Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/323830343a373737343a3a2f33322d3438203d3e20323731313739.roa
File:                     323830343a373737343a3a2f33322d3438203d3e20323731313739.roa (raw, json)
Hash identifier:          lE7qDDzdHpYm5THmcq85IKeB6tPbHPFk+7T04zzATy8=
Subject key identifier:   AF:A5:73:85:79:E3:66:61:52:24:06:D5:B8:5F:CC:92:5D:65:F1:2F
Certificate issuer:       /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
Certificate serial:       22989194196C0604F031B530874B947A2BB91515
Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/323830343a373737343a3a2f33322d3438203d3e20323731313739.roa
Signing time:             Fri 09 Oct 2026 19:34:10 +0000
ROA not before:           Fri 09 Oct 2026 19:29:10 +0000
ROA not after:            Fri 08 Oct 2027 19:34:10 +0000
asID:                     271179
IP address blocks:        2804:7774::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl
                          rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:98:91:94:19:6c:06:04:f0:31:b5:30:87:4b:94:7a:2b:b9:15:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
        Validity
            Not Before: Oct  9 19:29:10 2026 GMT
            Not After : Oct  8 19:34:10 2027 GMT
        Subject: CN=AFA5738579E36661522406D5B85FCC925D65F12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:58:69:9c:27:80:c7:6b:03:f5:d3:ef:cd:
                    3f:7d:08:ed:01:1c:09:51:17:ce:d2:c3:de:c7:39:
                    65:d8:53:15:c0:4e:64:f2:05:9a:ed:89:f8:10:ad:
                    cf:a9:d1:92:1c:4c:0f:07:ff:d8:c9:ee:fb:a2:79:
                    4d:3b:44:e5:85:b9:7e:08:96:ca:e1:86:37:90:68:
                    38:5b:36:94:51:0a:fd:79:18:9a:ef:a9:87:dc:c5:
                    aa:1b:cc:92:6d:2f:fd:0e:52:6d:16:e9:25:85:01:
                    ad:d9:b8:f4:93:9a:e1:af:05:0f:e5:4c:e9:54:99:
                    cc:ae:9e:75:51:8b:c0:6c:ac:57:d9:45:0f:f1:ae:
                    24:f3:bf:be:71:2d:ba:85:81:d4:bf:42:af:94:60:
                    d3:01:98:93:39:59:de:a9:3b:eb:12:c3:fd:4c:1e:
                    09:fa:20:35:ea:fe:a4:e7:45:41:16:20:8b:a2:1b:
                    30:b6:e2:29:fc:29:af:f5:86:73:41:1b:4a:28:55:
                    00:74:f3:00:87:fb:50:09:15:5e:26:85:39:d7:a3:
                    5a:98:14:41:b3:44:a1:9f:8a:3d:49:55:e5:7c:46:
                    b9:ba:3e:de:1e:7b:24:7e:f1:44:9c:a0:b6:a1:61:
                    d4:da:79:38:52:ff:2c:56:7a:57:96:fb:d0:d7:5a:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A5:73:85:79:E3:66:61:52:24:06:D5:B8:5F:CC:92:5D:65:F1:2F
            X509v3 Authority Key Identifier:
                keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/323830343a373737343a3a2f33322d3438203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7774::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:bd:04:31:e4:4c:8b:e2:3e:4c:58:83:70:59:b0:9e:0c:5c:
         99:9e:7a:05:86:be:61:3d:c2:ec:7f:50:a9:b1:15:7f:f6:2b:
         95:59:9d:e6:67:6d:e0:07:1f:b9:e6:0f:c8:3a:f6:06:4a:88:
         19:9e:7c:7a:d1:7d:f9:92:fd:5b:86:7a:78:c3:68:f0:7b:5b:
         7e:e1:3b:82:e5:d4:80:dc:94:00:b1:8b:d2:3f:a7:5f:14:40:
         2e:41:9f:92:9a:58:77:b7:2f:de:28:8b:bc:46:b6:bd:a9:72:
         d8:ed:19:b1:cf:f3:77:b4:3a:c1:d7:45:6e:46:fc:b8:fa:31:
         14:4d:a4:88:58:6d:57:6a:61:0a:9a:cc:2d:cb:8b:93:b3:e5:
         2c:3d:7c:5c:3c:49:81:ee:f6:dd:14:f2:ac:4d:5e:5b:76:35:
         34:86:d9:1e:07:74:ee:57:11:95:1d:bc:d9:96:9a:d1:da:ff:
         f6:1d:39:67:61:3c:d3:05:d6:15:8f:c9:0e:ae:9b:b7:ff:02:
         c1:34:13:9d:92:91:b3:70:83:40:a5:be:3b:db:1f:89:f9:b9:
         d6:95:b6:cd:dd:8b:e9:c9:88:5d:c1:ba:1f:8b:a6:03:fc:ad:
         0c:60:38:d2:a1:57:0b:e9:5b:df:8d:d8:d4:e0:b1:d0:fa:24:
         34:40:43:e7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIpiRlBlsBgTwMbUwh0uUeiu5FRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlFRkYyRENDOEQzQjY5MjhFNTE2RTZBMkRGMDg2RTA4
Q0I4OTFFNDAeFw0yNjEwMDkxOTI5MTBaFw0yNzEwMDgxOTM0MTBaMDMxMTAvBgNV
BAMTKEFGQTU3Mzg1NzlFMzY2NjE1MjI0MDZENUI4NUZDQzkyNUQ2NUYxMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUl1hpnCeAx2sD9dPvzT99CO0B
HAlRF87Sw97HOWXYUxXATmTyBZrtifgQrc+p0ZIcTA8H/9jJ7vuieU07ROWFuX4I
lsrhhjeQaDhbNpRRCv15GJrvqYfcxaobzJJtL/0OUm0W6SWFAa3ZuPSTmuGvBQ/l
TOlUmcyunnVRi8BsrFfZRQ/xriTzv75xLbqFgdS/Qq+UYNMBmJM5Wd6pO+sSw/1M
Hgn6IDXq/qTnRUEWIIuiGzC24in8Ka/1hnNBG0ooVQB08wCH+1AJFV4mhTnXo1qY
FEGzRKGfij1JVeV8Rrm6Pt4eeyR+8UScoLahYdTaeThS/yxWeleW+9DXWplHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUr6VzhXnjZmFSJAbVuF/Mkl1l8S8wHwYDVR0j
BBgwFoAUue/y3MjTtpKOUW5qLfCG4Iy4keQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gx
WkgvMS9COUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5RUZGMkRDQzhEM0I2OTI4
RTUxNkU2QTJERjA4NkUwOENCODkxRTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZZ1VDRmpFTmJpTGc0RkxCem9rV0Rnam83VUhOOExLaldKRHpob1N4MVpILzEv
MzIzODMwMzQzYTM3MzczNzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzEzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR3dDANBgkqhkiG9w0BAQsFAAOCAQEAnb0EMeRM
i+I+TFiDcFmwngxcmZ56BYa+YT3C7H9QqbEVf/YrlVmd5mdt4AcfueYPyDr2BkqI
GZ58etF9+ZL9W4Z6eMNo8HtbfuE7guXUgNyUALGL0j+nXxRALkGfkppYd7cv3iiL
vEa2valy2O0Zsc/zd7Q6wddFbkb8uPoxFE2kiFhtV2phCprMLcuLk7PlLD18XDxJ
ge723RTyrE1eW3Y1NIbZHgd07lcRlR282Zaa0dr/9h05Z2E80wXWFY/JDq6bt/8C
wTQTnZKRs3CDQKW+O9sfifm51pW2zd2L6cmIXcG6H4umA/ytDGA40qFXC+lb343Y
1OCx0PokNEBD5w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:40:09 2026 by rpki-client