Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a383030303a3a2f33332d3333203d3e20323730373131.roa
File:                     323830343a373033303a383030303a3a2f33332d3333203d3e20323730373131.roa (raw, json)
Hash identifier:          3NoGA5euXzXdlfI5hBVbR4JRG/Z2odhLijAw9OK/vRE=
Subject key identifier:   76:7E:51:F4:4F:2F:10:23:9C:DA:64:D0:B9:B7:DD:11:BA:BD:D6:E7
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       2B2A39A7D757FFB0FE7D61F8DAC8408A46361746
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a383030303a3a2f33332d3333203d3e20323730373131.roa
Signing time:             Thu 02 Jul 2026 15:40:23 +0000
ROA not before:           Thu 02 Jul 2026 15:35:23 +0000
ROA not after:            Thu 01 Jul 2027 15:40:23 +0000
asID:                     270711
IP address blocks:        2804:7030:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2a:39:a7:d7:57:ff:b0:fe:7d:61:f8:da:c8:40:8a:46:36:17:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Jul  2 15:35:23 2026 GMT
            Not After : Jul  1 15:40:23 2027 GMT
        Subject: CN=767E51F44F2F10239CDA64D0B9B7DD11BABDD6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:14:85:df:d3:6d:33:20:eb:d9:e9:e3:ce:
                    37:85:77:dc:12:42:c4:02:c5:bd:9d:80:e7:4f:d4:
                    2e:c3:89:82:6d:5e:46:b4:1a:06:bb:02:98:f0:6d:
                    5e:3f:c2:b4:a9:79:00:be:7e:1c:a2:86:da:46:e7:
                    83:13:1b:11:02:fa:f5:da:32:c0:a7:30:65:df:bd:
                    3b:ba:8f:91:85:00:66:91:c4:17:20:f8:95:7f:8d:
                    e3:a5:4d:18:73:8f:61:2a:be:a0:e0:5f:b4:9e:e1:
                    50:16:98:55:f9:ee:00:76:d7:95:53:ad:ed:35:75:
                    48:e5:d6:78:d7:11:9d:6b:b7:9f:db:db:2d:2c:2e:
                    6d:4d:4c:57:94:41:f5:a5:75:ed:15:3a:9a:78:58:
                    ad:90:b6:e1:77:ed:ca:5d:de:52:d2:f1:e3:92:60:
                    af:d9:15:70:6c:9d:9a:36:a6:b3:76:f2:48:dd:db:
                    50:43:a8:a6:14:68:2c:22:e3:2d:9f:da:ed:7c:21:
                    17:4f:a9:8c:81:78:df:5f:75:39:f1:ba:db:23:c8:
                    cc:3a:70:8f:2b:77:d2:2c:0e:eb:dd:3f:ca:f5:eb:
                    a9:82:f4:9b:34:e1:33:6b:8e:c8:9e:e9:01:b5:d0:
                    84:99:c6:e1:a8:cd:a4:a0:68:a3:43:05:ec:ff:0d:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7E:51:F4:4F:2F:10:23:9C:DA:64:D0:B9:B7:DD:11:BA:BD:D6:E7
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a383030303a3a2f33332d3333203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7030:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:85:99:5c:f9:a9:bb:e9:93:a9:e3:da:9a:f4:e1:46:5d:61:
         f5:28:d7:22:c4:15:02:fe:8d:a3:95:1a:ee:74:40:eb:cf:d2:
         59:fa:64:37:60:71:c9:75:25:01:1c:8e:30:f3:77:1a:8f:be:
         5d:17:9b:20:72:e3:8f:65:05:65:21:21:43:37:ae:fa:a1:bb:
         14:94:5a:b7:72:cb:52:0b:cd:5b:71:56:40:3e:f6:a8:30:8a:
         df:a0:17:8d:08:21:89:64:bc:08:14:65:09:84:7a:11:60:0e:
         a7:9a:65:11:15:0f:0e:65:7d:01:03:8a:0d:5f:19:1e:57:04:
         50:b5:e7:06:7d:4b:14:5d:4a:af:cb:b0:49:f7:2c:18:e3:87:
         bd:c6:60:ba:7f:4d:33:9f:75:84:af:5a:9c:a8:55:52:47:1d:
         21:d1:58:a8:78:35:fa:a6:14:c4:e0:e1:e0:44:5b:a3:a1:30:
         2d:43:00:45:5a:20:b4:77:37:b4:83:bd:3f:10:89:b1:aa:ad:
         5e:c0:75:a6:7a:bb:04:b5:99:a8:65:e7:49:79:12:0b:c3:7d:
         7b:5c:cf:51:fe:89:70:f7:12:fa:b0:1e:c7:04:2f:78:47:4b:
         b3:88:30:28:30:c2:b6:b3:58:3f:3b:2c:cc:ff:52:05:51:ab:
         26:1d:16:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:14:26 2026 by rpki-client