Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/323830343a373634303a3a2f33322d3332203d3e20323731303939.roa
File:                     323830343a373634303a3a2f33322d3332203d3e20323731303939.roa (raw, json)
Hash identifier:          TtdUKWZdSZxcwbJefVAQQL+NId4DY6OluLwxft8M2rg=
Subject key identifier:   7D:A6:CA:6F:AE:06:70:0C:11:40:AA:54:9B:77:17:E4:EA:C8:A3:41
Certificate issuer:       /CN=CA77E72CF3C2DA1DE08E65356718B3E49E8038E5
Certificate serial:       078E064DB09E8036D9B51A169E7326C2C5C11329
Authority key identifier: CA:77:E7:2C:F3:C2:DA:1D:E0:8E:65:35:67:18:B3:E4:9E:80:38:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/323830343a373634303a3a2f33322d3332203d3e20323731303939.roa
Signing time:             Thu 30 Apr 2026 18:56:01 +0000
ROA not before:           Thu 30 Apr 2026 18:51:01 +0000
ROA not after:            Thu 29 Apr 2027 18:56:01 +0000
asID:                     271099
IP address blocks:        2804:7640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl
                          rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8e:06:4d:b0:9e:80:36:d9:b5:1a:16:9e:73:26:c2:c5:c1:13:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA77E72CF3C2DA1DE08E65356718B3E49E8038E5
        Validity
            Not Before: Apr 30 18:51:01 2026 GMT
            Not After : Apr 29 18:56:01 2027 GMT
        Subject: CN=7DA6CA6FAE06700C1140AA549B7717E4EAC8A341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:41:10:b4:e8:10:3c:ed:63:66:88:da:08:
                    f0:c7:bc:b9:26:2c:a4:8e:89:23:1d:f9:ed:71:49:
                    fd:17:bb:33:82:62:bf:ec:e5:c7:86:6e:a8:25:d1:
                    28:99:54:ae:77:33:ef:0c:11:10:57:5b:5c:f3:bb:
                    21:43:67:35:3f:f5:41:e1:42:ad:56:89:19:76:c8:
                    c4:62:af:08:be:78:11:68:00:90:1b:0e:89:75:1a:
                    90:d9:0d:b9:7d:77:f4:ae:4c:25:f3:5b:7e:3e:61:
                    65:7e:ef:ac:57:35:16:4a:ab:e4:d8:89:c3:78:52:
                    2c:37:84:e9:f2:d4:b0:26:35:81:9e:0d:64:a9:4a:
                    1f:d7:6e:32:71:c2:72:bf:46:c6:73:f5:eb:f7:f8:
                    e0:42:58:48:37:63:a1:02:50:02:71:47:35:15:c5:
                    27:79:aa:dc:eb:10:dd:e7:94:80:f3:7e:d8:43:8f:
                    aa:88:08:7e:e1:a7:c6:41:81:ce:a4:90:66:e7:71:
                    3a:06:1e:72:f6:b4:09:19:de:8a:ad:2a:e4:13:5b:
                    b3:e5:e7:85:54:4c:62:51:a1:88:84:9c:ac:27:75:
                    d6:d6:48:80:2a:ff:cb:00:01:ec:e6:c8:38:d7:b3:
                    52:fd:32:12:d9:f4:41:9c:62:58:0b:3a:a5:c5:ca:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A6:CA:6F:AE:06:70:0C:11:40:AA:54:9B:77:17:E4:EA:C8:A3:41
            X509v3 Authority Key Identifier:
                keyid:CA:77:E7:2C:F3:C2:DA:1D:E0:8E:65:35:67:18:B3:E4:9E:80:38:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/323830343a373634303a3a2f33322d3332203d3e20323731303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:7f:c6:9e:76:84:88:fa:bd:4d:03:26:c9:75:e1:a3:5e:ff:
         03:d0:75:5c:0b:3b:3f:27:64:cf:bb:ac:4e:e5:fb:b1:5a:1e:
         50:57:02:c3:a5:69:a1:71:c4:48:3c:48:d4:a4:b9:06:95:3f:
         a0:70:76:12:29:bb:77:c3:f8:c7:95:3a:f5:dc:ab:04:ec:93:
         cf:44:e8:00:97:e5:41:2c:f0:b3:d1:0d:cb:85:ec:75:36:4a:
         9a:dd:8b:23:41:44:1c:c4:b8:45:a9:3d:9b:af:11:6d:df:a8:
         f8:5f:bc:f2:b0:9f:b7:e2:20:cb:b0:e6:ca:31:cf:db:6d:d8:
         f2:a4:c9:96:d0:d7:4e:45:a8:b1:63:13:30:5e:43:9d:f7:5a:
         7c:41:7c:69:0a:25:8c:79:de:c4:5f:bb:c2:82:fc:43:71:8a:
         3a:62:83:7b:2a:22:8b:6b:bc:ce:8d:9f:b2:a9:bf:6d:92:b9:
         1d:d0:62:6f:9c:f2:33:9e:7d:3b:5d:dc:f0:ff:3f:58:44:d2:
         24:60:b4:b2:24:2b:29:34:d5:f9:d2:bb:04:9c:06:8d:40:cf:
         b1:bf:68:3a:07:ae:05:10:be:d8:35:db:d2:a3:00:ff:bb:8c:
         a6:2c:4c:30:53:03:42:89:9b:2a:3c:42:90:00:90:07:00:85:
         bd:0c:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:37:52 2026 by rpki-client