Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GA9hK3oY3zNTd42R4PaBL3QbbPbFZWrKYPS2GxNMEjt3/0/323830343a316333633a3a2f33322d3333203d3e203631363432.roa
File:                     323830343a316333633a3a2f33322d3333203d3e203631363432.roa (raw, json)
Hash identifier:          YCpJIBeLTxmtlvdjAhRdLqvfwxsC/BT3sz5blRIusnY=
Subject key identifier:   71:4A:C3:9D:4F:8A:EE:BB:2A:B8:12:07:ED:7D:FE:3F:21:F8:CA:A3
Certificate issuer:       /CN=6956F45081969E7943371065219749FD8D5E095D
Certificate serial:       6C375CAD38F61F7EB41B4CD3CD6330754966AA36
Authority key identifier: 69:56:F4:50:81:96:9E:79:43:37:10:65:21:97:49:FD:8D:5E:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6956F45081969E7943371065219749FD8D5E095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GA9hK3oY3zNTd42R4PaBL3QbbPbFZWrKYPS2GxNMEjt3/0/323830343a316333633a3a2f33322d3333203d3e203631363432.roa
Signing time:             Fri 17 Jul 2026 16:12:50 +0000
ROA not before:           Fri 17 Jul 2026 16:07:50 +0000
ROA not after:            Fri 16 Jul 2027 16:12:50 +0000
asID:                     61642
IP address blocks:        2804:1c3c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GA9hK3oY3zNTd42R4PaBL3QbbPbFZWrKYPS2GxNMEjt3/0/6956F45081969E7943371065219749FD8D5E095D.crl
                          rsync://rpki-repo.registro.br/repo/GA9hK3oY3zNTd42R4PaBL3QbbPbFZWrKYPS2GxNMEjt3/0/6956F45081969E7943371065219749FD8D5E095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6956F45081969E7943371065219749FD8D5E095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:37:5c:ad:38:f6:1f:7e:b4:1b:4c:d3:cd:63:30:75:49:66:aa:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6956F45081969E7943371065219749FD8D5E095D
        Validity
            Not Before: Jul 17 16:07:50 2026 GMT
            Not After : Jul 16 16:12:50 2027 GMT
        Subject: CN=714AC39D4F8AEEBB2AB81207ED7DFE3F21F8CAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c7:ec:1e:91:f9:8e:6b:f3:f6:f9:de:64:fb:
                    1c:d8:f6:f5:0e:9b:22:90:8a:88:52:ad:6c:f3:0d:
                    2d:77:92:52:50:b8:57:76:ba:df:5e:11:aa:98:29:
                    77:84:ad:86:c8:e4:ac:d0:38:c4:d7:ee:ff:66:6c:
                    ce:eb:ce:f3:23:e8:07:fb:ef:a6:8d:95:ad:eb:a4:
                    4e:2e:ff:3a:c0:fe:6d:eb:bb:5d:21:8c:aa:c0:42:
                    49:12:4e:f8:81:e1:39:56:0a:87:33:ff:9a:47:73:
                    64:56:1c:ef:a3:c5:da:3e:d9:60:05:52:ee:fc:3a:
                    de:b6:b2:65:97:fb:9d:55:7e:42:71:4e:6e:2e:1c:
                    bd:2b:c3:00:70:5c:a8:3a:d5:b5:69:87:0e:7a:54:
                    33:38:6a:d8:2d:76:4a:2c:d8:9a:32:0c:e2:bd:37:
                    61:1a:34:23:d4:65:4e:5c:fb:fe:f6:26:3a:fb:e9:
                    64:0d:0e:50:f8:c2:6e:ed:3d:93:1d:b3:94:6b:2c:
                    2e:77:8e:26:e8:0c:8e:10:59:5e:3f:ed:ca:c1:1b:
                    44:b2:c5:5c:f2:77:a8:3d:22:75:c5:ff:e0:68:95:
                    79:46:13:ad:08:2c:6d:0c:f4:4b:12:be:f1:ae:9e:
                    31:74:41:ab:ab:61:e4:f7:9d:fe:54:ef:29:16:cc:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4A:C3:9D:4F:8A:EE:BB:2A:B8:12:07:ED:7D:FE:3F:21:F8:CA:A3
            X509v3 Authority Key Identifier:
                keyid:69:56:F4:50:81:96:9E:79:43:37:10:65:21:97:49:FD:8D:5E:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GA9hK3oY3zNTd42R4PaBL3QbbPbFZWrKYPS2GxNMEjt3/0/6956F45081969E7943371065219749FD8D5E095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6956F45081969E7943371065219749FD8D5E095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GA9hK3oY3zNTd42R4PaBL3QbbPbFZWrKYPS2GxNMEjt3/0/323830343a316333633a3a2f33322d3333203d3e203631363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:68:08:92:0f:24:0c:9f:54:bc:7a:b4:10:e5:76:1d:10:90:
         2d:f6:ce:1d:b7:db:b3:4b:1c:f9:61:0f:39:3e:e2:9f:cd:e3:
         cf:cb:f1:f5:76:d5:c9:a4:c1:c7:43:c2:ea:81:e2:03:aa:66:
         35:12:14:d6:57:7d:e7:47:2d:3c:a5:81:a9:fb:d8:32:a6:52:
         a7:dc:a7:ff:ef:87:90:45:ce:ee:7c:b4:f5:74:5d:72:3f:3c:
         7a:95:62:21:c6:fc:e7:87:8a:19:12:35:82:9a:16:dc:ce:1c:
         31:4a:7d:fd:b2:de:13:fa:eb:9e:83:b6:31:ab:a2:c9:a2:96:
         9f:7e:61:12:df:96:11:36:ff:4e:60:05:e7:4d:71:39:d3:a6:
         bd:9b:f5:7e:45:f5:6a:52:1e:66:8c:4a:ad:59:26:fb:00:55:
         28:6d:73:36:e7:1b:43:61:34:e9:72:07:32:df:20:05:61:9a:
         81:f7:0a:79:b5:03:7b:bf:7e:57:bb:e7:1a:60:7a:c1:ec:f9:
         ab:65:c3:f1:12:97:71:fc:43:a2:26:5a:5c:2d:08:94:76:d5:
         b1:22:5e:ed:ae:11:79:51:4f:49:c7:29:9e:eb:94:71:a4:29:
         03:51:79:79:1a:e5:13:a2:99:9c:c3:63:23:e1:dc:4e:4a:a9:
         76:d4:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:07 2026 by rpki-client