Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          UJBJEUii5PJdE3FXdpwuPvK2A1LEo0mo5JzaHLlrmk8=
Subject key identifier:   CB:77:9F:4C:D2:16:30:CA:A4:84:16:A0:65:79:B7:AF:63:E1:FF:F9
Certificate issuer:       /CN=AE2DEC3D52404723589988E57C6E36A30F63278B
Certificate serial:       6238E09CE193E4C936848F3BDEBED6F0258228A2
Authority key identifier: AE:2D:EC:3D:52:40:47:23:58:99:88:E5:7C:6E:36:A3:0F:63:27:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE2DEC3D52404723589988E57C6E36A30F63278B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Fri 26 Jun 2026 17:37:36 +0000
ROA not before:           Fri 26 Jun 2026 17:32:36 +0000
ROA not after:            Fri 25 Jun 2027 17:37:36 +0000
asID:                     265393
IP address blocks:        2804:3364:8100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/AE2DEC3D52404723589988E57C6E36A30F63278B.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/AE2DEC3D52404723589988E57C6E36A30F63278B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE2DEC3D52404723589988E57C6E36A30F63278B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 02:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:38:e0:9c:e1:93:e4:c9:36:84:8f:3b:de:be:d6:f0:25:82:28:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2DEC3D52404723589988E57C6E36A30F63278B
        Validity
            Not Before: Jun 26 17:32:36 2026 GMT
            Not After : Jun 25 17:37:36 2027 GMT
        Subject: CN=CB779F4CD21630CAA48416A06579B7AF63E1FFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:c4:19:30:d5:f0:72:2b:71:7c:d5:be:12:
                    cf:ca:e1:04:83:24:85:d8:97:f5:50:b9:e6:f9:0c:
                    68:f0:72:36:0a:34:68:f6:39:f8:a9:df:97:69:24:
                    52:3a:9b:7e:18:35:d8:90:cb:f5:c4:36:d5:5b:85:
                    3e:1a:49:12:5f:84:0b:d8:98:42:da:24:1a:65:84:
                    49:dd:55:71:04:1b:5c:60:15:14:ee:1d:7a:56:c4:
                    fc:ee:c3:0c:e4:5b:36:7e:11:cf:04:b4:e3:95:47:
                    2b:f4:87:56:f4:6a:f6:d4:2d:dc:36:e5:21:f7:31:
                    14:29:62:15:7e:9b:9c:eb:fd:29:c8:2b:39:3a:ee:
                    b1:b0:3d:12:7d:26:6a:03:7b:5d:84:b0:12:a0:2b:
                    69:3a:bd:9c:5a:b4:27:3d:a0:2a:92:40:2a:14:72:
                    44:7b:ac:36:36:e4:c3:8a:3f:13:fc:d8:e7:aa:7e:
                    c2:17:ff:3f:ac:f7:b2:73:38:eb:c9:4d:62:87:c2:
                    30:44:bf:bf:12:a1:95:d5:70:64:cb:ec:8f:ff:d5:
                    57:e0:66:ca:13:bb:b1:73:05:53:3e:98:30:0e:82:
                    5e:cf:47:70:b9:ef:0e:73:2b:e6:e9:5a:af:f2:af:
                    f8:d5:83:dd:5e:f0:44:fc:51:67:98:35:6d:02:14:
                    a7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:77:9F:4C:D2:16:30:CA:A4:84:16:A0:65:79:B7:AF:63:E1:FF:F9
            X509v3 Authority Key Identifier:
                keyid:AE:2D:EC:3D:52:40:47:23:58:99:88:E5:7C:6E:36:A3:0F:63:27:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/AE2DEC3D52404723589988E57C6E36A30F63278B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE2DEC3D52404723589988E57C6E36A30F63278B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:0d:ec:fa:db:76:05:a6:b3:f9:dc:f1:c0:a4:3c:96:b6:95:
         ac:46:a8:89:06:d2:39:ec:b5:6b:45:06:eb:fe:3a:11:58:f3:
         5a:02:2b:c7:f4:5a:66:e0:86:c7:ca:65:88:4c:fd:c3:47:53:
         44:5f:16:d3:c5:d4:8a:4a:ba:04:30:d5:b0:9c:b5:5b:2c:c2:
         43:c8:a4:b0:2f:f1:e7:e5:df:63:39:c2:13:94:14:34:c7:86:
         f7:01:8d:93:bb:1e:24:35:1b:cc:be:7f:9c:e4:ac:d7:be:f3:
         36:7e:91:a5:72:56:85:c8:82:5b:02:f7:fe:8e:07:20:4f:00:
         6d:b8:39:37:7c:17:a1:cf:82:07:9c:03:d5:99:a2:92:4c:fd:
         3d:5f:5f:f7:37:65:5a:31:bd:8f:ed:a7:a0:8a:06:83:83:a3:
         16:67:b7:a6:17:02:2a:ff:09:a7:e6:87:2d:0a:45:54:7d:25:
         7e:69:9d:d8:d2:cb:0a:a2:cc:9e:e1:bb:31:5b:63:06:71:ae:
         bf:d7:14:23:3c:b2:39:18:1f:55:48:61:92:54:19:b5:b7:66:
         0d:b6:ed:45:19:4b:9a:a1:92:1c:17:76:c9:0c:d8:ea:60:55:
         c6:c4:4c:bf:d5:58:36:b5:41:12:95:c5:3b:38:78:1f:3c:e8:
         45:83:82:70
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYjjgnOGT5Mk2hI873r7W8CWCKKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyREVDM0Q1MjQwNDcyMzU4OTk4OEU1N0M2RTM2QTMw
RjYzMjc4QjAeFw0yNjA2MjYxNzMyMzZaFw0yNzA2MjUxNzM3MzZaMDMxMTAvBgNV
BAMTKENCNzc5RjRDRDIxNjMwQ0FBNDg0MTZBMDY1NzlCN0FGNjNFMUZGRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+MQZMNXwcitxfNW+Es/K4QSD
JIXYl/VQueb5DGjwcjYKNGj2Ofip35dpJFI6m34YNdiQy/XENtVbhT4aSRJfhAvY
mELaJBplhEndVXEEG1xgFRTuHXpWxPzuwwzkWzZ+Ec8EtOOVRyv0h1b0avbULdw2
5SH3MRQpYhV+m5zr/SnIKzk67rGwPRJ9JmoDe12EsBKgK2k6vZxatCc9oCqSQCoU
ckR7rDY25MOKPxP82OeqfsIX/z+s97JzOOvJTWKHwjBEv78SoZXVcGTL7I//1Vfg
ZsoTu7FzBVM+mDAOgl7PR3C57w5zK+bpWq/yr/jVg91e8ET8UWeYNW0CFKcRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUy3efTNIWMMqkhBagZXm3r2Ph//kwHwYDVR0j
BBgwFoAUri3sPVJARyNYmYjlfG42ow9jJ4swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMC9BRTJERUMzRDUyNDA0NzIzNTg5OTg4RTU3QzZFMzZBMzBGNjMyNzhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMkRFQzNENTI0MDQ3MjM1
ODk5ODhFNTdDNkUzNkEzMEY2MzI3OEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzAv
MzIzODMwMzQzYTMzMzMzNjM0M2EzODMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEM2SBMA0GCSqGSIb3DQEBCwUA
A4IBAQCDDez623YFprP53PHApDyWtpWsRqiJBtI57LVrRQbr/joRWPNaAivH9Fpm
4IbHymWITP3DR1NEXxbTxdSKSroEMNWwnLVbLMJDyKSwL/Hn5d9jOcITlBQ0x4b3
AY2Tux4kNRvMvn+c5KzXvvM2fpGlclaFyIJbAvf+jgcgTwBtuDk3fBehz4IHnAPV
maKSTP09X1/3N2VaMb2P7aegigaDg6MWZ7emFwIq/wmn5octCkVUfSV+aZ3Y0ssK
osye4bsxW2MGca6/1xQjPLI5GB9VSGGSVBm1t2YNtu1FGUuaoZIcF3bJDNjqYFXG
xEy/1Vg2tUESlcU7OHgfPOhFg4Jw
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:08:46 2026 by rpki-client