Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          PbaJ/3pIrBUXrrxjmIswLiWl9Emj2hjrJ7RwzEi1ZW4=
Subject key identifier:   68:43:79:A6:82:2C:35:08:DE:7A:F9:F1:1F:9D:B8:8A:52:DA:D0:12
Certificate issuer:       /CN=7815341A1229226B045BA14CE69989047BDCE9B3
Certificate serial:       1B5AC9A37884A17852FDC54F451A64FDBCBB147E
Authority key identifier: 78:15:34:1A:12:29:22:6B:04:5B:A1:4C:E6:99:89:04:7B:DC:E9:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7815341A1229226B045BA14CE69989047BDCE9B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Sat 27 Jun 2026 18:13:09 +0000
ROA not before:           Sat 27 Jun 2026 18:08:09 +0000
ROA not after:            Sat 26 Jun 2027 18:13:09 +0000
asID:                     271484
IP address blocks:        2804:7c40:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/7815341A1229226B045BA14CE69989047BDCE9B3.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/7815341A1229226B045BA14CE69989047BDCE9B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7815341A1229226B045BA14CE69989047BDCE9B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5a:c9:a3:78:84:a1:78:52:fd:c5:4f:45:1a:64:fd:bc:bb:14:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7815341A1229226B045BA14CE69989047BDCE9B3
        Validity
            Not Before: Jun 27 18:08:09 2026 GMT
            Not After : Jun 26 18:13:09 2027 GMT
        Subject: CN=684379A6822C3508DE7AF9F11F9DB88A52DAD012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:14:ad:e4:b8:aa:65:f9:85:2e:3b:29:42:
                    33:b3:27:44:fe:fe:a1:cb:2a:cc:78:7c:8c:9f:ec:
                    85:ce:32:f5:e2:39:2a:3c:db:04:f0:e7:41:7d:8c:
                    b9:4f:f0:79:f7:c8:4c:f8:f9:dd:96:5f:e7:3c:ad:
                    35:6f:18:f6:34:7a:7f:2b:0c:78:34:52:69:0f:57:
                    f3:ce:ca:de:77:91:4a:e8:6e:8b:86:5d:a8:7f:a3:
                    6d:c6:88:81:04:55:57:0c:65:85:55:a0:41:87:5e:
                    09:bf:0d:7a:b9:23:3e:fd:52:92:a0:54:49:34:98:
                    63:73:64:59:29:85:12:0a:b5:58:b9:fa:48:cb:f6:
                    e6:4b:52:cd:19:13:75:e9:d0:4b:6b:28:a2:3d:60:
                    49:08:d4:9c:8a:38:d9:ef:d8:e0:c0:f5:af:aa:9f:
                    2e:71:94:2c:49:24:4d:65:7f:0f:c3:3c:45:e5:68:
                    8b:8b:40:b7:d9:2a:2f:8b:5f:96:5b:20:58:d4:ab:
                    a8:a8:03:29:d3:19:be:f2:8f:3a:49:aa:be:27:88:
                    09:e4:4a:20:54:8f:00:bf:19:9d:6d:7a:49:e1:06:
                    bc:57:7e:94:05:99:f0:be:38:72:60:a0:60:79:40:
                    6d:72:f4:ed:15:ad:d9:76:8f:f3:0f:da:db:74:6d:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:43:79:A6:82:2C:35:08:DE:7A:F9:F1:1F:9D:B8:8A:52:DA:D0:12
            X509v3 Authority Key Identifier:
                keyid:78:15:34:1A:12:29:22:6B:04:5B:A1:4C:E6:99:89:04:7B:DC:E9:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/7815341A1229226B045BA14CE69989047BDCE9B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7815341A1229226B045BA14CE69989047BDCE9B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:30:02:a4:2f:1c:e1:fe:d4:ec:da:9e:62:84:f4:82:e9:5e:
         cb:77:34:ba:0e:21:22:cd:25:b7:f8:c0:41:63:e0:b5:30:07:
         79:79:53:63:2b:28:f7:3f:6c:35:db:44:bb:03:03:53:b7:ea:
         f1:b8:55:4b:a2:e6:4c:92:52:e8:86:8d:32:5d:58:69:3e:93:
         05:5d:d1:9d:e3:f4:26:f1:79:ed:56:96:8d:7d:3a:67:b5:23:
         71:79:f9:b3:1a:41:0e:fe:65:fe:c2:14:b9:d0:fb:3a:76:a4:
         45:33:d9:34:88:b6:41:6c:e4:54:cc:c9:21:ab:b1:26:ce:5b:
         e2:08:56:16:6f:2d:32:55:77:fa:09:12:69:51:ff:0a:ca:b1:
         99:20:2b:44:5d:c3:7c:e4:c2:f6:f2:06:83:02:64:58:cc:c1:
         9d:e5:a9:cb:e7:4d:ae:ae:88:1a:f2:c3:dc:bb:c5:4b:62:38:
         8d:08:a6:7f:db:e5:47:8d:70:96:54:21:43:92:27:ba:65:4f:
         23:02:2e:0f:87:4f:e8:df:42:32:da:31:ca:ec:40:15:7f:f2:
         ca:d8:f4:f5:2c:7a:c7:a6:cb:e5:25:5a:03:29:df:5f:04:78:
         c7:e0:3c:73:41:26:da:42:97:ff:0c:79:7f:6d:73:0b:1f:f0:
         8c:7f:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:08:45 2026 by rpki-client