Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/323830343a313966343a613030303a3a2f33362d3336203d3e203631383238.roa
File:                     323830343a313966343a613030303a3a2f33362d3336203d3e203631383238.roa (raw, json)
Hash identifier:          XM5GOjNnL3QfyShwcamCyqV4ov2ck1+aTSlUtgQKF3E=
Subject key identifier:   7D:D4:C6:62:AC:5D:74:64:00:BE:FB:2B:91:71:6E:62:BD:A4:9F:BD
Certificate issuer:       /CN=14E46DA999E68BFE84E5BEA28A4363235132F2AE
Certificate serial:       583F36E62012875156CF9280E8433F624C34050A
Authority key identifier: 14:E4:6D:A9:99:E6:8B:FE:84:E5:BE:A2:8A:43:63:23:51:32:F2:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E46DA999E68BFE84E5BEA28A4363235132F2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/323830343a313966343a613030303a3a2f33362d3336203d3e203631383238.roa
Signing time:             Thu 09 Jul 2026 17:35:52 +0000
ROA not before:           Thu 09 Jul 2026 17:30:52 +0000
ROA not after:            Thu 08 Jul 2027 17:35:52 +0000
asID:                     61828
IP address blocks:        2804:19f4:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/14E46DA999E68BFE84E5BEA28A4363235132F2AE.crl
                          rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/14E46DA999E68BFE84E5BEA28A4363235132F2AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E46DA999E68BFE84E5BEA28A4363235132F2AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3f:36:e6:20:12:87:51:56:cf:92:80:e8:43:3f:62:4c:34:05:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14E46DA999E68BFE84E5BEA28A4363235132F2AE
        Validity
            Not Before: Jul  9 17:30:52 2026 GMT
            Not After : Jul  8 17:35:52 2027 GMT
        Subject: CN=7DD4C662AC5D746400BEFB2B91716E62BDA49FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:41:76:b5:67:26:12:ae:bd:b5:c8:42:39:
                    2f:dc:33:32:57:da:95:fc:95:1b:27:3a:30:8c:0a:
                    38:5c:e4:55:e7:ac:1f:f2:01:7f:ca:ce:43:da:4f:
                    be:02:84:b6:af:dd:d0:08:4a:cb:6b:03:d3:b3:5e:
                    46:3e:0b:a0:4c:77:24:cb:73:a9:00:80:9a:a3:fa:
                    96:90:7d:5e:63:7b:b3:30:e1:e4:ad:86:89:a9:a4:
                    88:00:3c:fc:59:0b:13:57:8b:e7:6e:f1:31:0d:81:
                    14:c7:ec:8a:92:79:c7:bb:7e:06:e6:ad:af:42:17:
                    8f:ee:f2:04:e2:66:b4:d0:dd:a6:da:ed:78:9d:72:
                    1e:11:f1:c3:99:64:c1:78:5c:71:b7:30:5e:26:7b:
                    d6:7c:b5:f4:94:16:f2:ba:18:a2:9c:7b:20:67:cc:
                    7d:8e:f6:fa:21:e1:36:07:d7:08:5e:75:c7:d2:1e:
                    49:81:cb:2a:be:da:55:51:1a:44:33:b3:24:6d:54:
                    6c:96:c1:49:0d:d6:e8:72:8e:1f:ba:ec:94:33:b1:
                    9b:2a:6e:23:ec:6b:97:92:5a:39:55:55:37:24:9d:
                    bc:a7:c2:c8:df:72:50:ee:3f:01:48:13:56:f4:55:
                    fa:c3:58:74:af:ba:0e:bd:a6:d5:ee:df:1b:cc:00:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D4:C6:62:AC:5D:74:64:00:BE:FB:2B:91:71:6E:62:BD:A4:9F:BD
            X509v3 Authority Key Identifier:
                keyid:14:E4:6D:A9:99:E6:8B:FE:84:E5:BE:A2:8A:43:63:23:51:32:F2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/14E46DA999E68BFE84E5BEA28A4363235132F2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E46DA999E68BFE84E5BEA28A4363235132F2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/323830343a313966343a613030303a3a2f33362d3336203d3e203631383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19f4:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:70:27:f8:5f:1a:21:96:7b:79:45:76:72:33:30:2c:e8:45:
         b3:53:59:7a:40:0d:b4:d2:96:17:03:5a:10:69:57:a5:9f:e2:
         99:eb:29:51:dc:17:bc:fe:7b:91:48:16:f6:dc:56:3f:f3:32:
         48:92:66:2c:c7:2b:d4:85:03:35:26:45:8d:68:3b:7a:09:94:
         eb:1f:51:23:28:78:53:33:ff:96:09:f2:18:ce:db:9a:9d:b8:
         3a:81:f4:25:3f:7d:f6:10:b0:e6:a2:58:8f:17:22:0a:6d:da:
         aa:28:b5:2b:f4:30:e4:04:04:a3:3e:c3:69:e7:34:eb:0b:d7:
         8a:e8:69:aa:cd:db:a8:ce:7d:3d:49:36:fc:d8:f4:7e:f3:3d:
         28:cc:89:43:9f:5c:e3:cb:24:99:1a:4c:99:92:c0:7c:62:30:
         d1:1f:c0:a7:f1:ef:54:cb:23:f2:51:0b:b4:f1:58:5a:63:c4:
         b3:16:55:73:0b:d4:3b:39:7e:89:ef:cd:99:2d:da:83:5a:0c:
         13:fc:90:da:4b:d8:f2:53:b8:23:75:a1:c4:1f:27:4f:6b:ac:
         be:01:e5:1d:08:0c:e5:18:a1:24:de:f2:47:1f:8f:14:0e:dc:
         9c:eb:fd:88:fa:93:3b:60:fa:c1:8c:4c:db:8c:5c:e0:22:f7:
         c4:5d:d4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:44:12 2026 by rpki-client