Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a363030303a3a2f33362d3336203d3e20323633353137.roa
File:                     323830343a313332303a363030303a3a2f33362d3336203d3e20323633353137.roa (raw, json)
Hash identifier:          bXGjWv3Lj12IuKuWZqYQ7QvewUo9jLpYRWQqjMywsQs=
Subject key identifier:   FC:C3:1C:EC:DB:E8:6B:3F:A5:89:E1:E7:5B:61:3B:10:39:31:E6:40
Certificate issuer:       /CN=25C491D82730A2AF6083391B8773D984D8728328
Certificate serial:       04C9ECE85F452BB6A4AC4BC498BA80AEE862FF30
Authority key identifier: 25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a363030303a3a2f33362d3336203d3e20323633353137.roa
Signing time:             Tue 14 Jul 2026 13:50:36 +0000
ROA not before:           Tue 14 Jul 2026 13:45:36 +0000
ROA not after:            Tue 13 Jul 2027 13:50:36 +0000
asID:                     263517
IP address blocks:        2804:1320:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.crl
                          rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c9:ec:e8:5f:45:2b:b6:a4:ac:4b:c4:98:ba:80:ae:e8:62:ff:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C491D82730A2AF6083391B8773D984D8728328
        Validity
            Not Before: Jul 14 13:45:36 2026 GMT
            Not After : Jul 13 13:50:36 2027 GMT
        Subject: CN=FCC31CECDBE86B3FA589E1E75B613B103931E640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:8c:83:24:2b:fb:5b:cc:18:86:aa:47:ab:
                    29:23:f0:24:e1:15:0f:57:f3:da:1e:6f:a5:eb:29:
                    2f:6f:b5:68:76:de:c6:1b:5e:07:a3:0f:bd:47:d5:
                    3a:50:06:79:14:2c:7e:49:af:a9:6c:a8:fc:23:24:
                    8a:0b:6d:4f:cb:57:75:88:ba:f9:86:f1:58:24:6c:
                    13:1b:29:0d:f0:18:3f:02:95:72:19:5a:1a:97:09:
                    15:fc:22:a8:f9:7d:14:6b:6d:63:f0:39:29:ad:4e:
                    36:a2:ee:59:3f:08:ac:03:16:14:ce:b4:04:c0:db:
                    5f:b0:d4:f6:f5:0b:80:ef:a6:ae:53:be:2a:21:6f:
                    ae:56:a3:18:39:9e:30:03:61:4a:02:f5:e0:2d:7c:
                    b7:c1:03:1c:fd:11:73:a9:9b:d6:e0:44:e3:78:d0:
                    e6:5c:87:24:64:a9:05:d8:f6:01:82:fb:0a:72:0c:
                    e8:cf:77:50:06:df:1c:83:f3:76:cf:33:a0:eb:c2:
                    ee:e0:91:11:16:7e:56:af:4f:84:a8:f7:0b:11:86:
                    45:aa:35:be:cf:7a:02:02:d4:aa:33:9a:78:d7:53:
                    30:75:bd:23:f4:81:be:55:37:46:43:76:66:19:a5:
                    b3:2e:17:ec:26:75:ef:09:12:8e:5c:40:52:4f:68:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:1C:EC:DB:E8:6B:3F:A5:89:E1:E7:5B:61:3B:10:39:31:E6:40
            X509v3 Authority Key Identifier:
                keyid:25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a363030303a3a2f33362d3336203d3e20323633353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1320:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:bd:4a:42:9b:96:b0:5d:63:4e:7a:59:e8:ca:0a:c0:c9:12:
         da:70:a2:d5:86:f3:60:e9:eb:c2:27:64:eb:96:b3:b2:24:58:
         54:91:8b:b0:9a:62:e0:63:49:af:0a:d1:5d:5c:13:f7:76:d5:
         31:a0:c0:77:28:01:76:f1:57:a7:d7:ee:87:53:77:79:74:92:
         da:b7:29:29:03:10:c8:0e:ee:88:69:47:ee:59:29:39:b9:9f:
         ec:34:53:f1:3f:94:d4:9d:bc:87:6f:18:70:94:ff:05:62:8c:
         f4:d8:89:6c:28:21:23:8a:14:9f:d2:b8:e4:af:38:7f:38:57:
         25:84:8b:bd:8b:46:c4:38:e9:24:24:9b:86:df:fc:dd:6a:0b:
         20:86:19:7c:10:b5:09:2f:bd:c9:a4:2d:44:00:e4:78:52:0d:
         e1:25:c4:f7:28:53:59:ec:9a:3d:0d:7c:64:d3:3e:fb:6f:f1:
         6f:dd:94:c7:8c:b1:06:e9:b8:05:2b:4e:71:50:e2:b4:64:06:
         24:44:81:71:35:d0:12:06:b3:fb:a6:aa:94:55:bd:b4:e6:cf:
         3d:dc:32:17:1d:21:43:2b:40:b3:4c:28:d9:1e:13:1b:40:b4:
         e8:ee:90:cc:5b:c2:af:48:d0:39:ce:ff:a2:c3:d2:f0:79:09:
         cd:34:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:12 2026 by rpki-client