Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/323830343a353633303a3a2f33322d3438203d3e20323637393832.roa
File:                     323830343a353633303a3a2f33322d3438203d3e20323637393832.roa (raw, json)
Hash identifier:          CiGElvWJKORgy0KDRn6GovbU0n3Th4abQMP/FO/NRe8=
Subject key identifier:   B4:0D:F9:9C:19:65:2F:FA:88:8D:F6:CF:90:D4:7E:4B:9E:CC:ED:E4
Certificate issuer:       /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Certificate serial:       4AF2757E77121151889585864D20854D7DE0FC
Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/323830343a353633303a3a2f33322d3438203d3e20323637393832.roa
Signing time:             Fri 31 Jul 2026 12:11:08 +0000
ROA not before:           Fri 31 Jul 2026 12:06:08 +0000
ROA not after:            Fri 30 Jul 2027 12:11:08 +0000
asID:                     267982
IP address blocks:        2804:5630::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
                          rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f2:75:7e:77:12:11:51:88:95:85:86:4d:20:85:4d:7d:e0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
        Validity
            Not Before: Jul 31 12:06:08 2026 GMT
            Not After : Jul 30 12:11:08 2027 GMT
        Subject: CN=B40DF99C19652FFA888DF6CF90D47E4B9ECCEDE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:10:fc:f9:32:8e:b3:bf:22:89:71:a0:fc:
                    b1:7a:f2:34:45:46:bc:8d:58:8d:ff:80:56:17:ed:
                    a7:8f:2d:ba:8f:36:b1:87:79:b2:31:9c:42:89:4e:
                    38:b1:d1:91:c8:6f:53:1a:5b:1a:bd:8d:15:72:94:
                    52:77:ab:93:85:fa:6e:0c:a9:2c:d8:9a:25:5c:1f:
                    94:50:e4:5c:65:d8:4d:cb:28:4c:19:92:f9:19:b7:
                    6c:44:a2:eb:4b:b3:1a:aa:a8:8e:07:8d:84:d2:61:
                    0a:ce:51:47:e1:6c:09:e9:c8:f5:da:43:f3:71:b2:
                    d9:e6:48:27:d4:26:a3:82:02:b3:4d:f5:c8:bf:3e:
                    55:25:2f:77:69:72:2b:11:80:69:ae:9d:7a:ad:7a:
                    1b:8f:30:19:9b:33:dc:e5:89:b0:55:64:34:e7:c2:
                    f1:d2:52:c9:4d:4e:76:e9:c5:b0:38:55:0b:60:c9:
                    d0:6d:71:da:a4:1a:28:d0:fa:e7:2f:45:56:23:6c:
                    88:eb:74:55:ed:4e:53:41:54:3b:22:ec:c5:69:45:
                    6f:b4:56:1e:26:14:b2:5d:19:d9:8a:89:83:51:18:
                    46:5a:c2:8c:16:ad:a0:f9:b5:9e:66:94:0b:e3:5b:
                    36:c4:1e:df:f4:11:0a:1d:d1:ca:87:12:92:42:99:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0D:F9:9C:19:65:2F:FA:88:8D:F6:CF:90:D4:7E:4B:9E:CC:ED:E4
            X509v3 Authority Key Identifier:
                keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/323830343a353633303a3a2f33322d3438203d3e20323637393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5630::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:36:40:70:f6:22:3b:e8:4c:f1:b5:2a:39:3e:c0:5c:5c:
         fe:96:3b:6a:bd:e8:07:00:40:5f:62:8a:25:ff:3b:11:eb:68:
         10:07:ab:14:aa:85:b2:3a:6f:2f:bc:71:85:61:35:47:14:fe:
         a5:7a:d4:13:a7:ad:cb:3a:31:91:d9:6c:58:80:95:47:c6:48:
         b0:a2:5a:42:11:75:db:cd:87:3b:27:fd:27:ae:a9:1d:59:85:
         15:b9:30:1c:cd:99:b9:71:2e:6d:6e:d5:e3:94:bf:9d:3c:73:
         36:5d:d5:3e:44:c9:ee:79:5f:11:fb:0b:e0:51:59:34:0c:1c:
         df:f4:13:9c:a1:4b:c5:0d:bd:18:34:32:1f:ad:fa:b3:03:07:
         08:bd:de:1b:3f:71:10:39:00:59:4e:24:6f:5a:ca:64:87:10:
         7e:fd:73:10:2f:ca:7f:1b:92:be:22:ea:cc:ca:ce:21:ab:62:
         72:72:da:d3:67:ce:57:77:cf:6e:ee:96:31:5c:31:c7:11:9a:
         d7:01:b4:17:67:7d:fd:ad:d5:93:51:f6:c6:f0:9a:52:ab:fc:
         89:fa:50:2c:f7:94:a8:30:6b:7c:10:12:a2:15:bd:9b:20:a3:
         a0:05:8b:5d:16:e0:16:63:1d:84:06:cc:e5:48:e9:bd:97:0e:
         e9:5e:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:08:54 2026 by rpki-client