Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa
File:                     323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (raw, json)
Hash identifier:          5IhlRzkHhpN1LQjakVnjcuxaLYCdq9OQd9QrK0wgaUs=
Subject key identifier:   77:CE:20:34:1E:98:FC:18:57:A5:BC:35:17:7F:DA:A5:BF:4C:72:9C
Certificate issuer:       /CN=376D677240B6F2686A282683E2EC3DDA79CE47CE
Certificate serial:       5A3891F94E37FB45EB2BD244E0765A31D9D6C12C
Authority key identifier: 37:6D:67:72:40:B6:F2:68:6A:28:26:83:E2:EC:3D:DA:79:CE:47:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376D677240B6F2686A282683E2EC3DDA79CE47CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa
Signing time:             Mon 20 Jul 2026 17:22:13 +0000
ROA not before:           Mon 20 Jul 2026 17:17:13 +0000
ROA not after:            Mon 19 Jul 2027 17:22:13 +0000
asID:                     270838
IP address blocks:        2804:7230::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/376D677240B6F2686A282683E2EC3DDA79CE47CE.crl
                          rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/376D677240B6F2686A282683E2EC3DDA79CE47CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376D677240B6F2686A282683E2EC3DDA79CE47CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:38:91:f9:4e:37:fb:45:eb:2b:d2:44:e0:76:5a:31:d9:d6:c1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=376D677240B6F2686A282683E2EC3DDA79CE47CE
        Validity
            Not Before: Jul 20 17:17:13 2026 GMT
            Not After : Jul 19 17:22:13 2027 GMT
        Subject: CN=77CE20341E98FC1857A5BC35177FDAA5BF4C729C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:47:75:3a:ff:5a:ce:97:e2:ca:88:57:62:0a:
                    59:98:56:6d:e1:4f:ad:a2:7e:4d:d7:64:e1:76:54:
                    95:87:e0:ae:ff:2a:cb:1a:d0:6b:bb:c0:ee:a3:a2:
                    27:3d:28:a6:b0:e7:ea:57:fd:83:de:5c:57:ed:a8:
                    d0:0d:f8:3d:a2:de:8b:11:55:d3:de:87:92:9c:03:
                    b7:28:9c:1a:ba:51:e9:de:3e:e4:49:ad:71:f7:79:
                    4a:0a:45:b7:e8:2f:f4:b8:b2:5d:a2:92:fc:e4:1c:
                    d8:2f:5d:b2:98:d3:48:f8:12:e7:54:68:90:1d:90:
                    07:86:94:8d:b1:f9:46:20:93:08:fe:c5:71:04:fa:
                    f4:2a:65:9f:b8:8a:56:b7:43:33:7d:d8:51:5e:eb:
                    5a:a2:b5:38:16:f5:2d:5b:12:fa:1b:2c:49:34:39:
                    aa:c5:49:30:2e:8a:f2:c6:68:99:6c:db:5c:18:4a:
                    9d:ab:dd:b5:9f:82:80:df:ba:1d:13:cb:9f:e1:ba:
                    14:6d:bd:44:6f:0c:db:b7:41:a4:21:94:ac:76:51:
                    22:98:5c:df:e9:fd:fd:fd:89:0e:86:16:cd:40:a5:
                    46:10:45:b2:b4:07:6f:f4:a4:0a:e5:2b:a6:8e:63:
                    56:a2:57:01:3c:35:36:7b:67:5f:b2:63:31:ec:90:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CE:20:34:1E:98:FC:18:57:A5:BC:35:17:7F:DA:A5:BF:4C:72:9C
            X509v3 Authority Key Identifier:
                keyid:37:6D:67:72:40:B6:F2:68:6A:28:26:83:E2:EC:3D:DA:79:CE:47:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/376D677240B6F2686A282683E2EC3DDA79CE47CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376D677240B6F2686A282683E2EC3DDA79CE47CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7230::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:1b:cd:6b:09:d4:c0:05:2a:42:56:e0:dc:54:02:24:bd:
         7b:16:d9:bc:49:56:5d:39:da:0d:ed:a7:b3:20:16:d0:0c:c0:
         b3:1b:66:56:9c:18:c9:c4:52:2c:86:32:85:8d:68:07:ae:ed:
         d4:aa:e5:bc:8d:b9:94:70:38:e7:14:13:d9:73:50:16:f0:46:
         24:40:63:03:d4:50:b2:f4:3f:a7:d0:c2:50:5b:6e:86:12:e4:
         89:41:a0:8a:43:6c:5e:3b:1e:94:90:94:4a:57:77:d4:a7:88:
         a0:7a:5f:e8:26:54:04:0b:34:7a:6d:59:2e:92:91:ef:ce:f4:
         60:df:1f:89:f7:e8:8a:43:65:1a:88:9a:c6:4c:51:88:06:7c:
         30:7e:1d:16:c4:68:d3:a1:35:8d:1d:26:e0:39:ac:e1:65:a6:
         04:7a:6f:fc:9e:f1:75:1c:fc:5d:13:95:00:85:9f:48:e6:bc:
         15:18:e6:70:44:1c:bb:4a:8d:54:49:e1:e2:94:2e:83:55:41:
         b3:7a:d9:e4:af:fb:70:00:71:f3:ad:ad:e4:e6:99:cf:80:74:
         0d:bf:2e:90:f0:42:29:a2:87:fd:63:bb:a9:83:92:0d:7a:9a:
         4f:81:52:f7:1f:d2:c7:f7:cd:1c:b6:a9:12:51:0a:ec:fa:94:
         a7:1e:2e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:40:47 2026 by rpki-client