Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/323830343a3165303a376630303a3a2f34302d3430203d3e20323632373834.roa
File:                     323830343a3165303a376630303a3a2f34302d3430203d3e20323632373834.roa (raw, json)
Hash identifier:          KRo3t8DFs6Ljorhe+50fZzf1Dq94yTtDHdnvwcMu3Ks=
Subject key identifier:   08:53:B8:71:35:88:71:A4:E2:5B:45:0D:64:E0:C7:38:8C:13:3C:2D
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       6A2FDFD41128480E248A1EDEFAE6208DAF76CF41
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/323830343a3165303a376630303a3a2f34302d3430203d3e20323632373834.roa
Signing time:             Wed 01 Jul 2026 18:53:13 +0000
ROA not before:           Wed 01 Jul 2026 18:48:13 +0000
ROA not after:            Wed 30 Jun 2027 18:53:13 +0000
asID:                     262784
IP address blocks:        2804:1e0:7f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2f:df:d4:11:28:48:0e:24:8a:1e:de:fa:e6:20:8d:af:76:cf:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jul  1 18:48:13 2026 GMT
            Not After : Jun 30 18:53:13 2027 GMT
        Subject: CN=0853B871358871A4E25B450D64E0C7388C133C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:45:34:b8:86:5d:2f:38:1c:2c:15:3e:c5:
                    f2:2f:bb:a5:85:63:4a:cf:d8:58:84:93:e2:12:35:
                    2e:db:e9:3f:94:83:b7:e9:68:dd:cd:c8:74:71:d3:
                    e4:a3:11:50:a4:fb:f2:45:3d:2c:8f:97:af:05:b9:
                    d0:cd:ff:f8:8f:22:a8:b8:a8:12:12:12:49:7d:10:
                    e9:83:09:65:36:94:da:51:a1:c1:6f:cb:1e:26:5f:
                    79:e5:54:a5:3c:69:fa:2d:0c:2e:e3:f2:8e:d3:ce:
                    2c:61:0e:43:97:5e:1e:1f:a3:12:49:79:2f:63:e7:
                    a6:44:70:ec:43:aa:57:a0:bd:b1:ca:19:1c:71:79:
                    ae:4a:4f:1b:0b:91:40:c6:97:99:4a:88:9b:16:db:
                    9c:b0:c9:c0:93:64:89:07:fc:4f:bd:49:2b:f7:0e:
                    fc:f1:86:e9:4a:96:9d:42:58:0d:96:1d:e5:95:75:
                    0c:d5:18:73:56:a6:ea:88:68:35:4a:22:8e:9c:57:
                    39:64:e5:78:3b:a4:d7:a0:e7:73:24:0d:26:c4:6d:
                    fb:30:d8:63:0d:c2:71:53:d9:dc:6b:23:5c:2b:cb:
                    a5:d4:29:06:27:78:95:1b:d0:f6:27:75:13:b0:0d:
                    8f:eb:e1:37:d6:bb:a3:59:21:ad:a2:38:65:4e:4a:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:53:B8:71:35:88:71:A4:E2:5B:45:0D:64:E0:C7:38:8C:13:3C:2D
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/323830343a3165303a376630303a3a2f34302d3430203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:a2:2a:7c:1c:ea:16:f6:97:a0:4c:cc:01:16:e3:40:5f:54:
         57:b7:c1:05:0b:55:b0:48:e4:58:87:5b:aa:2d:d6:7f:8b:54:
         2d:ef:fb:e5:90:a7:0d:1c:5e:7a:81:15:ef:47:08:d4:25:89:
         d6:3a:21:e3:03:00:7b:6c:57:e3:fe:b0:f5:27:dc:49:89:b4:
         d3:84:10:87:2f:3d:e3:f3:1a:31:af:bf:3f:d7:1e:19:b4:40:
         89:d7:01:60:92:65:47:7d:49:9c:98:41:1a:a6:97:62:f2:81:
         fe:64:ed:6e:31:33:46:4b:cd:50:81:e1:da:a8:f9:18:38:a6:
         4a:03:60:42:08:1d:5a:42:e0:80:2e:4f:6e:9b:ba:84:54:9b:
         2c:21:d6:9c:41:32:a3:18:6a:60:bc:6f:e2:11:79:7d:c8:95:
         74:16:04:d3:76:e2:cb:1c:42:b3:d8:4e:5f:16:f2:ec:8b:ad:
         93:5b:8c:bd:8e:27:e7:d0:64:bb:bb:39:d7:88:95:0e:bd:de:
         41:5a:c3:98:8c:75:51:9c:f2:bf:f9:d7:25:4a:da:db:cd:89:
         5e:75:54:cf:ab:41:5c:21:e5:8a:48:de:a5:47:35:8c:87:44:
         8d:83:fe:8a:44:00:09:6c:10:7a:22:74:fd:48:df:20:7d:13:
         ef:e3:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:44:09 2026 by rpki-client