Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f34382d3438203d3e20323633393230.roa
File:                     323830343a323763303a3a2f34382d3438203d3e20323633393230.roa (raw, json)
Hash identifier:          qSYgGNi4yf1U5qooVdeTlKNhLR3fekYwLzrVcb37p88=
Subject key identifier:   EC:39:5E:12:04:17:F4:A3:60:9E:B8:76:91:8C:17:E0:12:46:18:3C
Certificate issuer:       /CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Certificate serial:       279830BA16C1396ABB795A42A5BA25B9E1CB0DBD
Authority key identifier: 8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f34382d3438203d3e20323633393230.roa
Signing time:             Wed 24 Jun 2026 20:55:12 +0000
ROA not before:           Wed 24 Jun 2026 20:50:12 +0000
ROA not after:            Wed 23 Jun 2027 20:55:12 +0000
asID:                     263920
IP address blocks:        2804:27c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:98:30:ba:16:c1:39:6a:bb:79:5a:42:a5:ba:25:b9:e1:cb:0d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
        Validity
            Not Before: Jun 24 20:50:12 2026 GMT
            Not After : Jun 23 20:55:12 2027 GMT
        Subject: CN=EC395E120417F4A3609EB876918C17E01246183C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:75:21:1e:f0:9d:56:8a:84:f7:43:7f:2c:
                    1e:a2:00:cb:fc:86:b8:2a:f5:3f:02:ad:4f:c9:cf:
                    b8:02:09:57:80:46:5b:ca:c8:f6:59:79:ae:1d:f0:
                    02:11:6b:0d:28:d9:65:26:35:bb:9c:0f:be:0d:29:
                    96:cb:f6:fe:59:5b:88:8f:86:59:6a:17:8f:90:f1:
                    a5:17:96:ef:8e:89:40:6b:59:ea:a6:4d:52:0b:d1:
                    63:7a:3f:d5:8d:2f:f1:97:50:87:be:f3:df:ab:3a:
                    a2:e9:b5:26:84:14:3e:86:65:72:e5:79:26:3b:16:
                    25:a3:6a:a5:12:0f:2d:2c:65:f0:27:2d:b4:f7:0a:
                    38:2b:b8:27:b9:28:c1:85:cf:c0:23:23:f8:99:3a:
                    45:67:b1:ed:67:0d:1c:71:5d:92:8f:bc:6e:78:d1:
                    31:4e:c7:8a:ce:18:01:a5:c9:6a:48:ea:79:c8:a6:
                    f5:33:13:c9:34:86:01:53:7a:6d:3a:19:4a:0a:de:
                    2e:8d:f8:19:8f:76:d5:f6:83:03:36:3a:f3:2e:bf:
                    cb:b9:3b:b3:41:13:f5:57:cc:5b:8a:4d:98:db:01:
                    cf:7a:88:f7:bf:10:e0:81:43:8d:b3:67:77:bb:b0:
                    a9:8d:13:03:84:fb:55:57:63:50:5b:fe:88:b4:93:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:39:5E:12:04:17:F4:A3:60:9E:B8:76:91:8C:17:E0:12:46:18:3C
            X509v3 Authority Key Identifier:
                keyid:8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f34382d3438203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:98:6f:b1:79:f0:50:93:42:82:99:2e:0b:96:50:42:4e:5c:
         15:e6:18:11:f9:60:64:76:ae:a4:32:00:c1:5c:d7:35:3b:df:
         7e:9a:66:99:b4:73:ed:d4:2a:6a:1b:9c:b4:79:8c:d9:ea:e1:
         d9:26:97:a9:98:a3:da:4b:ba:f3:f2:f3:43:ac:a0:96:af:6a:
         a1:f1:27:dd:50:5c:31:1e:b9:a3:81:a2:d3:f2:58:f4:8d:05:
         5d:5b:1c:68:bf:f8:3d:1a:c8:df:7f:f4:b3:a8:36:26:7f:12:
         c6:16:24:dd:85:1c:2f:96:c7:2f:8c:02:14:b9:c8:0e:50:71:
         49:97:22:f1:7e:7d:92:40:65:b6:21:d9:78:10:c6:57:e1:6a:
         dd:a6:3f:32:b0:e2:7f:7d:e2:91:96:da:68:6a:7e:f1:3d:7c:
         60:3d:f3:4c:86:cf:88:29:74:eb:1b:b2:04:da:09:cd:1f:d4:
         01:5c:6f:13:28:dd:72:7c:d2:97:65:be:4c:57:92:3b:2f:7b:
         84:31:65:f6:4d:c3:29:26:83:fb:81:c8:c0:0f:43:93:a3:06:
         b3:e3:04:6d:ee:4e:cd:12:a8:98:a0:d2:b7:f3:7c:2a:b9:1d:
         3c:50:92:8d:b9:8e:80:2f:b2:04:04:a4:a1:ed:ba:7f:6a:25:
         2e:c2:94:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:03 2026 by rpki-client