Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3332203d3e20323637353532.roa
File:                     323830343a343332383a3a2f33322d3332203d3e20323637353532.roa (raw, json)
Hash identifier:          /HreQmkO6E0txSl7Jda3WQxE+hrYMs5iR3GviutDcS8=
Subject key identifier:   51:6E:10:D1:43:B0:3E:06:90:09:FB:3B:17:BC:A3:A9:A7:74:E1:CB
Certificate issuer:       /CN=66F2AAD200D9E7BF577BA3DE5A46D415C8075697
Certificate serial:       1FBDB8EE80C2A77192E9F6B95BA675F37689271B
Authority key identifier: 66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3332203d3e20323637353532.roa
Signing time:             Wed 15 Jul 2026 16:50:56 +0000
ROA not before:           Wed 15 Jul 2026 16:45:56 +0000
ROA not after:            Wed 14 Jul 2027 16:50:56 +0000
asID:                     267552
IP address blocks:        2804:4328::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.crl
                          rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bd:b8:ee:80:c2:a7:71:92:e9:f6:b9:5b:a6:75:f3:76:89:27:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F2AAD200D9E7BF577BA3DE5A46D415C8075697
        Validity
            Not Before: Jul 15 16:45:56 2026 GMT
            Not After : Jul 14 16:50:56 2027 GMT
        Subject: CN=516E10D143B03E069009FB3B17BCA3A9A774E1CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:4a:a1:63:d3:d2:ab:9a:06:ae:57:aa:02:
                    99:22:30:a5:8a:d7:07:1e:45:73:cc:78:7a:41:8e:
                    44:53:20:01:a5:45:c0:34:c2:4e:c1:24:67:11:00:
                    c5:9f:03:ad:bd:37:2c:4d:56:8c:2b:da:ba:b9:7e:
                    a6:58:a6:58:c6:a3:b5:88:1c:86:78:ec:74:a8:74:
                    6b:e1:09:2d:59:ff:ae:1f:87:81:40:52:e5:83:6b:
                    60:dc:ae:b7:ff:10:11:1e:da:40:80:aa:83:6b:b0:
                    41:23:e8:81:d2:dd:a2:e3:08:03:ce:74:e0:3c:22:
                    37:21:86:30:ad:b3:e9:8d:fa:4b:57:d3:98:2e:9d:
                    89:cf:36:c6:dd:19:43:b4:17:7c:1e:bf:c7:fd:fb:
                    af:ba:41:f8:00:92:c9:b0:db:7e:c6:26:4d:5d:07:
                    65:29:83:91:c0:a5:b5:ae:34:5a:d4:e1:5d:3c:23:
                    1c:43:4f:1a:76:b2:8e:74:cf:0a:3b:7e:b0:cd:73:
                    91:dc:0e:ab:43:71:7c:02:4e:41:bf:38:20:5a:2d:
                    bf:4e:14:8c:93:1c:84:e7:d9:a1:00:09:44:fb:76:
                    20:3a:fe:d9:21:e2:a3:af:70:8d:55:f9:f1:30:e4:
                    e8:bf:08:46:a0:2e:cb:13:98:6a:93:bb:d0:b1:d2:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6E:10:D1:43:B0:3E:06:90:09:FB:3B:17:BC:A3:A9:A7:74:E1:CB
            X509v3 Authority Key Identifier:
                keyid:66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a3a2f33322d3332203d3e20323637353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4328::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:7f:4a:0a:74:9c:a9:4e:61:07:24:a0:56:dc:14:6e:3b:ee:
         85:20:ad:28:9f:b2:3e:2f:f4:ce:da:39:90:12:72:b4:55:e6:
         f3:35:75:90:f4:45:20:cf:45:be:e4:13:49:37:82:ae:26:d8:
         c4:35:ec:6b:bb:cc:2c:c5:de:84:8a:e2:00:36:ec:2e:8f:af:
         02:12:1b:8d:0a:46:c4:8c:ab:02:75:2f:7f:82:e9:3f:d1:99:
         88:a4:19:d5:21:64:d4:e8:0a:07:94:46:aa:96:83:a0:c9:36:
         ad:e6:d5:fe:5e:77:47:43:64:53:8d:46:bc:94:5f:bb:37:d5:
         4e:66:bd:96:55:7e:22:c0:97:58:8b:51:2b:c4:18:fb:78:d0:
         1c:9e:f3:bc:1b:37:c2:05:0a:41:12:38:f5:e0:1a:e6:56:fa:
         27:2c:ba:77:ed:64:2c:35:95:5e:1f:8e:db:3a:22:ca:97:ec:
         0e:39:04:ca:e5:57:24:6c:c0:0f:8a:25:11:0f:73:1f:e9:b6:
         b8:5c:58:46:25:f5:59:88:20:63:2b:75:38:a1:94:51:43:15:
         34:4a:06:80:f9:10:48:88:98:c8:92:84:f1:ef:e7:5f:dc:ff:
         01:8e:36:a8:92:1d:8b:c5:85:73:7e:36:e5:6f:9a:f2:99:a3:
         50:1f:e8:af
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH7247oDCp3GS6fa5W6Z183aJJxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGMkFBRDIwMEQ5RTdCRjU3N0JBM0RFNUE0NkQ0MTVD
ODA3NTY5NzAeFw0yNjA3MTUxNjQ1NTZaFw0yNzA3MTQxNjUwNTZaMDMxMTAvBgNV
BAMTKDUxNkUxMEQxNDNCMDNFMDY5MDA5RkIzQjE3QkNBM0E5QTc3NEUxQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6UqhY9PSq5oGrleqApkiMKWK
1wceRXPMeHpBjkRTIAGlRcA0wk7BJGcRAMWfA629NyxNVowr2rq5fqZYpljGo7WI
HIZ47HSodGvhCS1Z/64fh4FAUuWDa2Dcrrf/EBEe2kCAqoNrsEEj6IHS3aLjCAPO
dOA8IjchhjCts+mN+ktX05gunYnPNsbdGUO0F3wev8f9+6+6QfgAksmw237GJk1d
B2Upg5HApbWuNFrU4V08IxxDTxp2so50zwo7frDNc5HcDqtDcXwCTkG/OCBaLb9O
FIyTHITn2aEACUT7diA6/tkh4qOvcI1V+fEw5Oi/CEagLssTmGqTu9Cx0v87AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUW4Q0UOwPgaQCfs7F7yjqad04cswHwYDVR0j
BBgwFoAUZvKq0gDZ579Xe6PeWkbUFcgHVpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNzUnRTOGtzOTRVMnNnMWV3QnBxQVJ2Y21zRDhDZUhRcnozQ3FlRW5a
aHAvMC82NkYyQUFEMjAwRDlFN0JGNTc3QkEzREU1QTQ2RDQxNUM4MDc1Njk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RjJBQUQyMDBEOUU3QkY1
NzdCQTNERTVBNDZENDE1QzgwNzU2OTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jjc1J0Uzhrczk0VTJzZzFld0JwcUFSdmNtc0Q4Q2VIUXJ6M0NxZUVuWmhwLzAv
MzIzODMwMzQzYTM0MzMzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzUzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARDKDANBgkqhkiG9w0BAQsFAAOCAQEAw39KCnSc
qU5hBySgVtwUbjvuhSCtKJ+yPi/0zto5kBJytFXm8zV1kPRFIM9FvuQTSTeCribY
xDXsa7vMLMXehIriADbsLo+vAhIbjQpGxIyrAnUvf4LpP9GZiKQZ1SFk1OgKB5RG
qpaDoMk2rebV/l53R0NkU41GvJRfuzfVTma9llV+IsCXWItRK8QY+3jQHJ7zvBs3
wgUKQRI49eAa5lb6Jyy6d+1kLDWVXh+O2zoiypfsDjkEyuVXJGzAD4olEQ9zH+m2
uFxYRiX1WYggYyt1OKGUUUMVNEoGgPkQSIiYyJKE8e/nX9z/AY42qJIdi8WFc342
5W+a8pmjUB/orw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:58:40 2026 by rpki-client