Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a3a2f33322d3438203d3e203631393336.roa
File:                     323830343a313838303a3a2f33322d3438203d3e203631393336.roa (raw, json)
Hash identifier:          fslUi9DLxLQMzw/8Lj8xmLj1NC4uaxOCltNfKsqDJ4E=
Subject key identifier:   0C:EB:90:0F:77:A4:9C:DC:CD:E3:4C:D5:D1:2B:9A:58:85:AA:A9:EE
Certificate issuer:       /CN=422625563D5C776AFD91FC7267113152605F299D
Certificate serial:       6548E0090D251D38D186764D95938ACF15E0E45E
Authority key identifier: 42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a3a2f33322d3438203d3e203631393336.roa
Signing time:             Tue 04 Aug 2026 19:11:03 +0000
ROA not before:           Tue 04 Aug 2026 19:06:03 +0000
ROA not after:            Tue 03 Aug 2027 19:11:03 +0000
asID:                     61936
IP address blocks:        2804:1880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 01:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:48:e0:09:0d:25:1d:38:d1:86:76:4d:95:93:8a:cf:15:e0:e4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=422625563D5C776AFD91FC7267113152605F299D
        Validity
            Not Before: Aug  4 19:06:03 2026 GMT
            Not After : Aug  3 19:11:03 2027 GMT
        Subject: CN=0CEB900F77A49CDCCDE34CD5D12B9A5885AAA9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:59:52:43:b3:f2:4c:1e:ea:cf:21:d7:44:
                    88:76:8e:88:ee:7b:67:d1:33:d2:3f:98:ef:72:21:
                    f9:8d:bd:ee:d1:c9:b2:61:19:3a:e7:6a:9e:34:33:
                    95:6f:4a:dc:ae:cf:f5:7f:61:8d:67:19:29:9e:ce:
                    dd:d7:8e:4c:95:df:78:7a:48:ee:3d:d6:86:4f:cf:
                    d2:9a:37:82:57:9e:a9:49:b7:57:34:31:bc:18:4a:
                    ef:ec:3e:35:fd:25:69:b4:66:56:57:74:5e:3c:11:
                    b9:50:31:b7:5c:3e:a8:8f:45:c1:42:2e:5c:a6:cc:
                    e5:dd:47:75:79:c1:63:d6:7d:cf:cf:f4:71:f4:20:
                    42:e1:68:6b:c8:2c:35:bb:fb:ca:ec:de:36:47:47:
                    4b:60:bb:dc:3f:cd:72:83:6b:7d:ea:b5:db:fd:e0:
                    d1:fc:e8:da:00:2e:3e:d4:87:1a:6a:8d:e9:1a:3f:
                    fe:8a:82:05:5c:f9:d6:2f:af:75:a4:ce:f5:5f:fc:
                    a4:ab:47:32:2a:a2:02:2f:b0:54:50:f1:ea:84:58:
                    b3:2f:fd:53:09:7b:9e:b5:b7:5b:16:7e:cf:8a:97:
                    7a:65:e1:a8:aa:28:c5:8f:a0:1f:34:bd:ca:30:73:
                    31:db:ea:50:41:d1:79:11:b2:a1:15:8b:7b:31:9d:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EB:90:0F:77:A4:9C:DC:CD:E3:4C:D5:D1:2B:9A:58:85:AA:A9:EE
            X509v3 Authority Key Identifier:
                keyid:42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a3a2f33322d3438203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1880::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:be:41:a2:28:24:b8:39:e9:38:91:a1:6b:b2:dc:6a:ba:3b:
         2e:8b:d1:6e:03:9e:18:30:af:e7:58:57:3f:ce:62:66:68:e6:
         3f:29:f8:8c:fb:5e:d7:6b:09:35:26:44:9e:82:0f:f4:95:eb:
         eb:03:9d:e3:b3:5e:d6:99:d9:1a:88:c3:d7:d8:98:63:85:e9:
         26:66:b8:b0:8c:f1:0d:c7:c1:6c:64:b4:2f:79:3d:e6:d3:df:
         48:bd:b0:d3:f4:b0:4a:40:83:45:68:e2:6e:be:fa:e3:00:6e:
         e0:2e:71:93:57:53:37:31:30:d3:8f:38:3e:28:bc:8d:5b:51:
         a7:50:a6:56:54:e9:0d:9e:5c:94:a1:d3:1b:c5:47:f4:10:a0:
         00:82:1b:67:b6:d7:fc:f8:98:b1:b2:51:a7:4f:79:19:63:a3:
         de:b1:90:64:2b:5b:22:57:bc:61:62:a0:46:f3:97:36:96:9e:
         ee:63:ad:27:e2:0f:bd:af:ad:27:d7:26:a4:2a:33:70:fd:b6:
         54:45:d8:bb:e1:e7:22:65:ee:31:94:5d:10:72:1a:57:a0:c4:
         7e:5a:92:fb:7d:f6:37:b1:bb:33:ed:0c:60:71:3f:05:09:8c:
         bc:88:be:f5:2b:62:14:45:2c:20:af:60:d9:05:62:1d:58:76:
         fc:60:02:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 03:55:53 2026 by rpki-client