Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/323830343a313132343a3a2f33322d3438203d3e203533313432.roa
File:                     323830343a313132343a3a2f33322d3438203d3e203533313432.roa (raw, json)
Hash identifier:          +O8SacHA0v0ONbXIRYtm1qIWN9+423lYJ00yc6ryw+c=
Subject key identifier:   9A:36:E4:0A:F8:D5:3B:A3:75:42:4F:55:D1:7A:94:44:18:A8:05:5A
Certificate issuer:       /CN=CE8177047B96FEA34112F26B4BA7FF591668670A
Certificate serial:       046D32DDE1C80184C64CE963C2B053D1494D8771
Authority key identifier: CE:81:77:04:7B:96:FE:A3:41:12:F2:6B:4B:A7:FF:59:16:68:67:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8177047B96FEA34112F26B4BA7FF591668670A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/323830343a313132343a3a2f33322d3438203d3e203533313432.roa
Signing time:             Thu 09 Jul 2026 20:27:01 +0000
ROA not before:           Thu 09 Jul 2026 20:22:01 +0000
ROA not after:            Thu 08 Jul 2027 20:27:01 +0000
asID:                     53142
IP address blocks:        2804:1124::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/CE8177047B96FEA34112F26B4BA7FF591668670A.crl
                          rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/CE8177047B96FEA34112F26B4BA7FF591668670A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8177047B96FEA34112F26B4BA7FF591668670A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6d:32:dd:e1:c8:01:84:c6:4c:e9:63:c2:b0:53:d1:49:4d:87:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE8177047B96FEA34112F26B4BA7FF591668670A
        Validity
            Not Before: Jul  9 20:22:01 2026 GMT
            Not After : Jul  8 20:27:01 2027 GMT
        Subject: CN=9A36E40AF8D53BA375424F55D17A944418A8055A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:39:ac:06:18:56:2d:34:28:18:23:4d:8a:63:
                    c3:00:d8:55:f4:ee:ef:d4:e5:f0:ce:19:ad:37:f0:
                    aa:bd:c9:41:2f:23:b8:a2:00:ee:f2:66:0e:11:72:
                    bb:08:fb:02:0e:ac:4a:36:f0:d4:24:9c:e2:1a:76:
                    1d:71:8f:6f:53:d6:5d:0d:bd:88:d1:94:21:05:b6:
                    c4:38:ed:2c:19:92:be:3c:16:4c:ab:38:57:d3:77:
                    b5:a5:94:54:ed:05:b5:a9:45:68:de:33:39:99:ae:
                    62:f2:19:54:e4:eb:2f:6b:86:84:ea:fc:14:6b:e6:
                    f0:91:62:56:1b:4f:72:9c:0f:1d:79:11:b3:6e:1b:
                    8b:a4:9e:d6:6c:8c:ec:4e:59:30:8c:4b:ec:ad:29:
                    d3:ab:69:51:15:ac:b0:9a:76:46:b9:d2:d1:fb:5a:
                    07:43:6a:6d:a1:a1:87:45:2f:06:bf:05:e3:25:29:
                    7d:15:44:59:ae:96:2a:b6:ba:d4:e5:a2:df:15:66:
                    66:75:18:5e:e7:fe:5a:fa:53:69:9a:53:0d:d7:3d:
                    0e:f7:c0:b9:b9:a5:c5:6b:ac:51:aa:04:f6:74:c9:
                    68:17:5f:0b:09:36:c0:7a:07:5a:b3:75:9c:ea:7d:
                    3a:6d:b7:4a:ea:6f:01:c3:16:df:60:79:ca:cf:5d:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:E4:0A:F8:D5:3B:A3:75:42:4F:55:D1:7A:94:44:18:A8:05:5A
            X509v3 Authority Key Identifier:
                keyid:CE:81:77:04:7B:96:FE:A3:41:12:F2:6B:4B:A7:FF:59:16:68:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/CE8177047B96FEA34112F26B4BA7FF591668670A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8177047B96FEA34112F26B4BA7FF591668670A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/323830343a313132343a3a2f33322d3438203d3e203533313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1124::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:2d:5f:5c:3a:10:c0:ca:f3:6f:59:37:cb:f6:0c:cf:84:
         39:22:90:9e:e5:0f:93:6e:06:e7:2d:48:9a:1b:5d:38:6a:cb:
         90:1e:aa:b1:5b:da:d8:e4:18:78:2f:4c:14:59:c6:18:4f:4b:
         2c:d4:be:51:f6:b4:ab:58:59:df:14:0d:6d:d6:fc:5e:0b:e7:
         5f:79:36:7e:6e:46:ca:6e:ad:55:26:85:8a:e4:5e:d5:c3:46:
         62:fd:7f:7a:06:44:bf:80:35:a6:f9:c2:09:5b:ae:9a:c9:03:
         b6:ee:1f:09:3f:e2:fc:82:1c:aa:d7:4d:51:4b:d0:97:c6:4d:
         7f:3f:55:db:cc:01:59:7b:fb:24:b2:ee:ae:78:43:35:e8:83:
         3f:a9:c5:2e:2b:a2:56:18:2e:5d:35:c7:60:3a:8e:d0:3b:4a:
         13:c5:8c:00:e6:05:42:e9:27:38:be:5f:d5:a0:f7:4c:3a:8d:
         56:11:1f:11:44:93:c4:fc:65:b0:70:0b:01:0d:6d:2f:3e:bb:
         68:6b:24:b2:1e:c9:0a:e2:f4:ad:b7:4d:0c:84:26:79:c2:d0:
         18:0d:03:a5:35:64:1d:e7:60:f5:56:51:ce:d9:95:1f:5d:a4:
         b7:2b:0e:74:83:10:2b:20:25:fb:90:24:43:93:96:0a:3c:02:
         35:06:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:54 2026 by rpki-client