Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/323830343a393437343a3a2f33322d3334203d3e20323734383433.roa
File:                     323830343a393437343a3a2f33322d3334203d3e20323734383433.roa (raw, json)
Hash identifier:          sxRM1jd9ohN+MuUy3wSBLf/gihgEURvw+IHU6/Qmui4=
Subject key identifier:   B3:89:2C:00:6B:EA:51:22:33:89:34:EA:C7:10:D2:31:BE:2E:18:FA
Certificate issuer:       /CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
Certificate serial:       12757214D29190BAF37D2E8CCE8E123421498A79
Authority key identifier: B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/323830343a393437343a3a2f33322d3334203d3e20323734383433.roa
Signing time:             Thu 16 Jul 2026 15:16:03 +0000
ROA not before:           Thu 16 Jul 2026 15:11:03 +0000
ROA not after:            Thu 15 Jul 2027 15:16:03 +0000
asID:                     274843
IP address blocks:        2804:9474::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl
                          rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:75:72:14:d2:91:90:ba:f3:7d:2e:8c:ce:8e:12:34:21:49:8a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
        Validity
            Not Before: Jul 16 15:11:03 2026 GMT
            Not After : Jul 15 15:16:03 2027 GMT
        Subject: CN=B3892C006BEA5122338934EAC710D231BE2E18FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b9:8e:6b:31:b5:ff:0e:f5:6b:3d:56:79:2e:
                    b0:d9:ed:cd:97:b5:aa:29:77:4e:c1:50:7e:e4:78:
                    86:bf:2c:75:bf:2f:b7:40:6e:d9:71:6d:59:b9:a6:
                    e3:66:ac:90:05:bf:38:cd:05:e7:14:f8:2a:6c:ff:
                    6e:0d:07:f0:b8:b2:75:cd:66:b2:9f:36:92:33:23:
                    2a:58:dd:4b:64:d8:71:6f:83:df:ff:b9:18:66:09:
                    04:29:55:4f:bd:e4:b2:c8:aa:0b:3e:5e:5d:61:5c:
                    81:7e:58:cc:1b:62:f2:af:f4:c9:73:33:74:2b:a8:
                    54:9c:5f:35:2d:e3:83:70:22:96:a8:e0:02:11:35:
                    27:b8:88:58:73:00:05:cc:f7:2f:7b:10:12:f6:54:
                    97:53:66:ca:d8:45:0b:64:7e:a4:f0:7d:2d:21:40:
                    0d:33:02:6a:34:cd:2c:dd:9c:4a:a0:07:e6:dc:e2:
                    81:1c:f0:7a:0e:40:76:bf:2f:40:a7:b3:88:ec:a3:
                    9f:2f:f9:b6:bb:42:a0:f9:ef:65:47:87:0e:e4:97:
                    95:3a:68:bb:1c:c9:f1:bc:d8:3b:69:57:06:ba:b2:
                    a9:f1:a6:eb:7f:83:e7:e6:84:46:a9:de:2f:ae:3b:
                    f1:86:91:47:4c:33:cc:57:b3:c0:36:af:c1:d9:dc:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:89:2C:00:6B:EA:51:22:33:89:34:EA:C7:10:D2:31:BE:2E:18:FA
            X509v3 Authority Key Identifier:
                keyid:B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/323830343a393437343a3a2f33322d3334203d3e20323734383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9474::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:da:ce:70:03:0b:47:17:80:00:a8:8f:0a:7c:b3:37:b9:d0:
         ad:28:5e:64:85:02:10:75:df:18:00:b2:90:6a:e4:18:b8:51:
         77:35:84:0c:47:61:6a:c1:e6:17:13:11:41:63:e3:e0:be:e3:
         72:63:16:2d:79:80:ba:08:cb:14:31:f6:12:b1:c7:ef:8f:02:
         e3:c8:4d:03:a0:09:f3:2e:8b:26:b4:80:3c:2a:19:06:ad:c9:
         1a:93:e0:eb:22:57:f2:79:c4:00:45:af:d3:87:d6:12:6c:eb:
         4e:7b:e9:8d:02:87:9c:ab:34:08:f6:df:28:95:bd:3b:b1:17:
         ee:2f:36:42:6d:5d:72:7c:6b:7e:0e:65:a1:77:34:34:ba:54:
         14:49:ca:c4:d0:65:46:e2:dd:56:af:89:31:92:99:5f:a1:3a:
         ae:f7:e1:6b:93:31:09:9e:0c:db:ee:97:70:c9:11:35:d3:2a:
         b2:2c:4e:bf:b0:4e:4b:4b:5e:a7:0e:b6:31:b2:66:ef:8e:8b:
         3f:fb:e1:b9:f2:21:69:4e:02:db:e4:e1:eb:5a:61:81:f2:3c:
         09:06:dc:ab:45:da:47:48:8d:65:1a:64:86:06:b6:e3:78:d1:
         40:5f:88:2e:c2:f4:0b:82:75:e9:28:a1:19:f3:a7:29:e9:05:
         9d:90:66:1a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEnVyFNKRkLrzfS6Mzo4SNCFJinkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlDQkFCNkUyQjk4RDdDRjNGM0FFRTlFQjhCRUVERTBF
RTk5OTM0MTAeFw0yNjA3MTYxNTExMDNaFw0yNzA3MTUxNTE2MDNaMDMxMTAvBgNV
BAMTKEIzODkyQzAwNkJFQTUxMjIzMzg5MzRFQUM3MTBEMjMxQkUyRTE4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfuY5rMbX/DvVrPVZ5LrDZ7c2X
taopd07BUH7keIa/LHW/L7dAbtlxbVm5puNmrJAFvzjNBecU+Cps/24NB/C4snXN
ZrKfNpIzIypY3Utk2HFvg9//uRhmCQQpVU+95LLIqgs+Xl1hXIF+WMwbYvKv9Mlz
M3QrqFScXzUt44NwIpao4AIRNSe4iFhzAAXM9y97EBL2VJdTZsrYRQtkfqTwfS0h
QA0zAmo0zSzdnEqgB+bc4oEc8HoOQHa/L0Cns4jso58v+ba7QqD572VHhw7kl5U6
aLscyfG82DtpVwa6sqnxput/g+fmhEap3i+uO/GGkUdMM8xXs8A2r8HZ3Lp9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUs4ksAGvqUSIziTTqxxDSMb4uGPowHwYDVR0j
BBgwFoAUucurbiuY188/Ou6euL7t4O6Zk0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhXenM2aXN6bUpxaFBUZkhwakFDc2o0dzU3cUR4ZE1VU1ZpdUprTGZG
N1UvMC9COUNCQUI2RTJCOThEN0NGM0YzQUVFOUVCOEJFRURFMEVFOTk5MzQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5Q0JBQjZFMkI5OEQ3Q0Yz
RjNBRUU5RUI4QkVFREUwRUU5OTkzNDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4V3pzNmlzem1KcWhQVGZIcGpBQ3NqNHc1N3FEeGRNVVNWaXVKa0xmRjdVLzAv
MzIzODMwMzQzYTM5MzQzNzM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzM0
MzgzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASUdDANBgkqhkiG9w0BAQsFAAOCAQEAHNrOcAML
RxeAAKiPCnyzN7nQrSheZIUCEHXfGACykGrkGLhRdzWEDEdhasHmFxMRQWPj4L7j
cmMWLXmAugjLFDH2ErHH748C48hNA6AJ8y6LJrSAPCoZBq3JGpPg6yJX8nnEAEWv
04fWEmzrTnvpjQKHnKs0CPbfKJW9O7EX7i82Qm1dcnxrfg5loXc0NLpUFEnKxNBl
RuLdVq+JMZKZX6E6rvfha5MxCZ4M2+6XcMkRNdMqsixOv7BOS0tepw62MbJm746L
P/vhufIhaU4C2+Th61phgfI8CQbcq0XaR0iNZRpkhga243jRQF+ILsL0C4J16Sih
GfOnKekFnZBmGg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:33:01 2026 by rpki-client