Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa
File:                     323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa (raw, json)
Hash identifier:          dmAoazwJlZV0wviG1cs+TmIgHUAbxGZLSFOyIbtQGmA=
Subject key identifier:   5F:2B:A8:40:4B:E7:AD:1E:62:92:A1:03:63:6B:92:F1:E7:D2:53:7A
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       49B2FC289AAF2F01EB51A1639FE7321701DA5901
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa
Signing time:             Mon 06 Jul 2026 16:03:25 +0000
ROA not before:           Mon 06 Jul 2026 15:58:25 +0000
ROA not after:            Mon 05 Jul 2027 16:03:25 +0000
asID:                     263541
IP address blocks:        2804:1398:3e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b2:fc:28:9a:af:2f:01:eb:51:a1:63:9f:e7:32:17:01:da:59:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Jul  6 15:58:25 2026 GMT
            Not After : Jul  5 16:03:25 2027 GMT
        Subject: CN=5F2BA8404BE7AD1E6292A103636B92F1E7D2537A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6d:ea:0a:19:ea:02:f2:5a:88:78:1e:69:dd:
                    cc:d8:b2:1b:c9:98:d6:1b:fd:45:0e:4f:c4:9f:c1:
                    07:27:9e:e5:d0:c7:3e:f7:ba:a9:de:7c:fa:82:38:
                    d0:99:2b:f0:f9:a9:08:76:4d:c9:bb:79:5d:3c:a0:
                    f3:30:02:7f:f5:0d:00:3f:43:48:4b:41:e6:82:32:
                    f1:b1:88:8d:e1:d8:f3:81:44:f7:32:08:fc:b5:c8:
                    ce:4d:81:08:04:96:97:f7:0a:8a:58:12:b1:4d:c8:
                    77:f8:d0:74:84:24:12:fd:84:75:fb:fd:8d:72:eb:
                    c4:40:da:70:df:3f:ce:2e:42:60:b4:2a:5c:bb:bf:
                    78:a1:db:14:1e:23:84:69:4f:65:21:7c:0d:06:1a:
                    6c:48:15:9a:01:3a:d3:63:16:9f:c8:eb:6b:37:49:
                    37:8a:a0:00:a7:61:2f:19:9d:88:5c:ae:00:45:42:
                    10:97:93:12:d3:03:f1:f7:ca:65:d8:69:41:47:72:
                    e6:d3:af:e9:99:0b:b1:b8:1c:65:00:49:91:dc:c5:
                    c9:3c:62:5b:42:d8:3c:c8:da:b2:42:cb:69:cc:61:
                    1f:8d:ba:ae:c6:e3:cd:d5:20:90:69:02:32:99:46:
                    30:a8:4f:c8:0f:d2:ff:cf:16:db:fc:a8:88:da:f6:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2B:A8:40:4B:E7:AD:1E:62:92:A1:03:63:6B:92:F1:E7:D2:53:7A
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:3e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:51:75:b6:49:35:01:b1:86:17:60:a4:9b:4d:e4:d1:8c:
         e1:ab:d9:65:e5:0b:5d:ab:92:89:b9:3d:16:75:77:4b:80:2b:
         44:6a:99:1d:83:27:61:c8:c1:ae:da:5c:17:c2:7a:6a:60:55:
         be:79:f8:b9:30:1a:eb:8e:2f:9b:ae:7b:df:81:da:b2:8a:37:
         8a:59:6a:78:a6:80:95:f5:f2:86:71:81:07:e0:f7:2e:53:69:
         ee:64:c5:2d:d4:6b:17:ed:e9:26:68:0f:22:2f:bf:54:ff:72:
         35:4d:d6:50:4d:ad:18:89:c3:bf:2b:13:20:22:0c:d5:3a:a1:
         16:86:9a:68:c0:32:e7:64:c2:6b:43:10:0c:42:87:e8:1d:00:
         0b:7f:f0:d3:45:00:0a:7c:34:4c:43:49:f2:6a:43:fc:ba:5c:
         31:12:8b:dc:fd:4e:5e:14:05:25:e9:5a:04:15:a0:26:71:27:
         a7:c3:98:17:c1:36:c9:7e:4f:98:3a:f6:94:c0:5e:bc:3b:a2:
         57:63:93:c1:49:89:9a:2c:a0:3c:df:3e:62:05:b7:fa:df:3d:
         96:74:82:fe:a0:af:01:e7:23:8a:2c:23:c8:5b:eb:f0:95:26:
         08:e8:4a:10:34:be:47:40:52:15:1c:e5:51:e7:5f:97:18:25:
         09:6d:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:39:57 2026 by rpki-client