Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/323830343a366432633a3a2f33322d313238203d3e20323730353137.roa
File:                     323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (raw, json)
Hash identifier:          1+SfIeK6z1UFWI7iF5eYgBasI0bGmiQnX9IW1LloDvo=
Subject key identifier:   7A:89:25:4D:45:48:67:2F:BD:65:CD:CE:AE:4E:41:14:9C:E1:7F:34
Certificate issuer:       /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial:       7BE74C826535E8B80FDC74AB9EBD7B87383ACDBA
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/323830343a366432633a3a2f33322d313238203d3e20323730353137.roa
Signing time:             Sat 04 Jul 2026 15:01:29 +0000
ROA not before:           Sat 04 Jul 2026 14:56:29 +0000
ROA not after:            Sat 03 Jul 2027 15:01:29 +0000
asID:                     270517
IP address blocks:        2804:6d2c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
                          rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e7:4c:82:65:35:e8:b8:0f:dc:74:ab:9e:bd:7b:87:38:3a:cd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
        Validity
            Not Before: Jul  4 14:56:29 2026 GMT
            Not After : Jul  3 15:01:29 2027 GMT
        Subject: CN=7A89254D4548672FBD65CDCEAE4E41149CE17F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:9c:e8:79:1d:1a:9d:0b:11:a7:9c:b5:48:
                    5f:37:79:fc:da:85:13:d3:8b:bc:93:5a:f7:49:26:
                    0f:eb:1b:95:a2:a0:93:e8:07:de:f2:bc:8b:ae:6a:
                    80:30:4a:85:e5:0b:2d:24:7f:3c:c3:ca:99:ea:3c:
                    d7:94:d4:e7:73:c8:d5:56:88:3a:89:2b:ee:72:59:
                    bf:0a:7d:79:56:56:08:86:10:db:a7:2a:fe:a8:d5:
                    0a:16:b1:a6:05:17:93:50:9d:fe:00:34:95:47:60:
                    07:6c:63:b1:36:d1:5c:e6:a6:b0:ec:3e:80:46:43:
                    1e:0d:84:d8:00:8c:90:4c:29:b6:91:3a:63:72:87:
                    f0:e5:92:d0:a0:01:93:47:76:21:a1:4a:03:99:5e:
                    09:b8:50:ed:77:b2:c2:31:74:c5:b3:ab:a6:f6:30:
                    f0:f7:5a:53:e9:53:bc:87:93:58:fa:bb:f9:6b:90:
                    d2:b3:53:cf:22:40:95:6c:68:3c:85:dd:9f:5d:01:
                    e8:49:64:b2:11:70:27:a5:79:93:6f:a0:6e:b7:d8:
                    23:85:79:eb:a8:ea:4d:a5:ff:46:c6:cc:02:28:82:
                    a9:3f:30:0d:98:10:2c:c1:ac:b8:78:c3:f6:e2:34:
                    a3:9c:ce:90:06:3b:ba:e3:c8:46:59:be:3b:24:58:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:89:25:4D:45:48:67:2F:BD:65:CD:CE:AE:4E:41:14:9C:E1:7F:34
            X509v3 Authority Key Identifier:
                keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/323830343a366432633a3a2f33322d313238203d3e20323730353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:c5:45:f9:b5:03:d5:64:4e:f4:98:cb:f1:f8:e5:55:b0:29:
         2b:62:51:38:14:0f:d3:a5:da:d2:c0:70:6b:24:33:94:f2:8c:
         15:1b:20:3e:d6:34:14:9f:00:a3:b3:0b:22:e2:bb:ac:43:7c:
         f6:20:ff:b6:11:dd:88:5f:8a:10:ab:21:b0:fd:79:8d:68:e0:
         36:f5:87:9f:dc:f9:b4:fe:51:cb:08:e1:90:26:7a:82:d9:d8:
         52:20:8b:8e:af:81:f4:89:80:d3:5f:66:1f:89:4f:1c:e3:c3:
         9d:af:b4:64:c1:81:1c:d9:20:a3:3f:4c:50:e3:df:a4:b5:ea:
         72:e4:de:ad:72:ad:54:a0:16:97:01:8b:ba:45:8e:e6:21:52:
         32:b3:25:68:7b:ea:7b:54:90:54:e0:7c:e3:16:f2:cc:cb:b4:
         58:d9:51:dc:e6:04:52:9f:a7:4a:36:fe:17:8c:a5:36:f0:49:
         86:49:af:01:bf:65:19:05:7e:53:b8:20:ba:b9:8b:c3:7f:ad:
         c4:d8:c5:2c:f1:e4:b0:5d:42:9f:0a:a7:60:7e:80:1c:17:de:
         29:e7:f9:1c:12:78:1e:a5:f0:1b:4c:33:f1:37:79:29:5a:ac:
         31:21:cb:97:a1:a0:15:56:d7:58:71:ec:d0:49:df:14:66:53:
         57:36:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:18 2026 by rpki-client