Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/323830343a323761383a3a2f33322d3332203d3e20323633393135.roa
File:                     323830343a323761383a3a2f33322d3332203d3e20323633393135.roa (raw, json)
Hash identifier:          fLJbaQH1XHyhNDg4NPtxNzCUiFlMAyrZdLaAFxwddGQ=
Subject key identifier:   AE:ED:67:4B:D5:BC:72:E7:78:4F:39:D0:3F:7F:11:32:E2:C6:FD:59
Certificate issuer:       /CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
Certificate serial:       0FC368F1716917D8CF212FE8BE9C48937ED1B3AC
Authority key identifier: D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/323830343a323761383a3a2f33322d3332203d3e20323633393135.roa
Signing time:             Mon 20 Jul 2026 14:56:29 +0000
ROA not before:           Mon 20 Jul 2026 14:51:29 +0000
ROA not after:            Mon 19 Jul 2027 14:56:29 +0000
asID:                     263915
IP address blocks:        2804:27a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c3:68:f1:71:69:17:d8:cf:21:2f:e8:be:9c:48:93:7e:d1:b3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
        Validity
            Not Before: Jul 20 14:51:29 2026 GMT
            Not After : Jul 19 14:56:29 2027 GMT
        Subject: CN=AEED674BD5BC72E7784F39D03F7F1132E2C6FD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:dd:4e:20:09:88:1a:56:e9:98:b4:40:d3:
                    00:e3:98:68:ab:af:3a:07:fe:8e:b3:20:e7:b1:a2:
                    a7:a7:cb:56:41:b0:91:d3:b1:7e:1c:49:3f:f9:c3:
                    f8:d2:64:db:e4:e1:d4:ec:3f:0e:8a:90:0c:b1:86:
                    06:6b:ad:ff:0d:8b:78:27:26:12:1b:5d:b3:44:eb:
                    88:49:58:51:d6:da:f7:32:a9:1d:ce:de:c2:35:9c:
                    92:8c:64:ea:e4:08:bb:99:4f:dc:df:35:cf:f2:f8:
                    e6:7a:1c:4c:06:7b:21:2e:6a:3e:7a:4f:26:e6:a6:
                    2a:84:63:92:87:05:47:26:b3:09:b2:15:08:51:c8:
                    d9:01:a8:02:97:c8:2c:04:57:3f:ca:89:9a:20:d7:
                    6c:2d:2c:af:1a:47:51:1c:d5:8c:8c:e3:ee:7f:bd:
                    2e:6e:db:c3:ec:6f:5a:09:e8:b6:47:01:f9:59:38:
                    96:e1:0b:ad:8d:4d:aa:cc:eb:8e:4a:dd:50:d5:52:
                    82:a4:bb:ca:55:9c:a0:72:87:b5:7d:90:e1:3a:30:
                    7c:c7:41:00:df:be:47:97:1b:f5:8c:ae:3e:06:4e:
                    dc:58:da:cb:d3:09:78:b8:d5:4f:21:f7:8b:d9:d2:
                    02:86:ed:6f:8e:b9:50:fb:59:cb:64:dc:d4:e5:be:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:ED:67:4B:D5:BC:72:E7:78:4F:39:D0:3F:7F:11:32:E2:C6:FD:59
            X509v3 Authority Key Identifier:
                keyid:D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/323830343a323761383a3a2f33322d3332203d3e20323633393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:a2:6a:38:bb:41:28:d6:49:ca:25:a8:85:e7:69:3f:de:98:
         19:4a:7c:6f:6a:6d:65:56:9b:7c:16:e4:f9:f3:92:68:d5:97:
         70:d4:f6:67:35:b8:eb:07:5e:a8:f2:5f:76:4b:3c:9a:25:c1:
         d5:8c:b0:64:5f:ff:37:93:6c:7c:90:2f:01:83:b9:ba:23:3a:
         89:5f:85:6d:1c:f2:51:bb:b1:84:58:91:6c:ff:2c:86:3b:d6:
         5c:a5:02:1f:6b:9f:47:38:e3:40:1c:d4:f2:af:0a:fa:31:0b:
         b8:4a:13:15:fd:d1:fb:63:a0:22:94:26:b3:f0:53:f2:9e:c6:
         62:1e:16:79:a2:e3:78:ed:9b:26:e4:63:1e:d7:70:e7:6f:6e:
         31:00:7b:40:bd:46:90:a1:5a:86:3a:e8:bb:40:72:d5:46:ba:
         c0:54:61:2c:9c:45:80:32:55:0d:c5:0b:3b:7a:ad:4f:6d:eb:
         8a:f4:f5:af:f2:91:c1:b7:f7:ba:ea:f2:ed:04:5e:b8:7f:55:
         93:f7:22:41:e3:0e:74:ac:6a:e2:ff:de:0c:ac:6a:86:20:f0:
         3b:62:a7:da:8e:fd:76:a0:cd:10:9e:63:c4:8e:36:27:b9:8d:
         16:5b:31:d8:b1:4d:51:14:82:23:70:dc:8e:fb:54:2e:de:97:
         2b:aa:5c:22
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD8No8XFpF9jPIS/ovpxIk37Rs6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNDQjA0RUUwQkU5RkYzRTQ1RDIxMDIwRTM1QTIwQzAy
Q0RGOTY0MzAeFw0yNjA3MjAxNDUxMjlaFw0yNzA3MTkxNDU2MjlaMDMxMTAvBgNV
BAMTKEFFRUQ2NzRCRDVCQzcyRTc3ODRGMzlEMDNGN0YxMTMyRTJDNkZENTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvt1OIAmIGlbpmLRA0wDjmGir
rzoH/o6zIOexoqeny1ZBsJHTsX4cST/5w/jSZNvk4dTsPw6KkAyxhgZrrf8Ni3gn
JhIbXbNE64hJWFHW2vcyqR3O3sI1nJKMZOrkCLuZT9zfNc/y+OZ6HEwGeyEuaj56
TybmpiqEY5KHBUcmswmyFQhRyNkBqAKXyCwEVz/KiZog12wtLK8aR1Ec1YyM4+5/
vS5u28Psb1oJ6LZHAflZOJbhC62NTarM645K3VDVUoKku8pVnKByh7V9kOE6MHzH
QQDfvkeXG/WMrj4GTtxY2svTCXi41U8h94vZ0gKG7W+OuVD7Wctk3NTlvjGRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUru1nS9W8cud4TznQP38RMuLG/VkwHwYDVR0j
BBgwFoAU08sE7gvp/z5F0hAg41ogwCzflkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhF
R3gvMi9EM0NCMDRFRTBCRTlGRjNFNDVEMjEwMjBFMzVBMjBDMDJDREY5NjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQ0IwNEVFMEJFOUZGM0U0
NUQyMTAyMEUzNUEyMEMwMkNERjk2NDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNidGl3RlpjYW14OHpyQW15cVVlcGg2eGREVlp1SFhzeGU2OHVRTGZ4RUd4LzIv
MzIzODMwMzQzYTMyMzc2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnqDANBgkqhkiG9w0BAQsFAAOCAQEAMqJqOLtB
KNZJyiWohedpP96YGUp8b2ptZVabfBbk+fOSaNWXcNT2ZzW46wdeqPJfdks8miXB
1YywZF//N5NsfJAvAYO5uiM6iV+FbRzyUbuxhFiRbP8shjvWXKUCH2ufRzjjQBzU
8q8K+jELuEoTFf3R+2OgIpQms/BT8p7GYh4WeaLjeO2bJuRjHtdw529uMQB7QL1G
kKFahjrou0By1Ua6wFRhLJxFgDJVDcULO3qtT23rivT1r/KRwbf3uury7QReuH9V
k/ciQeMOdKxq4v/eDKxqhiDwO2Kn2o79dqDNEJ5jxI42J7mNFlsx2LFNURSCI3Dc
jvtULt6XK6pcIg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:37 2026 by rpki-client