Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/323830343a373333383a633030303a3a2f33342d3334203d3e20323632383432.roa
File:                     323830343a373333383a633030303a3a2f33342d3334203d3e20323632383432.roa (raw, json)
Hash identifier:          LdGYCJpB9w9kYgNg9mmnzhnGTxCNr/8timfKx7rdVNg=
Subject key identifier:   AB:5F:0F:C9:B0:C5:53:84:A5:AB:54:02:08:91:5D:15:53:6A:D7:47
Certificate issuer:       /CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
Certificate serial:       3EAA00DC18F9F6507427111460E24EDF69158461
Authority key identifier: 86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/323830343a373333383a633030303a3a2f33342d3334203d3e20323632383432.roa
Signing time:             Fri 10 Jul 2026 14:23:22 +0000
ROA not before:           Fri 10 Jul 2026 14:18:22 +0000
ROA not after:            Fri 09 Jul 2027 14:23:22 +0000
asID:                     262842
IP address blocks:        2804:7338:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl
                          rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:aa:00:dc:18:f9:f6:50:74:27:11:14:60:e2:4e:df:69:15:84:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
        Validity
            Not Before: Jul 10 14:18:22 2026 GMT
            Not After : Jul  9 14:23:22 2027 GMT
        Subject: CN=AB5F0FC9B0C55384A5AB540208915D15536AD747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:df:7f:0e:70:87:7b:a9:ef:85:2c:a5:b5:
                    2c:a4:3d:55:3d:4a:f3:ec:ca:31:4e:b6:a6:da:ba:
                    f0:7e:31:b2:26:77:39:53:ca:ba:1e:7d:03:8f:28:
                    03:da:cf:93:45:27:12:c0:bf:15:d4:17:2f:d1:1a:
                    ec:52:3d:87:62:00:cf:7b:40:4b:d8:f9:66:84:94:
                    05:da:ee:b8:2c:ab:10:a7:93:ef:44:8b:03:9c:6c:
                    46:9a:f5:ed:f3:39:f7:fc:42:44:cf:68:51:28:a1:
                    07:5d:05:f5:13:cf:14:d8:49:2a:6a:38:3c:88:44:
                    02:fd:3b:8d:c9:8e:d3:26:57:59:51:25:2e:1f:b3:
                    ed:cd:03:52:3b:35:fc:22:79:63:db:3f:7e:da:b8:
                    6c:05:2a:3f:5e:8e:46:b7:81:02:e1:9e:d7:35:80:
                    14:70:3d:9c:b8:a1:c1:ac:a4:7c:2e:2c:2f:bd:e6:
                    0f:8f:38:d5:cb:cc:a2:eb:02:73:95:43:70:1a:37:
                    f2:40:3b:92:8a:16:22:b1:99:c7:f0:54:1e:22:41:
                    ec:35:32:ca:a2:e3:c1:5f:be:a2:1a:e7:43:5c:b4:
                    60:67:1d:b4:ee:dd:96:3f:4d:17:33:e1:cd:5d:92:
                    77:4d:8e:6a:10:26:fb:41:2f:8a:8a:4e:f8:39:b6:
                    48:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5F:0F:C9:B0:C5:53:84:A5:AB:54:02:08:91:5D:15:53:6A:D7:47
            X509v3 Authority Key Identifier:
                keyid:86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/323830343a373333383a633030303a3a2f33342d3334203d3e20323632383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7338:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:72:f0:73:0c:82:b9:d9:05:3d:3c:cb:7e:28:b6:18:d7:c7:
         be:31:7a:1e:e9:81:6c:49:11:10:45:5e:d4:cd:39:6f:c0:14:
         d2:28:27:8e:04:f7:d7:fa:b3:4e:f0:6c:24:87:b3:92:c6:d4:
         10:43:8e:a3:81:21:5e:75:d2:a3:2e:36:cf:e0:17:b5:43:2e:
         bc:e3:11:db:e8:6a:07:22:b7:12:43:fc:6f:fd:65:80:9b:d4:
         3b:d8:ad:5c:7c:5e:28:09:e2:f0:28:2d:4a:75:2a:d3:e6:d4:
         0c:69:75:c0:62:d5:25:ae:38:ed:23:a3:08:c7:c7:bf:5b:0c:
         08:25:7f:f6:78:17:79:6a:98:e4:cf:84:b8:ec:c9:18:41:b7:
         60:8a:4a:95:31:2a:a2:9d:56:86:7b:9c:0a:85:00:6e:6b:5e:
         98:2b:02:2f:c2:be:08:eb:6e:b6:ce:18:0a:71:11:2c:d7:db:
         d2:77:34:50:b4:7f:78:51:96:c2:f5:59:36:7d:86:b5:b1:7f:
         e6:e9:60:96:5b:49:c3:29:f6:ae:53:b6:33:4d:02:9f:20:fd:
         08:5d:7d:2f:21:db:ae:48:d4:a5:64:eb:09:9a:12:f9:6d:05:
         a3:47:fd:be:b3:4a:30:70:66:f5:c8:60:92:10:10:f1:33:61:
         11:30:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:23 2026 by rpki-client