:8e:79:c8:db:d7:23:1b:6d:fb:f1:b4:05:a9:94:
                    0a:22:0b:78:30:71:fb:59:e7:41:ba:5e:fe:83:5d:
                    5a:84:3a:58:b7:bc:0c:67:a5:23:d8:df:e9:ab:25:
                    62:90:f6:13:df:1b:8c:07:9f:db:88:e7:63:80:42:
                    d9:70:ea:a4:48:64:c7:1d:b9:52:a4:e8:c3:c8:33:
                    ac:9c:67:73:36:48:38:f4:3c:a9:e7:1f:ba:72:ae:
                    c1:04:ea:88:b4:af:2e:94:5b:5f:1b:dd:87:32:ce:
                    80:72:84:44:68:29:00:32:29:80:41:a8:bc:bf:95:
                    7b:18:0b:7a:09:68:83:a2:91:d3:4e:c4:48:54:79:
                    c5:97:b7:1c:fa:26:9a:ec:5c:fc:d8:52:14:1d:28:
                    12:a0:9e:27:82:57:6f:56:2f:0f:4e:c6:11:0f:9a:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:F6:F7:B2:66:9C:2D:4C:62:24:60:39:DC:91:19:59:5E:8F:1A
            X509v3 Authority Key Identifier:
                keyid:F4:73:5C:98:5E:6A:59:3D:A4:54:F4:7D:31:0B:23:4B:EA:1E:0A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/F4735C985E6A593DA454F47D310B234BEA1E0A2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4735C985E6A593DA454F47D310B234BEA1E0A2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a3a2f33322d3438203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:bf:64:52:4c:9b:d8:83:28:a6:b8:08:0a:52:ba:67:64:08:
         ff:c3:54:91:35:de:28:cb:d6:25:70:13:0e:3d:94:12:36:81:
         b1:07:d9:dc:94:a9:58:ee:84:e5:ed:8e:9c:28:cd:09:22:b1:
         a5:08:9b:8e:51:2a:49:e9:df:f1:7d:1c:39:ca:96:f5:b7:0b:
         b0:ed:76:b8:b7:00:d3:23:0c:b8:67:ea:a4:d5:cc:5a:c8:92:
         2e:5e:7c:b5:b8:de:ad:76:98:97:9d:74:df:4b:42:c7:60:ff:
         95:be:f9:8a:a7:17:18:54:8f:d0:05:5e:89:64:4f:a3:61:49:
         2f:fb:06:c6:76:fa:bb:d2:61:53:ba:41:80:13:1f:90:fe:33:
         0f:66:38:db:4e:05:15:71:26:0e:48:39:0e:f7:68:b2:55:31:
         7b:40:8d:97:49:c9:b9:42:32:b3:15:98:0a:12:67:bd:ea:c5:
         5d:3e:32:90:1e:43:97:58:b5:10:4e:48:df:af:bf:f3:6d:86:
         77:67:af:f2:cc:eb:d2:41:60:53:0f:cb:df:56:30:ad:fc:ba:
         9f:4e:bd:80:28:21:35:01:60:ed:dd:e4:90:d9:c5:c0:12:c6:
         f1:65:8a:54:e2:a9:13:5a:44:fb:3c:88:98:16:3a:f1:98:20:
         1d:a1:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:07:15 2026 by rpki-client