Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/323830343a386335633a3a2f33322d3333203d3e20323733373938.roa
File:                     323830343a386335633a3a2f33322d3333203d3e20323733373938.roa (raw, json)
Hash identifier:          WdvlZJYnuV3ctknqC4TYQZel7AhcoGe0dSIThxGa0zI=
Subject key identifier:   B2:F8:A6:5C:CD:A5:E1:0E:09:4A:66:86:78:71:B8:A7:47:79:79:A1
Certificate issuer:       /CN=7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019
Certificate serial:       0983D149846CA1722C99BF989A3EEA546901AA68
Authority key identifier: 7B:7C:AE:33:EB:E3:97:5B:E8:99:71:E3:BD:0E:EE:6E:B2:21:C0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/323830343a386335633a3a2f33322d3333203d3e20323733373938.roa
Signing time:             Tue 15 Sep 2026 21:40:56 +0000
ROA not before:           Tue 15 Sep 2026 21:35:56 +0000
ROA not after:            Tue 14 Sep 2027 21:40:56 +0000
asID:                     273798
IP address blocks:        2804:8c5c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.crl
                          rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 11:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:83:d1:49:84:6c:a1:72:2c:99:bf:98:9a:3e:ea:54:69:01:aa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019
        Validity
            Not Before: Sep 15 21:35:56 2026 GMT
            Not After : Sep 14 21:40:56 2027 GMT
        Subject: CN=B2F8A65CCDA5E10E094A66867871B8A7477979A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:b0:c0:0f:0b:f3:8c:71:43:b3:7f:43:75:
                    09:5a:67:75:e5:b9:0a:1f:d8:44:ee:26:74:7a:8c:
                    ad:83:3d:f9:19:78:ac:27:71:ca:de:2a:fd:94:bf:
                    9c:fd:97:d9:c5:75:a0:a7:ed:27:03:e7:4b:22:8a:
                    63:0f:e1:c8:80:8e:cb:03:22:ea:8f:6d:a4:ee:bc:
                    c5:c3:5b:9c:ab:37:db:a2:a1:33:62:12:a7:75:cf:
                    1e:1c:47:84:30:c5:06:e7:ee:61:5c:29:18:4e:b0:
                    7a:f0:55:1a:23:29:a2:b5:00:b7:83:df:0a:be:57:
                    06:8d:95:63:8c:be:9a:e3:3f:67:84:6b:c5:a0:9f:
                    36:f2:71:be:fd:29:76:6f:78:06:8f:2a:b3:ca:82:
                    c9:f7:59:5a:e4:f8:66:0b:38:ea:78:0d:52:04:48:
                    fe:60:d5:1c:ed:61:7c:3d:5d:aa:21:97:98:ba:c3:
                    76:f8:e7:d0:f9:39:83:61:68:ac:ed:fe:29:bb:ec:
                    60:60:43:95:3b:1e:d9:23:c0:ff:8d:4c:6f:8c:13:
                    78:65:e0:00:db:6d:78:7d:0b:72:b5:02:e4:ef:c5:
                    77:49:cd:80:a3:ac:07:e8:c3:ba:01:4e:61:37:e5:
                    48:28:5a:a6:e0:c4:b7:ac:0c:da:a4:c8:ba:4b:bb:
                    96:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F8:A6:5C:CD:A5:E1:0E:09:4A:66:86:78:71:B8:A7:47:79:79:A1
            X509v3 Authority Key Identifier:
                keyid:7B:7C:AE:33:EB:E3:97:5B:E8:99:71:E3:BD:0E:EE:6E:B2:21:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/323830343a386335633a3a2f33322d3333203d3e20323733373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:9b:36:5e:59:67:0d:5f:50:bc:32:86:85:b8:fb:05:7d:75:
         06:89:c5:58:25:54:a0:4a:d2:0e:5c:9a:9c:22:45:92:a3:2c:
         ee:f3:d6:98:f9:88:0b:73:20:d7:8d:67:8b:82:58:11:60:fb:
         a0:88:1c:94:d3:b6:5a:6e:17:67:54:73:b9:be:a2:7b:6e:a3:
         aa:e6:8c:f1:8e:cc:b3:fb:0a:c7:84:61:68:c3:52:af:11:b7:
         f4:95:87:38:eb:e4:a4:ac:48:33:c4:93:67:84:df:44:c4:04:
         c8:99:fd:67:ce:d5:98:06:25:b4:60:f0:36:84:64:64:31:75:
         8e:2b:ed:d3:58:f2:a6:d4:d1:aa:5e:80:71:fd:ac:47:f1:36:
         e6:90:af:7a:74:0a:d6:ef:f6:0d:64:ff:ec:ea:ee:30:36:30:
         fb:e8:f1:84:2b:f1:fa:e9:06:5a:e8:08:6f:0f:97:11:9f:f7:
         e4:49:d3:b5:2e:e5:b1:73:38:70:ea:09:43:9a:e2:ca:b5:2a:
         cd:30:9f:1f:4f:a3:50:bb:6e:44:f3:43:08:29:00:3b:50:42:
         df:8c:5b:c5:dd:08:82:60:a6:01:71:05:0b:34:89:52:59:58:
         26:c3:98:6f:c8:e6:ca:2b:12:54:74:0b:0f:d0:cd:2c:91:69:
         b1:a4:87:7d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCYPRSYRsoXIsmb+Ymj7qVGkBqmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I3Q0FFMzNFQkUzOTc1QkU4OTk3MUUzQkQwRUVFNkVC
MjIxQzAxOTAeFw0yNjA5MTUyMTM1NTZaFw0yNzA5MTQyMTQwNTZaMDMxMTAvBgNV
BAMTKEIyRjhBNjVDQ0RBNUUxMEUwOTRBNjY4Njc4NzFCOEE3NDc3OTc5QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjbrDADwvzjHFDs39DdQlaZ3Xl
uQof2ETuJnR6jK2DPfkZeKwnccreKv2Uv5z9l9nFdaCn7ScD50siimMP4ciAjssD
IuqPbaTuvMXDW5yrN9uioTNiEqd1zx4cR4QwxQbn7mFcKRhOsHrwVRojKaK1ALeD
3wq+VwaNlWOMvprjP2eEa8Wgnzbycb79KXZveAaPKrPKgsn3WVrk+GYLOOp4DVIE
SP5g1RztYXw9Xaohl5i6w3b459D5OYNhaKzt/im77GBgQ5U7HtkjwP+NTG+ME3hl
4ADbbXh9C3K1AuTvxXdJzYCjrAfow7oBTmE35UgoWqbgxLesDNqkyLpLu5YjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsvimXM2l4Q4JSmaGeHG4p0d5eaEwHwYDVR0j
BBgwFoAUe3yuM+vjl1vomXHjvQ7ubrIhwBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJINk1hMlNIRmdCdHJDRW41QWtHN05DWExDa2dBR3pIcmFSTEhpbWs1
Y3EvMC83QjdDQUUzM0VCRTM5NzVCRTg5OTcxRTNCRDBFRUU2RUIyMjFDMDE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCN0NBRTMzRUJFMzk3NUJF
ODk5NzFFM0JEMEVFRTZFQjIyMUMwMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UySDZNYTJTSEZnQnRyQ0VuNUFrRzdOQ1hMQ2tnQUd6SHJhUkxIaW1rNWNxLzAv
MzIzODMwMzQzYTM4NjMzNTYzM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMz
MzczOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASMXDANBgkqhkiG9w0BAQsFAAOCAQEAkZs2Xlln
DV9QvDKGhbj7BX11BonFWCVUoErSDlyanCJFkqMs7vPWmPmIC3Mg141ni4JYEWD7
oIgclNO2Wm4XZ1Rzub6ie26jquaM8Y7Ms/sKx4RhaMNSrxG39JWHOOvkpKxIM8ST
Z4TfRMQEyJn9Z87VmAYltGDwNoRkZDF1jivt01jyptTRql6Acf2sR/E25pCvenQK
1u/2DWT/7OruMDYw++jxhCvx+ukGWugIbw+XEZ/35EnTtS7lsXM4cOoJQ5riyrUq
zTCfH0+jULtuRPNDCCkAO1BC34xbxd0IgmCmAXEFCzSJUllYJsOYb8jmyisSVHQL
D9DNLJFpsaSHfQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:01:46 2026 by rpki-client