Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/323830343a353261343a3a2f33322d313238203d3e20323638353331.roa
File:                     323830343a353261343a3a2f33322d313238203d3e20323638353331.roa (raw, json)
Hash identifier:          30NgUQ/8CkC4Aht0YlqHiICbAXyfAiITc/jRPTjSPOk=
Subject key identifier:   75:C0:BA:D6:D5:1B:29:A7:BC:80:1B:D2:3D:6D:19:01:A0:38:97:26
Certificate issuer:       /CN=E3FDD968BE1362BE6AB4C5E8CEF82802E604C205
Certificate serial:       75630F60520D38555F7A655BE8BF9E882E1FB40E
Authority key identifier: E3:FD:D9:68:BE:13:62:BE:6A:B4:C5:E8:CE:F8:28:02:E6:04:C2:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/323830343a353261343a3a2f33322d313238203d3e20323638353331.roa
Signing time:             Fri 10 Jul 2026 16:01:10 +0000
ROA not before:           Fri 10 Jul 2026 15:56:10 +0000
ROA not after:            Fri 09 Jul 2027 16:01:10 +0000
asID:                     268531
IP address blocks:        2804:52a4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.crl
                          rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:63:0f:60:52:0d:38:55:5f:7a:65:5b:e8:bf:9e:88:2e:1f:b4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3FDD968BE1362BE6AB4C5E8CEF82802E604C205
        Validity
            Not Before: Jul 10 15:56:10 2026 GMT
            Not After : Jul  9 16:01:10 2027 GMT
        Subject: CN=75C0BAD6D51B29A7BC801BD23D6D1901A0389726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:41:46:e9:7d:e3:01:ae:b9:9b:e4:98:2a:7e:
                    c6:28:90:bd:d9:e3:a5:cd:39:7d:b0:17:40:7b:f6:
                    85:d7:a2:5b:aa:0f:91:22:16:a9:75:65:ac:b5:61:
                    0f:91:b1:bf:e5:2c:f3:a2:ec:6a:ea:23:15:55:87:
                    e3:0f:b4:c5:89:ea:cb:76:9f:b8:fd:93:6c:e2:69:
                    ec:8a:fc:f7:41:c9:e5:07:9e:ab:96:ff:e7:7c:df:
                    34:4f:a1:79:08:92:c1:25:7f:8e:e6:bf:aa:5e:be:
                    d9:54:b0:4e:3e:4b:7c:bf:f2:52:b6:e6:d5:66:74:
                    be:82:09:8a:79:f6:71:17:d1:fd:03:30:75:45:2d:
                    32:b6:5d:51:b8:6f:db:05:8b:eb:36:bc:c9:17:64:
                    95:9c:f6:a9:cf:8b:12:dc:f7:76:bf:52:4b:d0:c0:
                    b0:27:cc:a2:bf:87:a6:b2:5a:9d:67:2d:0c:77:40:
                    7e:b2:ab:12:95:15:88:a8:db:b1:56:1b:30:bb:1d:
                    af:82:e7:b5:75:f5:2a:43:55:76:1f:54:8d:00:60:
                    e9:5c:db:3f:23:a5:38:3e:07:6c:d4:1a:6b:1a:37:
                    b8:c8:c1:1f:93:b6:9c:96:a5:0c:44:75:c4:bd:f5:
                    ff:9b:b1:c3:30:43:75:ae:08:23:5d:52:96:05:1a:
                    fb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:BA:D6:D5:1B:29:A7:BC:80:1B:D2:3D:6D:19:01:A0:38:97:26
            X509v3 Authority Key Identifier:
                keyid:E3:FD:D9:68:BE:13:62:BE:6A:B4:C5:E8:CE:F8:28:02:E6:04:C2:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FDD968BE1362BE6AB4C5E8CEF82802E604C205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/323830343a353261343a3a2f33322d313238203d3e20323638353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:0e:0e:1c:eb:a0:6e:c8:12:4b:11:8b:e2:e9:1d:9b:00:a6:
         60:1f:88:85:7c:24:e2:b3:e9:33:ee:5f:ac:fc:ff:db:f6:5c:
         a7:a4:93:07:65:c9:46:77:a4:9b:64:05:97:93:3f:76:76:e1:
         fe:b9:bb:e8:0e:12:06:10:67:fa:61:2b:c1:60:fd:8e:4a:e1:
         4b:37:5d:bb:c5:3d:d6:db:9e:d5:f7:3a:53:5d:9f:49:cd:ea:
         4d:a0:3d:ed:46:40:9a:8f:4d:c8:21:18:72:2f:3d:ab:f7:52:
         27:ba:aa:66:86:bd:d2:59:6b:f8:71:7c:39:f7:e6:e1:3e:fb:
         2c:fe:9c:ac:ac:13:c0:86:2f:12:cc:2e:4d:3d:81:d1:a3:d3:
         52:eb:e5:84:de:7f:07:8c:53:3e:2c:05:c8:86:21:ee:2c:71:
         72:72:04:ef:e1:e1:4d:b6:28:86:bd:5c:cd:42:71:61:28:4d:
         26:9c:a4:e9:a7:bf:15:ab:34:b5:f4:04:e6:87:aa:ae:e7:41:
         12:11:75:43:89:32:e4:7f:38:82:57:e3:a1:f1:f4:f3:77:8d:
         df:19:ed:d8:0b:26:50:1d:7c:70:30:02:b2:da:30:91:7c:94:
         e9:80:f0:21:db:98:20:a7:40:70:ae:2f:13:5a:78:99:ce:17:
         91:8d:17:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:48 2026 by rpki-client