Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3438203d3e20323731363037.roa
File:                     323830343a376532633a3a2f33322d3438203d3e20323731363037.roa (raw, json)
Hash identifier:          Ra/RGHWyhbyyKKLC60obo3/THj3vty4pcAnKsZnBWko=
Subject key identifier:   0C:38:8E:0B:8F:2B:64:22:AA:B4:E6:AC:ED:07:D3:99:6D:AF:B2:A7
Certificate issuer:       /CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Certificate serial:       04565596BEF2285898BA6F6838826E4024327D89
Authority key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3438203d3e20323731363037.roa
Signing time:             Tue 04 Aug 2026 17:35:43 +0000
ROA not before:           Tue 04 Aug 2026 17:30:43 +0000
ROA not after:            Tue 03 Aug 2027 17:35:43 +0000
asID:                     271607
IP address blocks:        2804:7e2c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:56:55:96:be:f2:28:58:98:ba:6f:68:38:82:6e:40:24:32:7d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
        Validity
            Not Before: Aug  4 17:30:43 2026 GMT
            Not After : Aug  3 17:35:43 2027 GMT
        Subject: CN=0C388E0B8F2B6422AAB4E6ACED07D3996DAFB2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:4d:6e:7a:49:b2:2a:e8:3f:4b:c0:de:8f:
                    01:6b:e9:3f:eb:1e:3f:d5:99:bb:4f:43:7c:a3:a7:
                    3d:56:ff:a1:92:19:cb:d6:60:64:35:bc:cf:e0:f5:
                    6f:60:e3:85:5b:0c:b8:69:2c:6c:47:b9:92:58:0c:
                    15:51:d5:8a:b6:14:df:5c:c6:87:48:5c:d3:c2:32:
                    4a:ce:06:c8:5b:9c:ee:25:2f:c0:75:13:5e:57:9b:
                    a7:eb:72:5e:61:22:94:d9:21:c8:07:fb:15:21:2f:
                    19:43:a3:75:99:7d:17:00:26:05:1d:4b:e8:19:c6:
                    2b:31:0d:df:8f:1d:bf:aa:ba:e6:7f:92:a5:f7:a3:
                    51:32:c2:6e:c7:ee:76:7b:54:40:3a:69:7a:9c:84:
                    ca:fa:d7:b4:3a:81:e3:6a:64:10:61:78:ae:f5:cd:
                    62:3e:c0:2b:3a:bb:af:f5:b1:f2:15:b1:c0:66:06:
                    e6:81:f7:c6:4a:4a:9e:ed:c3:c9:40:9d:25:62:b3:
                    04:b3:1d:7e:19:2d:e2:c1:bc:05:cd:24:db:68:a7:
                    2f:e3:ff:85:c2:58:a4:f7:1d:59:8c:16:03:a7:eb:
                    a5:3d:8e:e6:ae:ea:32:8b:ec:1b:ee:89:b2:5f:86:
                    fb:66:7a:06:50:64:2d:12:f8:a8:18:50:41:e0:b2:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:38:8E:0B:8F:2B:64:22:AA:B4:E6:AC:ED:07:D3:99:6D:AF:B2:A7
            X509v3 Authority Key Identifier:
                keyid:23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3438203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:61:df:f7:74:03:96:57:9a:8b:9b:83:d1:e2:9f:9e:0a:04:
         5c:b1:37:dc:62:5e:bb:47:5f:b3:96:9c:fe:1f:69:64:84:83:
         16:4d:4d:2e:a4:be:f6:6a:f9:f6:e8:2a:bd:ee:e3:94:dd:45:
         67:2a:3b:57:88:4a:af:c6:d2:65:0c:4e:bf:54:05:b4:f9:1b:
         8e:b0:0d:b6:80:97:b4:d8:50:0f:73:ba:90:86:cb:6a:b5:bb:
         c5:ad:3a:23:d8:19:7c:84:f8:2c:90:a8:5e:cd:7d:03:cd:da:
         f2:e1:ee:f4:87:bc:23:a8:2f:c9:0a:bf:ab:14:c2:77:6e:b8:
         1d:46:7c:b6:e4:05:10:5f:b2:79:16:8b:ad:6c:88:4f:37:9e:
         39:36:13:fb:d1:2b:67:ef:6d:0e:78:c7:2f:31:7e:e4:74:be:
         0c:98:fe:89:db:96:57:ce:bd:9a:c5:a5:cc:c3:57:21:e6:01:
         70:01:08:24:82:a3:a2:b2:30:25:75:4c:37:ae:79:b8:21:77:
         18:97:bf:75:4f:b1:4a:c4:00:f7:4c:88:b7:f9:53:c6:57:9d:
         ff:2c:dd:c8:0e:a3:17:ea:00:68:f8:e5:f8:2b:a0:2b:59:1b:
         25:ca:40:a8:b7:e8:bf:b3:c0:c4:4b:99:2f:fd:7d:59:7f:8d:
         91:d2:2f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 19:15:43 2026 by rpki-client