Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3332203d3e20323731343130.roa
File:                     323830343a376231383a3a2f33322d3332203d3e20323731343130.roa (raw, json)
Hash identifier:          Y9yPUEKx/zRYyzVp0UfNC77CCrvi3Xime9QmXVNYY8w=
Subject key identifier:   AF:E7:C7:B6:4A:FC:36:C9:C0:F4:40:BF:CE:24:97:79:92:44:CA:07
Certificate issuer:       /CN=FF33EAB53E62DEA5F72C256D6AD186458E2EA636
Certificate serial:       14DABF5F2C8908549A5FE6B90BDF799C97AB4C59
Authority key identifier: FF:33:EA:B5:3E:62:DE:A5:F7:2C:25:6D:6A:D1:86:45:8E:2E:A6:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3332203d3e20323731343130.roa
Signing time:             Tue 07 Jul 2026 11:36:10 +0000
ROA not before:           Tue 07 Jul 2026 11:31:10 +0000
ROA not after:            Tue 06 Jul 2027 11:36:10 +0000
asID:                     271410
IP address blocks:        2804:7b18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.crl
                          rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:da:bf:5f:2c:89:08:54:9a:5f:e6:b9:0b:df:79:9c:97:ab:4c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF33EAB53E62DEA5F72C256D6AD186458E2EA636
        Validity
            Not Before: Jul  7 11:31:10 2026 GMT
            Not After : Jul  6 11:36:10 2027 GMT
        Subject: CN=AFE7C7B64AFC36C9C0F440BFCE2497799244CA07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:e0:72:d9:c0:96:c2:c5:6f:fa:3d:1f:98:
                    41:f4:60:37:2e:57:b5:c5:76:a5:2b:9f:25:1b:98:
                    cc:0d:d9:e0:11:5e:7a:97:99:5f:6a:82:05:9a:f6:
                    1c:d0:eb:d7:76:f6:ae:5d:c5:b0:58:22:f5:ea:0a:
                    a2:b6:8f:95:62:4a:66:84:fc:6b:f9:66:03:bd:3e:
                    96:f3:a7:c9:66:29:69:75:ff:7e:a0:04:37:ae:0a:
                    8e:dc:7f:70:22:9c:ca:9c:0a:6b:0c:52:1a:93:2f:
                    86:9a:89:7b:11:39:09:d0:69:28:a8:f1:5d:55:b7:
                    27:4a:0c:8d:bb:8e:0e:02:93:c7:e4:82:4f:28:d6:
                    7f:03:32:41:36:a7:e1:ed:a5:e6:a9:f4:f8:17:9a:
                    1e:d8:fa:f7:bd:aa:2b:07:fe:3e:80:01:69:24:2d:
                    d1:08:51:73:36:ff:6b:f2:a3:48:6e:98:49:2b:0d:
                    7d:40:2b:10:ec:8e:18:73:b9:e6:11:20:87:f2:7c:
                    af:04:2f:25:b0:af:93:67:e5:2d:9e:21:1b:9e:fc:
                    59:26:c7:95:18:bf:7c:91:b3:95:f2:54:15:da:0c:
                    9f:08:9d:0e:c9:0d:7e:24:f3:86:3b:ac:86:6e:71:
                    23:65:bc:8a:99:11:bc:7d:94:da:5d:52:8b:62:35:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E7:C7:B6:4A:FC:36:C9:C0:F4:40:BF:CE:24:97:79:92:44:CA:07
            X509v3 Authority Key Identifier:
                keyid:FF:33:EA:B5:3E:62:DE:A5:F7:2C:25:6D:6A:D1:86:45:8E:2E:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/323830343a376231383a3a2f33322d3332203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:88:c0:71:8f:cc:de:a6:0f:18:79:ed:34:10:ad:cc:da:d9:
         43:69:9b:28:83:a2:6b:db:81:51:a8:c1:4d:bf:c0:83:cb:aa:
         77:e4:00:9c:38:0c:77:ba:79:a6:19:be:bf:bf:61:ae:0e:6c:
         50:5d:e6:5d:94:2e:9a:dc:7a:5c:c3:b5:54:7d:c9:ad:fc:e2:
         2d:1c:e0:39:6a:46:f6:1c:1c:01:ae:5b:45:6b:9d:fb:36:56:
         85:be:d3:62:ed:0b:00:06:c6:ff:6b:6c:c9:ac:9c:e6:99:2e:
         8b:ca:55:b1:2f:3c:66:e5:a4:e7:57:dd:da:af:cf:70:b6:82:
         38:df:a6:52:84:b9:8e:15:dd:a8:2d:2c:f0:53:0b:27:1b:3b:
         7f:28:db:42:bc:a5:78:37:cd:1e:fb:01:17:05:fc:10:0c:2f:
         81:83:da:f5:32:f2:b9:a4:41:83:5a:be:68:cb:e0:dd:94:bc:
         e1:70:01:10:0c:d7:65:74:3f:8a:a4:7d:82:4f:a1:41:98:97:
         fc:38:22:99:9b:bb:bd:e8:ff:f1:4a:59:00:d2:00:89:41:83:
         6a:7e:99:d7:37:e5:62:42:c9:af:a0:d2:b5:8f:87:e2:b6:8d:
         da:34:cf:50:c7:68:e9:36:6e:81:cd:7b:30:72:59:30:6d:55:
         ec:78:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:56 2026 by rpki-client