Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/323830343a3835383a3a2f33322d3438203d3e20323632333635.roa
File:                     323830343a3835383a3a2f33322d3438203d3e20323632333635.roa (raw, json)
Hash identifier:          oyCjbOiXraTpExnwjrMKN4FnaMGafHC4fekv7uhTqNc=
Subject key identifier:   73:BD:F8:0F:8A:73:FB:22:59:1E:8A:67:60:F9:48:16:1F:11:B1:02
Certificate issuer:       /CN=2F058E3C37F6370BDAB11907C0DFA4A7DD91EEC1
Certificate serial:       22F4ED50AE8E90C1FBE66D0A66C51B2FB26B1438
Authority key identifier: 2F:05:8E:3C:37:F6:37:0B:DA:B1:19:07:C0:DF:A4:A7:DD:91:EE:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F058E3C37F6370BDAB11907C0DFA4A7DD91EEC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/323830343a3835383a3a2f33322d3438203d3e20323632333635.roa
Signing time:             Wed 05 Aug 2026 13:47:08 +0000
ROA not before:           Wed 05 Aug 2026 13:42:08 +0000
ROA not after:            Wed 04 Aug 2027 13:47:08 +0000
asID:                     262365
IP address blocks:        2804:858::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/2F058E3C37F6370BDAB11907C0DFA4A7DD91EEC1.crl
                          rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/2F058E3C37F6370BDAB11907C0DFA4A7DD91EEC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F058E3C37F6370BDAB11907C0DFA4A7DD91EEC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 14:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f4:ed:50:ae:8e:90:c1:fb:e6:6d:0a:66:c5:1b:2f:b2:6b:14:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F058E3C37F6370BDAB11907C0DFA4A7DD91EEC1
        Validity
            Not Before: Aug  5 13:42:08 2026 GMT
            Not After : Aug  4 13:47:08 2027 GMT
        Subject: CN=73BDF80F8A73FB22591E8A6760F948161F11B102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:e5:7d:a2:9a:84:37:c6:60:aa:53:d1:60:
                    52:1c:bd:bc:97:f6:3d:31:6d:d9:d2:6e:9a:7f:a0:
                    99:67:4e:28:57:45:95:83:62:fe:5e:c1:3e:e6:f7:
                    cb:2d:2f:ae:b7:3a:ae:01:2b:c4:88:f6:6f:fe:88:
                    54:0a:c9:ae:be:4c:ca:55:cf:72:c8:e6:09:dc:48:
                    87:b0:79:8c:65:82:ad:35:ed:3f:86:65:51:16:e3:
                    10:6a:ff:9e:7a:62:d9:8c:18:a0:90:24:08:7e:7a:
                    6d:10:89:38:cf:4a:bd:c1:cb:ed:73:59:de:ad:26:
                    7b:d8:3d:72:72:62:3b:a6:22:d6:bf:19:38:15:ad:
                    88:46:da:98:f8:f4:8a:bc:cd:81:90:08:e2:ff:39:
                    23:03:ad:9c:4a:22:22:c2:81:93:0c:91:c3:8b:9d:
                    19:41:85:d8:f3:57:99:e8:d9:67:9c:90:1c:68:5f:
                    81:0d:e9:65:fa:b3:50:45:32:1d:19:74:b1:0c:05:
                    86:0e:e8:40:c9:2c:5e:4f:30:18:6e:42:f6:95:1f:
                    d4:11:d9:b3:7a:e2:ba:09:39:5c:ee:b7:da:e6:20:
                    d2:6a:cc:16:5a:37:09:b5:80:58:c5:74:28:47:18:
                    33:6b:15:63:6b:1f:a3:76:21:5a:96:dc:d3:51:68:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BD:F8:0F:8A:73:FB:22:59:1E:8A:67:60:F9:48:16:1F:11:B1:02
            X509v3 Authority Key Identifier:
                keyid:2F:05:8E:3C:37:F6:37:0B:DA:B1:19:07:C0:DF:A4:A7:DD:91:EE:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/2F058E3C37F6370BDAB11907C0DFA4A7DD91EEC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F058E3C37F6370BDAB11907C0DFA4A7DD91EEC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/323830343a3835383a3a2f33322d3438203d3e20323632333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:858::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:bf:59:87:ea:5d:46:e5:c1:ab:93:87:b0:9d:d4:2b:88:
         90:4a:ee:c7:90:71:a1:a3:dc:1f:58:9c:4a:bd:2f:38:0b:59:
         55:79:83:9b:7e:bf:d0:fe:59:e2:79:5e:a5:d6:5b:ef:01:be:
         62:6e:7b:b9:dd:25:d9:ab:3c:b3:4e:2a:d1:35:1c:2e:ad:3a:
         33:88:9a:5e:4f:f3:cc:d9:39:e7:e5:fb:01:8d:3c:15:dd:c5:
         54:67:2d:00:01:ed:33:61:04:6c:dc:4f:4c:fa:f8:1c:22:70:
         06:5c:0a:98:6b:44:1a:0c:b6:2f:dd:a8:9d:0e:a6:ef:e3:16:
         4e:8b:52:51:40:95:75:58:4e:78:c9:ed:85:43:62:72:95:46:
         f6:37:02:37:be:95:8e:66:77:76:7b:df:f0:9a:56:13:52:ad:
         61:81:e2:7d:20:8e:2a:a5:8e:3a:b7:c4:ab:63:94:04:bd:71:
         f4:a5:ea:0e:92:27:e9:74:70:13:ec:4b:d0:77:91:ac:33:68:
         40:38:0d:d2:a1:e2:04:98:2e:28:9d:21:e2:c1:46:63:1d:35:
         ef:3b:26:36:d4:6a:16:c3:1e:69:a3:a7:f8:fd:98:8f:2e:bd:
         01:c9:93:38:69:aa:8f:ff:fb:53:88:33:dc:85:db:6f:85:c1:
         76:e4:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:01:46 2026 by rpki-client