Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/323830343a313831303a3a2f33322d313238203d3e20323633323632.roa
File:                     323830343a313831303a3a2f33322d313238203d3e20323633323632.roa (raw, json)
Hash identifier:          XkmGAjKlXmttMT+q0la2v7E63D04JJ5p5kKdifnIM+U=
Subject key identifier:   EF:DD:75:EB:C5:DF:9D:1B:D9:34:A8:82:DF:6A:77:41:CB:4A:43:1E
Certificate issuer:       /CN=9ACE64BD37C65E6BD3F4B3CBB85AE3E1A1EB7388
Certificate serial:       335BACCECEACC9C206C57C7317483E9C0B064B40
Authority key identifier: 9A:CE:64:BD:37:C6:5E:6B:D3:F4:B3:CB:B8:5A:E3:E1:A1:EB:73:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE64BD37C65E6BD3F4B3CBB85AE3E1A1EB7388.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/323830343a313831303a3a2f33322d313238203d3e20323633323632.roa
Signing time:             Wed 15 Jul 2026 17:28:41 +0000
ROA not before:           Wed 15 Jul 2026 17:23:41 +0000
ROA not after:            Wed 14 Jul 2027 17:28:41 +0000
asID:                     263262
IP address blocks:        2804:1810::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/9ACE64BD37C65E6BD3F4B3CBB85AE3E1A1EB7388.crl
                          rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/9ACE64BD37C65E6BD3F4B3CBB85AE3E1A1EB7388.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE64BD37C65E6BD3F4B3CBB85AE3E1A1EB7388.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5b:ac:ce:ce:ac:c9:c2:06:c5:7c:73:17:48:3e:9c:0b:06:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACE64BD37C65E6BD3F4B3CBB85AE3E1A1EB7388
        Validity
            Not Before: Jul 15 17:23:41 2026 GMT
            Not After : Jul 14 17:28:41 2027 GMT
        Subject: CN=EFDD75EBC5DF9D1BD934A882DF6A7741CB4A431E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:d4:ab:82:8a:f7:b1:f1:a6:38:e2:2b:2b:
                    3f:63:ab:6e:5b:bb:2f:44:aa:e2:78:8c:3b:a2:56:
                    2f:6a:a9:6b:05:76:4b:df:d8:e9:c5:81:8b:c7:79:
                    36:da:e0:3b:56:7b:c4:df:0a:94:6a:4d:e5:7c:bf:
                    9c:21:fe:ab:f4:39:10:f9:c7:6d:fb:93:a0:b3:31:
                    62:b8:de:9b:5e:a5:61:f3:01:23:72:c4:41:dd:3c:
                    26:b6:73:72:77:8c:d3:b2:b2:8a:f6:54:1c:e9:3e:
                    6f:9c:60:ce:b0:e6:e1:8d:1d:e6:ef:7b:6f:01:d6:
                    de:0a:aa:27:c9:48:73:cb:a8:0c:f8:8f:fd:18:f1:
                    d8:db:a2:cc:da:b3:79:53:a1:3e:d9:7d:e5:3d:a3:
                    4b:51:ba:ea:26:36:01:60:a1:02:9f:ba:1a:26:f7:
                    d0:d7:05:21:8e:03:87:83:b0:38:e4:1b:9e:4c:6f:
                    83:ff:fc:e2:61:18:5a:27:64:4a:c0:a0:8c:09:64:
                    2f:35:a7:3a:f3:3d:36:50:4b:47:07:56:5c:52:2a:
                    c9:9b:0b:a9:57:ee:d1:2d:b0:2a:b3:6e:ab:3e:64:
                    e9:da:d6:d2:0e:49:f1:7e:1e:77:4e:31:c8:f0:2c:
                    af:36:ba:19:81:8e:0d:21:12:b0:15:6e:46:02:8d:
                    7d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DD:75:EB:C5:DF:9D:1B:D9:34:A8:82:DF:6A:77:41:CB:4A:43:1E
            X509v3 Authority Key Identifier:
                keyid:9A:CE:64:BD:37:C6:5E:6B:D3:F4:B3:CB:B8:5A:E3:E1:A1:EB:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/9ACE64BD37C65E6BD3F4B3CBB85AE3E1A1EB7388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE64BD37C65E6BD3F4B3CBB85AE3E1A1EB7388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pDWgzaxBVProiYHYZhTHPQ2ucvY4rxDrZcyyU3a5qz4/0/323830343a313831303a3a2f33322d313238203d3e20323633323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1810::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:6d:5e:a2:af:cc:2d:7a:f0:06:d5:44:88:99:2a:1d:28:29:
         6e:df:d7:00:5a:1f:08:81:39:c9:6f:61:a0:b4:92:99:64:8c:
         3c:f2:82:1b:22:02:2c:4c:40:5c:15:03:53:87:93:cf:31:07:
         5d:50:81:3f:ae:32:2c:1a:e3:05:07:9d:eb:c9:a8:48:fc:3e:
         f0:6b:53:42:06:38:d4:82:39:b9:86:5b:3c:20:4d:af:a7:33:
         2a:2c:67:59:13:72:a4:2c:0e:db:af:a5:15:2a:79:43:24:7b:
         48:a3:44:e6:b4:ec:9d:27:84:e5:97:50:3b:97:dd:fe:69:33:
         d3:b8:0b:49:1a:9c:15:7b:4b:c3:bf:3b:95:10:5f:84:ed:e0:
         dc:e4:54:c5:72:de:7e:b1:cd:69:a6:3f:10:ed:64:1e:f7:cd:
         07:c4:37:72:fe:4e:c5:21:fb:ce:a3:85:e4:26:da:a6:89:f2:
         0f:4d:8f:a0:1e:3d:52:02:d6:70:d4:3c:3f:af:6c:c5:59:1f:
         a1:a9:b5:63:55:58:5f:fd:b5:d8:99:9a:be:ac:67:61:ab:24:
         9d:e2:69:b7:fa:de:7f:66:48:fc:04:a3:42:62:a9:12:41:f9:
         af:7e:89:61:f1:60:40:c1:27:3c:26:4c:e2:f4:93:f0:f8:81:
         5d:40:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:28:54 2026 by rpki-client