Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/323830343a313564633a3a2f33322d3438203d3e20323633343135.roa
File:                     323830343a313564633a3a2f33322d3438203d3e20323633343135.roa (raw, json)
Hash identifier:          7d1rqWX7tXkQQsocp6XaK/lQRTHVLKL4/ogEgRWQeMw=
Subject key identifier:   A5:BE:5D:67:81:24:D9:40:4B:C2:53:48:11:D0:96:0A:59:F6:FE:AA
Certificate issuer:       /CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
Certificate serial:       61AC21FBE21A2C5133F92A7C6BB2710D323308BE
Authority key identifier: 04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/323830343a313564633a3a2f33322d3438203d3e20323633343135.roa
Signing time:             Tue 11 Aug 2026 12:11:49 +0000
ROA not before:           Tue 11 Aug 2026 12:06:49 +0000
ROA not after:            Tue 10 Aug 2027 12:11:49 +0000
asID:                     263415
IP address blocks:        2804:15dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ac:21:fb:e2:1a:2c:51:33:f9:2a:7c:6b:b2:71:0d:32:33:08:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
        Validity
            Not Before: Aug 11 12:06:49 2026 GMT
            Not After : Aug 10 12:11:49 2027 GMT
        Subject: CN=A5BE5D678124D9404BC2534811D0960A59F6FEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:e1:46:49:05:05:6c:66:fd:aa:a8:23:98:
                    09:de:4c:c9:f5:69:4c:ab:8e:34:d2:b3:1b:ec:ee:
                    a2:19:1f:ed:8d:48:bc:e3:4e:19:bb:31:b4:c0:e1:
                    28:a5:b2:e7:a6:b0:f6:d2:9e:54:52:11:d4:fa:ef:
                    45:3a:fc:33:23:38:6a:9d:cb:7a:9a:05:bb:f1:7e:
                    d2:01:52:bf:04:82:a8:98:13:4a:2b:e3:38:a0:8e:
                    09:7a:02:b5:c7:4d:fc:be:bd:0f:d2:f6:91:03:57:
                    cb:f9:9d:c7:19:68:49:29:90:b1:09:3f:01:82:0f:
                    ae:ef:e8:6a:d1:8b:40:05:8d:5c:dd:fe:3f:e9:50:
                    ea:f1:66:ae:28:50:34:cf:a8:97:96:e8:89:99:39:
                    78:1f:d0:c9:7f:a1:e0:20:6e:76:5f:f0:0e:ab:9d:
                    d8:a4:58:36:6f:7e:c7:e6:d3:61:d6:d9:71:02:a7:
                    64:bc:d1:b1:e7:09:a8:53:58:9a:32:78:1a:e3:09:
                    a2:32:f4:b6:a9:c0:95:f4:8c:a8:92:65:18:7e:d0:
                    61:21:75:95:36:17:6b:fa:10:f0:3b:28:70:a9:1b:
                    0d:1b:ab:72:f6:85:b6:3e:04:67:32:74:98:82:5b:
                    97:f3:1f:fe:74:4f:05:09:11:b6:f0:9f:28:7f:86:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BE:5D:67:81:24:D9:40:4B:C2:53:48:11:D0:96:0A:59:F6:FE:AA
            X509v3 Authority Key Identifier:
                keyid:04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/323830343a313564633a3a2f33322d3438203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:7a:d9:b6:ff:d1:af:10:97:12:ad:d3:3e:f5:54:93:91:9b:
         51:d3:ae:66:63:ce:a5:01:e1:26:9a:99:95:58:00:e8:45:7e:
         a9:79:1f:cc:f3:9e:c7:fc:a2:21:1a:f9:e1:61:a1:33:77:43:
         28:3d:d9:16:cf:a8:fe:f7:36:36:81:87:dd:fc:4a:18:27:c7:
         85:e0:dc:6a:3e:98:7b:51:d6:df:d0:cb:c3:b0:b4:70:3d:e1:
         bc:8d:69:84:47:60:a9:f4:3b:3b:de:39:76:5b:b4:92:ce:91:
         5c:1a:a2:be:dc:88:ce:9b:53:24:98:57:6e:32:25:15:19:74:
         f8:79:a1:81:3c:dc:a9:0e:db:c9:a5:2b:90:3e:15:74:77:ef:
         7b:d3:73:40:30:52:ba:33:3d:24:83:1c:2c:74:2a:55:f6:b4:
         15:86:d5:b3:f0:b5:02:ee:21:90:b0:90:77:d5:9e:5b:d7:0e:
         f2:a0:29:42:18:4d:8f:b8:ee:8e:cd:a4:e0:15:52:50:db:a7:
         cc:f3:ff:27:66:52:04:35:cb:26:1c:18:76:5a:b5:01:c8:d9:
         97:42:c3:e3:ba:12:66:4e:32:dc:f1:f8:cc:4a:ba:37:dd:51:
         a4:c8:8d:e0:73:1f:94:22:f2:e1:cb:f4:11:a9:71:8a:ac:29:
         4a:d2:1d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:29:34 2026 by rpki-client