Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa
File:                     323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa (raw, json)
Hash identifier:          6G6ZdwWKH2KfVefxQHT2OV2QJ2tU3xAPbwmnxEJgKII=
Subject key identifier:   5D:0C:58:10:10:15:07:01:73:C8:97:6E:F3:C3:2B:1B:D8:BF:FA:A8
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       2919447D0D53D600A3F604307709571FDA6EAB65
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa
Signing time:             Mon 06 Jul 2026 16:03:25 +0000
ROA not before:           Mon 06 Jul 2026 15:58:25 +0000
ROA not after:            Mon 05 Jul 2027 16:03:25 +0000
asID:                     263541
IP address blocks:        2804:1398:3f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:19:44:7d:0d:53:d6:00:a3:f6:04:30:77:09:57:1f:da:6e:ab:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Jul  6 15:58:25 2026 GMT
            Not After : Jul  5 16:03:25 2027 GMT
        Subject: CN=5D0C58101015070173C8976EF3C32B1BD8BFFAA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:e9:21:1f:da:47:fa:31:ec:3d:34:bb:d2:
                    50:15:ee:02:94:fc:a3:0f:7b:09:3c:6d:e7:8b:4f:
                    b9:db:b5:79:db:45:ec:ce:49:d8:e0:d5:52:83:5b:
                    d5:54:d3:4f:c9:3c:38:25:c7:76:35:ca:df:7c:32:
                    5c:04:b4:49:e6:66:c3:cd:19:e8:93:81:11:84:46:
                    03:94:f7:2b:14:14:8d:8f:cc:18:12:e4:d0:02:27:
                    9c:63:53:f5:59:36:61:74:6a:f4:4f:f5:ed:8c:f7:
                    55:d4:98:fc:f8:a5:12:61:cb:ae:ef:91:3a:88:d5:
                    bf:dc:37:de:3e:8d:ef:d8:57:9d:44:b8:12:e6:74:
                    bd:ae:7e:52:b1:31:cd:fc:9e:62:11:9b:a5:30:f0:
                    6d:f0:27:98:5f:00:b2:58:c4:e6:80:82:d1:ad:9b:
                    ac:c3:ce:5a:91:49:ed:6c:e2:27:aa:71:04:8a:cb:
                    d8:ef:ed:30:2b:01:d2:56:e4:68:f8:06:8c:ea:76:
                    4f:9e:9b:48:04:20:2f:fb:9a:49:4b:46:59:45:3a:
                    40:f0:d6:fc:d1:dc:bc:95:14:7e:44:61:6e:07:89:
                    0b:5d:5c:7a:16:d2:4c:96:e3:38:c2:55:99:e2:ae:
                    2f:e9:f5:c7:6b:b3:e5:b8:75:99:b2:b1:8b:0f:9b:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0C:58:10:10:15:07:01:73:C8:97:6E:F3:C3:2B:1B:D8:BF:FA:A8
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:9f:03:dd:cd:38:f0:ce:4f:52:80:76:3e:64:e8:20:45:1e:
         74:33:88:e3:ac:5f:76:76:f2:0a:56:37:1b:82:43:3f:25:53:
         f0:ce:ea:15:15:7a:c8:61:51:39:5c:ed:4c:4e:9e:0c:a5:96:
         5e:f8:28:75:e9:47:26:a4:b3:63:ea:fb:f4:35:79:17:7c:62:
         1b:41:af:95:d7:98:59:f8:93:96:e8:54:87:98:4f:2c:56:7b:
         ee:b3:e5:03:83:f6:ed:72:f9:5d:ae:dd:ce:cf:15:a4:cd:ac:
         f2:74:bf:4b:5f:1c:cf:4f:ff:05:00:13:52:23:77:39:7b:45:
         aa:73:ee:69:80:24:95:d2:f5:37:c6:f8:3f:5f:cc:c1:9e:04:
         b0:c4:45:83:2f:10:e1:72:7e:2b:ad:3a:6f:d4:d2:6d:39:8d:
         8f:0a:4d:d5:12:85:be:0e:b0:90:31:d5:15:30:12:77:85:62:
         3c:1f:30:c0:af:54:8e:6f:56:4a:e1:9c:90:34:d3:80:14:9a:
         2e:ff:04:10:da:b5:f5:4d:42:ed:35:57:5f:3d:91:f4:b0:00:
         53:bc:40:f1:ab:19:5d:d4:84:dd:0e:97:56:14:02:2d:45:48:
         7a:3f:4a:c5:0f:60:72:a7:25:e0:0f:30:35:75:97:41:e6:3e:
         09:2c:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:39:53 2026 by rpki-client