Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa
File:                     323830343a316132633a3a2f33322d3332203d3e203631383432.roa (raw, json)
Hash identifier:          evA4SJLFGY5+g/Oz8s+3Ci9qxUiGCjH+4UCT9q7GEz8=
Subject key identifier:   36:B3:AF:50:69:29:68:A4:91:D9:74:43:84:CF:92:FA:BF:46:DF:E0
Certificate issuer:       /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial:       6C87A083B316AD9B32497E06078822A5C1974AE6
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa
Signing time:             Fri 10 Jul 2026 13:00:00 +0000
ROA not before:           Fri 10 Jul 2026 12:55:00 +0000
ROA not after:            Fri 09 Jul 2027 13:00:00 +0000
asID:                     61842
IP address blocks:        2804:1a2c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
                          rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:a0:83:b3:16:ad:9b:32:49:7e:06:07:88:22:a5:c1:97:4a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
        Validity
            Not Before: Jul 10 12:55:00 2026 GMT
            Not After : Jul  9 13:00:00 2027 GMT
        Subject: CN=36B3AF50692968A491D9744384CF92FABF46DFE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e0:59:6f:b4:9b:d2:5a:a1:63:7b:7c:26:3a:
                    5b:55:50:f3:c9:15:65:09:59:93:07:2e:21:64:ec:
                    88:7c:26:19:ae:7c:b5:cc:e2:a9:28:77:35:3b:85:
                    18:aa:5a:9a:16:c0:a4:cb:8c:ef:e7:ad:00:82:fa:
                    cb:bf:e6:e5:4d:cd:b6:dc:59:50:6c:b1:25:a5:31:
                    fe:f5:65:67:71:9d:a9:e7:39:33:fa:43:5c:9e:59:
                    d7:16:d0:5a:74:7d:ff:63:d7:5a:16:12:5a:88:95:
                    75:a7:00:95:d1:2b:09:79:36:65:80:74:58:4e:94:
                    98:1e:74:9b:b1:f3:89:d5:20:27:fa:f0:b7:17:cb:
                    f1:0a:d6:dc:18:c6:1b:1a:18:2e:8b:fb:bd:2c:05:
                    a1:8a:15:a4:97:40:35:5f:3a:3f:8b:ce:f5:b0:12:
                    74:c6:4a:1d:31:15:c2:11:c6:c7:8b:07:5b:0e:41:
                    08:80:23:c7:31:ec:bb:f6:df:b1:b3:88:10:3c:9f:
                    bd:23:8c:f9:89:6b:0a:0f:21:8c:f8:06:bb:87:31:
                    06:18:45:ee:be:82:de:43:97:eb:73:1c:bc:f1:a2:
                    cf:ca:ba:69:10:0b:a7:4f:64:95:b2:c7:e6:56:19:
                    0d:7c:4e:08:57:47:27:87:c4:65:63:41:f7:2b:36:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:AF:50:69:29:68:A4:91:D9:74:43:84:CF:92:FA:BF:46:DF:E0
            X509v3 Authority Key Identifier:
                keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:d0:53:a8:f9:e6:bc:6a:6b:1c:f8:82:0e:0c:e6:e3:e9:87:
         16:8c:b7:04:de:c0:8f:b1:a4:d9:9d:bd:82:0f:de:41:48:3f:
         77:94:d9:e1:ec:ea:51:1f:79:4d:17:e0:8f:ba:b8:9c:d1:9f:
         9b:51:3e:dc:e6:4c:be:cb:ed:a3:d3:1a:cf:e0:2d:14:9d:c8:
         6f:69:f3:e4:e4:9c:f4:cb:c1:a4:04:00:21:c0:c9:58:bc:bc:
         32:98:5f:c5:dc:88:55:89:ae:ee:b6:3a:5f:17:5f:9b:4d:60:
         5f:d0:d1:79:3c:e4:ff:da:12:97:b8:c0:1d:ea:96:a3:9e:94:
         dd:55:f4:c9:11:7c:49:6c:70:d6:0e:82:9c:0a:26:28:38:6a:
         0e:da:73:9f:06:c7:49:f1:86:d1:d7:28:bb:f5:ef:b1:89:8d:
         f3:b4:87:2c:c0:d0:5f:1e:a0:80:ec:50:6a:de:ab:c6:cc:c6:
         a6:2c:97:46:ce:71:2c:ca:12:dd:62:02:a2:be:4c:dc:cf:fb:
         e6:51:94:76:94:a5:69:69:06:86:72:dd:db:e6:e5:55:9f:b3:
         01:25:2b:20:ec:a2:f4:a6:b0:cf:bb:69:20:30:8a:a1:cd:ea:
         71:f2:5b:03:04:86:09:45:ef:87:6f:cb:ef:78:00:4f:fc:4b:
         ac:90:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:21:47 2026 by rpki-client