Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/323830343a3739303a3a2f33322d3438203d3e203238363533.roa
File:                     323830343a3739303a3a2f33322d3438203d3e203238363533.roa (raw, json)
Hash identifier:          tGeBAw14xpbnKfUlQY+mhlgIIUQSBTi+yMpUp+UiIQs=
Subject key identifier:   0F:0E:BD:D4:31:46:F1:B6:39:41:65:50:18:B1:B0:2E:0C:00:3B:70
Certificate issuer:       /CN=667E147F41B8931495CA63574998633ECA590500
Certificate serial:       34D3A1B4BC2199599605F0D12870A6781EFECD40
Authority key identifier: 66:7E:14:7F:41:B8:93:14:95:CA:63:57:49:98:63:3E:CA:59:05:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/323830343a3739303a3a2f33322d3438203d3e203238363533.roa
Signing time:             Fri 24 Jul 2026 18:28:13 +0000
ROA not before:           Fri 24 Jul 2026 18:23:13 +0000
ROA not after:            Fri 23 Jul 2027 18:28:13 +0000
asID:                     28653
IP address blocks:        2804:790::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.crl
                          rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d3:a1:b4:bc:21:99:59:96:05:f0:d1:28:70:a6:78:1e:fe:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667E147F41B8931495CA63574998633ECA590500
        Validity
            Not Before: Jul 24 18:23:13 2026 GMT
            Not After : Jul 23 18:28:13 2027 GMT
        Subject: CN=0F0EBDD43146F1B63941655018B1B02E0C003B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:31:57:f8:48:52:d0:6a:b3:c9:de:59:65:
                    a0:63:58:a3:42:ca:49:5e:86:f2:4a:02:5f:8c:07:
                    e8:c2:5d:58:8f:b0:65:61:8f:2e:8c:a6:4e:20:a3:
                    d3:cc:41:70:f0:b0:2d:ee:16:bd:b9:4e:8a:6a:58:
                    ca:32:72:3c:ea:7f:aa:62:4c:7c:66:94:5b:80:ba:
                    98:d8:91:06:6f:ee:d5:3c:ef:ec:d1:47:d4:bc:cf:
                    b1:b5:5d:7a:59:ce:a3:24:fb:ec:09:a7:5e:18:7d:
                    ad:34:d0:7b:b1:a0:a1:35:27:0e:23:07:2d:a1:e4:
                    97:50:19:8d:e4:14:a2:e9:90:7d:0c:ee:24:04:c7:
                    ea:21:0c:2f:ef:2e:db:9e:9d:a5:a5:37:4f:29:33:
                    7a:e0:dd:be:92:13:1f:12:cb:a8:96:70:9f:76:20:
                    cb:38:22:03:92:45:e9:dd:4d:4d:37:52:84:b1:0b:
                    d5:54:32:79:13:46:51:74:f8:12:6e:05:49:e5:5b:
                    ee:96:a4:24:68:4c:95:d7:a0:25:42:34:4f:b5:53:
                    5f:4c:e5:49:b1:14:0a:97:c5:01:5e:49:1c:c3:67:
                    2c:46:39:04:ff:bb:ac:2c:15:39:8d:fe:89:00:bc:
                    dd:dc:88:6a:0a:0b:26:dc:3e:5d:ba:1b:6c:b2:6e:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0E:BD:D4:31:46:F1:B6:39:41:65:50:18:B1:B0:2E:0C:00:3B:70
            X509v3 Authority Key Identifier:
                keyid:66:7E:14:7F:41:B8:93:14:95:CA:63:57:49:98:63:3E:CA:59:05:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/323830343a3739303a3a2f33322d3438203d3e203238363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:790::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:50:eb:65:6b:0b:3f:55:6f:e9:60:0d:15:e4:ad:48:95:d1:
         27:68:62:f7:de:57:cf:fe:0d:81:bc:f0:d3:9d:c2:4b:fb:36:
         a0:f1:3c:3e:e3:98:88:9e:35:ed:8b:24:5f:77:e1:fe:1b:94:
         d4:00:12:c7:59:30:82:58:9d:ef:a7:3d:e4:60:8e:ae:0d:a8:
         f6:0f:b7:e1:88:d5:4f:3e:0e:e4:2f:46:48:1a:ec:e3:17:b3:
         d0:50:c6:b2:4f:f6:6d:86:6b:7a:b8:67:80:14:24:4c:80:a9:
         ca:ec:36:1f:7c:7c:72:96:0b:a8:d8:98:ee:a8:32:e9:a3:ad:
         63:5b:d2:2e:a4:b3:cc:7d:0d:58:69:84:e7:b1:cf:50:97:bb:
         dc:ca:7b:87:b4:91:06:00:f0:ef:b2:4b:14:f0:8c:24:9c:70:
         47:3e:c2:a4:06:31:3b:9c:1a:e3:a8:e1:e8:82:a6:0b:e1:eb:
         a5:86:f9:78:cb:08:96:e1:45:29:32:d0:0a:e6:03:5f:13:19:
         eb:ae:b9:5d:b5:da:3e:8c:47:9a:76:2f:b8:9a:70:4f:71:30:
         88:84:52:e5:43:22:9c:7c:44:18:65:37:01:2d:d9:8b:dc:93:
         07:60:6f:8c:cd:ea:10:6e:a7:e7:1e:45:f3:00:91:3b:83:a0:
         ec:62:1a:b9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUNNOhtLwhmVmWBfDRKHCmeB7+zUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY3RTE0N0Y0MUI4OTMxNDk1Q0E2MzU3NDk5ODYzM0VD
QTU5MDUwMDAeFw0yNjA3MjQxODIzMTNaFw0yNzA3MjMxODI4MTNaMDMxMTAvBgNV
BAMTKDBGMEVCREQ0MzE0NkYxQjYzOTQxNjU1MDE4QjFCMDJFMEMwMDNCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgzFX+EhS0Gqzyd5ZZaBjWKNC
yklehvJKAl+MB+jCXViPsGVhjy6Mpk4go9PMQXDwsC3uFr25TopqWMoycjzqf6pi
THxmlFuAupjYkQZv7tU87+zRR9S8z7G1XXpZzqMk++wJp14Yfa000HuxoKE1Jw4j
By2h5JdQGY3kFKLpkH0M7iQEx+ohDC/vLtuenaWlN08pM3rg3b6SEx8Sy6iWcJ92
IMs4IgOSRendTU03UoSxC9VUMnkTRlF0+BJuBUnlW+6WpCRoTJXXoCVCNE+1U19M
5UmxFAqXxQFeSRzDZyxGOQT/u6wsFTmN/okAvN3ciGoKCybcPl26G2yybtLBAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUDw691DFG8bY5QWVQGLGwLgwAO3AwHwYDVR0j
BBgwFoAUZn4Uf0G4kxSVymNXSZhjPspZBQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uQ2JwOHY3aURNdXJnVnRBRHJNMTd3Z1RKdUZpb3pTa2tzb3h2NTRB
alAvMC82NjdFMTQ3RjQxQjg5MzE0OTVDQTYzNTc0OTk4NjMzRUNBNTkwNTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2N0UxNDdGNDFCODkzMTQ5
NUNBNjM1NzQ5OTg2MzNFQ0E1OTA1MDAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkNicDh2N2lETXVyZ1Z0QURyTTE3d2dUSnVGaW96U2trc294djU0QWpQLzAv
MzIzODMwMzQzYTM3MzkzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzNjM1
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAeQMA0GCSqGSIb3DQEBCwUAA4IBAQAvUOtlaws/VW/p
YA0V5K1IldEnaGL33lfP/g2BvPDTncJL+zag8Tw+45iInjXtiyRfd+H+G5TUABLH
WTCCWJ3vpz3kYI6uDaj2D7fhiNVPPg7kL0ZIGuzjF7PQUMayT/Zthmt6uGeAFCRM
gKnK7DYffHxylguo2JjuqDLpo61jW9IupLPMfQ1YaYTnsc9Ql7vcynuHtJEGAPDv
sksU8IwknHBHPsKkBjE7nBrjqOHogqYL4eulhvl4ywiW4UUpMtAK5gNfExnrrrld
tdo+jEeadi+4mnBPcTCIhFLlQyKcfEQYZTcBLdmL3JMHYG+MzeoQbqfnHkXzAJE7
g6DsYhq5
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:48:18 2026 by rpki-client