Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/323830313a38313a3237303a3a2f34382d313238203d3e20323735373836.roa
File:                     323830313a38313a3237303a3a2f34382d313238203d3e20323735373836.roa (raw, json)
Hash identifier:          a1ttJxqneiB8GAZqpsOe8PcmR9BlgSvMSRyZz94FD0I=
Subject key identifier:   10:76:30:1F:D3:90:C9:56:03:A4:FA:42:01:75:88:3B:BE:A4:E9:3A
Certificate issuer:       /CN=403CA1A62E64E3260D780AB48304F8821DA8B3C0
Certificate serial:       40FA55F912461550E00CBC9140D2FCA5EB46E5C6
Authority key identifier: 40:3C:A1:A6:2E:64:E3:26:0D:78:0A:B4:83:04:F8:82:1D:A8:B3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403CA1A62E64E3260D780AB48304F8821DA8B3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/323830313a38313a3237303a3a2f34382d313238203d3e20323735373836.roa
Signing time:             Mon 06 Jul 2026 16:37:52 +0000
ROA not before:           Mon 06 Jul 2026 16:32:52 +0000
ROA not after:            Mon 05 Jul 2027 16:37:52 +0000
asID:                     275786
IP address blocks:        2801:81:270::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/403CA1A62E64E3260D780AB48304F8821DA8B3C0.crl
                          rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/403CA1A62E64E3260D780AB48304F8821DA8B3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403CA1A62E64E3260D780AB48304F8821DA8B3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:55:f9:12:46:15:50:e0:0c:bc:91:40:d2:fc:a5:eb:46:e5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403CA1A62E64E3260D780AB48304F8821DA8B3C0
        Validity
            Not Before: Jul  6 16:32:52 2026 GMT
            Not After : Jul  5 16:37:52 2027 GMT
        Subject: CN=1076301FD390C95603A4FA420175883BBEA4E93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:69:aa:35:99:7e:dc:43:7b:e6:5a:9a:ab:
                    f2:8d:a4:da:ec:99:ac:01:6f:c7:77:85:0b:3e:f0:
                    aa:a0:53:e8:fb:f6:25:d5:78:f1:4c:a4:49:00:22:
                    e0:52:f6:9f:1c:fe:1d:88:f2:60:9e:1c:a4:30:e0:
                    2a:60:94:85:fa:13:01:88:67:87:ed:34:e8:2f:c3:
                    16:96:c4:0a:d1:bb:b9:fd:31:83:45:12:a9:f7:3d:
                    c6:4d:02:6d:cd:b3:6b:fa:07:14:38:b6:76:58:fb:
                    d5:8c:16:68:e5:e1:d2:9e:e0:71:4a:d7:4a:98:1a:
                    12:d5:75:de:c4:95:0b:aa:59:2d:38:c0:21:c4:b8:
                    5a:fd:db:34:4c:90:cb:fc:ea:0d:d1:06:bc:d7:4a:
                    ad:0e:8d:da:80:83:90:64:02:27:a0:a9:42:0d:41:
                    b8:92:5b:02:56:1f:eb:83:8c:a5:50:ee:cc:4a:be:
                    d0:6e:d6:5d:70:c1:2c:3d:47:aa:d1:dd:7c:51:d8:
                    96:68:7b:a9:10:59:05:a6:1a:ef:d9:bf:34:68:a6:
                    7a:4b:1d:09:8f:40:2a:1c:80:06:13:2f:fd:74:a8:
                    a6:8f:fa:d3:bf:b7:3e:33:ce:c7:86:aa:0b:50:6d:
                    6b:49:f3:02:1e:d0:ff:c0:71:9b:d4:7b:5a:b2:26:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:76:30:1F:D3:90:C9:56:03:A4:FA:42:01:75:88:3B:BE:A4:E9:3A
            X509v3 Authority Key Identifier:
                keyid:40:3C:A1:A6:2E:64:E3:26:0D:78:0A:B4:83:04:F8:82:1D:A8:B3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/403CA1A62E64E3260D780AB48304F8821DA8B3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403CA1A62E64E3260D780AB48304F8821DA8B3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/323830313a38313a3237303a3a2f34382d313238203d3e20323735373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:81:270::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:31:2c:af:2b:e2:e8:01:0e:67:a4:dc:f5:f9:1e:de:c9:b8:
         bc:12:19:59:ba:0e:8a:aa:d2:5b:9c:8d:70:11:4d:ce:05:c7:
         42:08:20:ab:93:fe:52:c2:41:73:3a:b1:d1:fe:b1:67:f5:05:
         0e:26:39:fb:bc:6d:71:c4:54:d4:77:0b:3a:fd:05:64:b5:46:
         cd:68:63:cd:b6:5c:87:47:0b:2b:9b:e0:72:b1:73:01:33:c2:
         c6:17:82:88:9e:4e:b4:6d:d4:7d:96:44:e1:33:23:a5:b4:35:
         97:f3:c0:58:3e:e6:50:11:55:34:f5:0f:28:61:f9:a0:78:da:
         a2:11:bb:5e:a1:96:8b:52:a8:a9:86:29:b2:57:c9:c3:3e:5d:
         e1:90:f5:b6:e9:7e:12:aa:d2:25:67:cd:e0:c8:17:4d:78:da:
         33:a4:72:3b:57:6a:f7:de:ea:35:2f:7b:fd:b8:8a:ca:2c:35:
         f3:ce:1c:8b:13:57:82:e4:83:31:a0:0a:bd:1d:80:e3:b6:41:
         70:b9:68:db:c5:0a:15:5e:e8:19:be:8b:f6:ac:91:54:16:17:
         9c:a9:2f:96:2b:4f:20:0e:d7:e8:94:18:fa:e3:de:ef:7c:05:
         be:28:01:83:aa:5e:48:5c:b0:15:44:2c:c9:c8:88:80:96:8d:
         76:e3:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:06 2026 by rpki-client