Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/323830343a346431383a383030303a3a2f33332d3333203d3e20323637343132.roa
File:                     323830343a346431383a383030303a3a2f33332d3333203d3e20323637343132.roa (raw, json)
Hash identifier:          0v+X/d26jc69zwXUe4l0wPyIbwl+EKSjcwhQcTlpeCg=
Subject key identifier:   57:6B:EA:4C:6F:67:E7:BB:41:31:16:86:AD:CC:91:50:50:27:0B:75
Certificate issuer:       /CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
Certificate serial:       1A3261CC23EB63FCD152D95C51F35979992ED49A
Authority key identifier: D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/323830343a346431383a383030303a3a2f33332d3333203d3e20323637343132.roa
Signing time:             Tue 21 Jul 2026 19:45:29 +0000
ROA not before:           Tue 21 Jul 2026 19:40:29 +0000
ROA not after:            Tue 20 Jul 2027 19:45:29 +0000
asID:                     267412
IP address blocks:        2804:4d18:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:32:61:cc:23:eb:63:fc:d1:52:d9:5c:51:f3:59:79:99:2e:d4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
        Validity
            Not Before: Jul 21 19:40:29 2026 GMT
            Not After : Jul 20 19:45:29 2027 GMT
        Subject: CN=576BEA4C6F67E7BB41311686ADCC915050270B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:aa:e6:6c:aa:0c:71:38:ab:e4:ec:84:0c:
                    43:2f:c1:0d:93:ab:bb:ba:6a:74:50:e3:b5:30:fd:
                    c0:26:da:a8:74:f4:35:a1:82:4c:e9:e2:48:a5:6a:
                    8d:27:f9:c0:86:6e:1f:aa:26:81:2e:55:61:8d:9b:
                    76:71:fb:c8:c1:39:ae:b6:a7:4d:f7:aa:de:ef:52:
                    a2:52:3d:0c:07:a7:48:df:11:58:7a:72:84:20:9d:
                    29:41:d4:9c:3f:8e:8f:49:10:08:63:54:ec:0e:dd:
                    7f:7a:be:d2:ff:6c:ab:67:3d:1c:67:c6:02:d5:6c:
                    43:f1:82:a5:de:c6:f0:5b:df:15:d2:02:60:b7:55:
                    d8:44:c6:4b:d9:79:db:ec:f2:75:05:97:5b:eb:86:
                    90:b7:2c:34:5f:e3:d6:60:c1:69:26:07:56:4e:89:
                    61:22:a4:f2:4a:96:77:9f:d7:10:b0:d6:bc:28:74:
                    da:e4:c2:c1:9a:dc:30:5f:03:e4:59:0b:af:3f:5e:
                    bb:db:95:18:7d:98:03:c4:72:06:38:10:1a:73:e9:
                    c0:d0:0e:7d:29:f5:a6:ed:08:a3:97:5e:6d:18:8d:
                    60:04:1b:76:5d:9e:bf:71:8d:2a:a8:c9:fc:0c:ab:
                    1b:b0:5a:48:ff:d9:7d:28:62:30:89:e2:14:6b:36:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6B:EA:4C:6F:67:E7:BB:41:31:16:86:AD:CC:91:50:50:27:0B:75
            X509v3 Authority Key Identifier:
                keyid:D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/323830343a346431383a383030303a3a2f33332d3333203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:ea:7f:74:30:26:b3:60:75:f9:ad:34:76:d8:43:c8:22:
         4a:a3:a8:35:25:91:34:5d:b3:12:d7:60:50:00:01:53:bd:37:
         e4:ea:ee:e1:b6:1d:9b:9f:2b:63:2e:4d:75:d6:7b:12:6b:34:
         ce:9c:51:2d:2b:7f:51:47:52:ae:36:13:05:19:a3:d8:92:dd:
         41:17:a1:cc:4b:d2:13:58:13:a7:89:44:02:2a:68:e8:32:07:
         9a:b3:8f:13:4c:66:dd:40:53:cb:2c:b5:21:a4:af:e2:a8:80:
         c7:4f:f6:92:25:3a:db:73:15:df:0a:d7:8b:e4:b1:67:76:db:
         80:9f:9f:29:2a:96:45:09:40:3d:68:3c:8b:c7:e6:33:e3:8d:
         08:c1:48:65:85:45:47:97:9e:f1:7f:cf:fc:80:d0:45:5b:c2:
         fc:32:d2:4a:1f:17:98:5e:75:c8:da:7b:6f:7e:ff:9f:32:b7:
         93:65:ff:e6:c0:f3:c3:26:2c:8a:e0:ca:28:90:ed:da:a9:89:
         3a:9d:31:1b:90:c6:4b:93:a6:46:da:a6:17:9a:ae:1c:95:3c:
         09:be:39:be:d7:58:f9:f1:6e:1d:8b:e8:49:e9:3e:4b:b7:0b:
         c6:71:c4:1f:fc:20:b0:27:86:ae:d0:ea:bc:39:65:6d:35:33:
         83:58:7e:b6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGjJhzCPrY/zRUtlcUfNZeZku1JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM4NEQyQzU5N0U0RkI0QUUwOTI5Q0Y1RkRFMDVCOTlE
REYzMTE3MzAeFw0yNjA3MjExOTQwMjlaFw0yNzA3MjAxOTQ1MjlaMDMxMTAvBgNV
BAMTKDU3NkJFQTRDNkY2N0U3QkI0MTMxMTY4NkFEQ0M5MTUwNTAyNzBCNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCqrmbKoMcTir5OyEDEMvwQ2T
q7u6anRQ47Uw/cAm2qh09DWhgkzp4kilao0n+cCGbh+qJoEuVWGNm3Zx+8jBOa62
p033qt7vUqJSPQwHp0jfEVh6coQgnSlB1Jw/jo9JEAhjVOwO3X96vtL/bKtnPRxn
xgLVbEPxgqXexvBb3xXSAmC3VdhExkvZedvs8nUFl1vrhpC3LDRf49ZgwWkmB1ZO
iWEipPJKlnef1xCw1rwodNrkwsGa3DBfA+RZC68/XrvblRh9mAPEcgY4EBpz6cDQ
Dn0p9abtCKOXXm0YjWAEG3Zdnr9xjSqoyfwMqxuwWkj/2X0oYjCJ4hRrNj67AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUV2vqTG9n57tBMRaGrcyRUFAnC3UwHwYDVR0j
BBgwFoAU04TSxZfk+0rgkpz1/eBbmd3zEXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQ2RkE1dk42VXkzTTFnZzRhYmNScGJKdW44VHlBTDllN0M4ZGhyS2Nh
Q0IvMS9EMzg0RDJDNTk3RTRGQjRBRTA5MjlDRjVGREUwNUI5OURERjMxMTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzODREMkM1OTdFNEZCNEFF
MDkyOUNGNUZERTA1Qjk5RERGMzExNzMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUNkZBNXZONlV5M00xZ2c0YWJjUnBiSnVuOFR5QUw5ZTdDOGRocktjYUNCLzEv
MzIzODMwMzQzYTM0NjQzMTM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzM0MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETRiAMA0GCSqGSIb3DQEBCwUA
A4IBAQA4mup/dDAms2B1+a00dthDyCJKo6g1JZE0XbMS12BQAAFTvTfk6u7hth2b
nytjLk111nsSazTOnFEtK39RR1KuNhMFGaPYkt1BF6HMS9ITWBOniUQCKmjoMgea
s48TTGbdQFPLLLUhpK/iqIDHT/aSJTrbcxXfCteL5LFndtuAn58pKpZFCUA9aDyL
x+Yz440IwUhlhUVHl57xf8/8gNBFW8L8MtJKHxeYXnXI2ntvfv+fMreTZf/mwPPD
JiyK4MookO3aqYk6nTEbkMZLk6ZG2qYXmq4clTwJvjm+11j58W4di+hJ6T5LtwvG
ccQf/CCwJ4au0Oq8OWVtNTODWH62
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:11 2026 by rpki-client