Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/323830343a316466343a3a2f33322d3332203d3e203532393437.roa
File:                     323830343a316466343a3a2f33322d3332203d3e203532393437.roa (raw, json)
Hash identifier:          FMXqGwS/Q5Gblq0UamIfKNLPIpz2CGAUMKOOphGmJEM=
Subject key identifier:   31:8F:58:EC:B1:F3:40:AB:52:51:C7:62:CE:E0:F5:42:3C:C0:59:C3
Certificate issuer:       /CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
Certificate serial:       32CED891356BA303BF231C617ADFCBA76C314458
Authority key identifier: 2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/323830343a316466343a3a2f33322d3332203d3e203532393437.roa
Signing time:             Fri 17 Jul 2026 13:03:36 +0000
ROA not before:           Fri 17 Jul 2026 12:58:36 +0000
ROA not after:            Fri 16 Jul 2027 13:03:36 +0000
asID:                     52947
IP address blocks:        2804:1df4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ce:d8:91:35:6b:a3:03:bf:23:1c:61:7a:df:cb:a7:6c:31:44:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
        Validity
            Not Before: Jul 17 12:58:36 2026 GMT
            Not After : Jul 16 13:03:36 2027 GMT
        Subject: CN=318F58ECB1F340AB5251C762CEE0F5423CC059C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:6f:c6:e7:cd:06:53:99:cb:40:fe:b4:fb:
                    b6:f6:c6:c5:35:5d:5f:70:16:b4:81:16:2d:ee:46:
                    38:7b:ce:a2:9a:22:51:15:3b:69:6e:ec:b7:56:ba:
                    f7:b6:49:d4:36:8a:9d:10:6a:2e:a1:19:19:b6:e4:
                    ba:e6:34:44:bb:a9:3a:86:62:73:b1:be:ff:8d:65:
                    4e:c1:45:fd:e5:e9:a3:a7:78:4e:86:f5:c9:3b:5c:
                    09:34:52:9d:90:c0:90:27:4b:c1:e7:94:53:af:34:
                    85:19:1d:c2:08:21:65:0a:ee:41:f9:e1:1c:19:6b:
                    21:4d:a3:18:59:6f:3a:0b:eb:f1:50:08:ee:03:7e:
                    04:f8:70:e6:b6:03:2a:87:c1:20:7f:b3:3a:ec:df:
                    17:8e:be:95:e0:39:73:0d:af:12:55:74:69:88:76:
                    3e:43:29:20:19:cf:0f:70:3f:36:4e:a5:5e:dd:8c:
                    16:c2:53:12:a9:44:0a:4c:dd:4c:4a:0e:5e:e3:8b:
                    73:1e:13:9d:33:9a:56:3d:87:b7:f7:c2:b5:d1:6d:
                    a6:09:31:a6:e7:b3:96:3b:9f:6b:b9:ce:a4:1c:13:
                    7c:ba:f9:31:78:de:ca:51:3d:9c:63:3e:4e:b7:dd:
                    fd:9d:b0:3f:74:a4:bf:a1:40:c2:22:8d:a3:ea:35:
                    d2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8F:58:EC:B1:F3:40:AB:52:51:C7:62:CE:E0:F5:42:3C:C0:59:C3
            X509v3 Authority Key Identifier:
                keyid:2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/323830343a316466343a3a2f33322d3332203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         e4:62:08:43:39:96:c5:62:d9:9a:ce:ef:3d:bb:e8:4a:78:b1:
         7e:1f:9d:9e:29:6c:2f:24:b5:dc:46:30:9e:1e:94:13:7f:49:
         3a:ae:bd:b5:76:fa:ac:58:c6:26:72:76:71:44:51:0c:f3:96:
         4c:0f:93:c0:36:69:3a:90:9c:7c:bd:ed:65:d1:3e:67:ef:4d:
         0a:96:35:9e:d8:9b:11:32:38:1f:23:03:f3:51:5a:ab:a8:90:
         4e:9f:58:7a:ad:bb:b1:d4:ce:75:2c:d3:ec:18:24:ba:87:7c:
         3a:cc:fe:50:73:d4:0b:8c:9a:27:1c:21:53:61:34:36:64:b4:
         a4:98:f0:5e:42:59:29:fb:4a:a9:6f:8a:bd:a6:28:ac:76:ce:
         84:4c:6e:67:67:09:3a:25:6f:14:52:62:6b:1f:09:31:c8:e5:
         b5:0a:9f:6a:da:64:f4:e3:c9:68:a7:4b:9c:99:1b:2a:ac:d4:
         c0:6d:67:d9:98:e4:67:ed:0b:54:52:29:58:0a:f5:18:a5:4e:
         46:f6:dc:6d:a0:bb:6a:23:a1:99:54:07:5a:16:c5:b2:82:06:
         fb:c2:7d:ce:bb:fe:98:ab:17:bf:e5:d9:db:d4:5d:07:70:7a:
         4d:7c:e8:31:3b:c2:3d:61:a2:2e:9b:a7:45:86:cb:e2:99:c2:
         93:4f:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:38 2026 by rpki-client