Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/323830343a313337383a3a2f33322d313238203d3e20323633353335.roa
File:                     323830343a313337383a3a2f33322d313238203d3e20323633353335.roa (raw, json)
Hash identifier:          Ge/Dfyo+/nLCgNYXXl8kFJSWi3GjlwhjP96EhLkn8nU=
Subject key identifier:   F4:74:27:1B:6B:2A:BE:68:15:57:88:80:AE:24:20:6A:60:73:71:73
Certificate issuer:       /CN=39B7B93D80637710E9D6646ADA3E05CDAA4ED292
Certificate serial:       59D36BC9CB73422B16B76A62A364385F73667DA9
Authority key identifier: 39:B7:B9:3D:80:63:77:10:E9:D6:64:6A:DA:3E:05:CD:AA:4E:D2:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B7B93D80637710E9D6646ADA3E05CDAA4ED292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/323830343a313337383a3a2f33322d313238203d3e20323633353335.roa
Signing time:             Wed 29 Jul 2026 18:52:51 +0000
ROA not before:           Wed 29 Jul 2026 18:47:51 +0000
ROA not after:            Wed 28 Jul 2027 18:52:51 +0000
asID:                     263535
IP address blocks:        2804:1378::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/39B7B93D80637710E9D6646ADA3E05CDAA4ED292.crl
                          rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/39B7B93D80637710E9D6646ADA3E05CDAA4ED292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B7B93D80637710E9D6646ADA3E05CDAA4ED292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d3:6b:c9:cb:73:42:2b:16:b7:6a:62:a3:64:38:5f:73:66:7d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B7B93D80637710E9D6646ADA3E05CDAA4ED292
        Validity
            Not Before: Jul 29 18:47:51 2026 GMT
            Not After : Jul 28 18:52:51 2027 GMT
        Subject: CN=F474271B6B2ABE6815578880AE24206A60737173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:d8:8f:e1:b2:2d:a9:32:b6:ac:30:e9:4e:
                    ef:6a:b0:ee:4e:6c:9a:ab:ae:b2:bd:96:d6:f8:7b:
                    66:28:e0:a6:46:e4:a8:c2:18:a2:28:b1:d5:de:33:
                    a9:6c:70:a4:20:d5:aa:b9:c6:0d:4d:ac:82:a1:8c:
                    eb:aa:3c:5f:ce:43:f4:69:79:9f:9b:91:70:e9:d1:
                    f5:87:4f:5f:21:7d:de:1c:c9:94:07:ce:d2:1d:1a:
                    64:68:ab:a2:f0:36:d8:cd:4a:71:06:d8:d7:78:e0:
                    b7:0f:b5:c9:97:dc:cd:4c:20:04:49:c5:6e:7c:e8:
                    27:f5:52:49:0e:31:f5:1b:d7:42:e5:68:ee:57:7b:
                    e5:40:e7:47:00:5a:07:02:6f:0b:13:1e:a7:da:1d:
                    ae:e4:72:fa:5d:52:b6:ae:ee:4b:dd:74:60:d0:af:
                    69:2b:ba:27:66:82:de:22:ca:da:ab:98:d0:4b:00:
                    2a:7d:af:0a:e8:9c:de:f2:25:de:3f:2b:35:b8:91:
                    a0:a4:35:6e:80:d3:ef:19:90:a4:17:2f:fd:a7:cb:
                    97:5c:48:81:b0:9e:45:5b:ae:2e:d4:ae:f2:49:5d:
                    5e:f3:38:27:b7:70:25:b7:21:47:e0:5a:bf:4d:3f:
                    58:ab:a5:a9:c9:f6:12:38:2d:e0:f2:ae:70:32:30:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:27:1B:6B:2A:BE:68:15:57:88:80:AE:24:20:6A:60:73:71:73
            X509v3 Authority Key Identifier:
                keyid:39:B7:B9:3D:80:63:77:10:E9:D6:64:6A:DA:3E:05:CD:AA:4E:D2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/39B7B93D80637710E9D6646ADA3E05CDAA4ED292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B7B93D80637710E9D6646ADA3E05CDAA4ED292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/323830343a313337383a3a2f33322d313238203d3e20323633353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1378::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:91:d9:f7:0d:76:c4:77:be:4c:c3:6f:ba:0d:c6:58:0b:7d:
         5b:11:79:44:8a:9e:29:f5:16:af:93:5b:1d:bb:a0:5b:a7:b0:
         9e:ca:3b:26:53:f3:eb:f7:73:d8:3b:ed:7c:a9:5f:4a:92:8a:
         a6:29:8b:f0:8e:09:10:d3:00:95:68:4f:43:79:fc:74:d6:df:
         3f:08:b7:e4:f6:54:f7:ad:6b:5c:cf:fa:cc:8e:4e:9d:c4:ff:
         67:ac:e2:c3:b3:48:bf:8f:ae:ab:9a:f6:27:38:e9:9e:93:b0:
         78:e4:6e:04:19:7f:54:39:53:f4:fc:81:f1:37:62:dc:75:6f:
         f4:72:be:b8:b1:56:fd:30:da:96:c5:ed:6e:5f:ac:a0:5e:3d:
         22:c8:5d:45:37:b2:97:47:6f:33:9d:8c:9c:c2:ce:b8:30:ae:
         fc:e6:89:ae:04:93:d2:1e:e4:af:e4:46:b4:79:df:98:23:70:
         4c:0d:6c:c9:16:6b:c5:0a:2c:cd:47:68:5a:3c:02:a1:82:0d:
         13:ea:ce:25:e6:06:69:87:76:5e:4c:f6:95:86:a8:ac:93:e5:
         7a:0d:ec:49:4d:59:23:f3:2b:25:3e:41:ad:56:25:5d:4e:57:
         39:5f:15:cb:4a:fa:f1:d5:50:55:33:fb:34:b0:e5:c7:b7:6e:
         06:7e:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 15:56:10 2026 by rpki-client