Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a3a2f33322d313238203d3e20323734363933.roa
File:                     323830343a393232383a3a2f33322d313238203d3e20323734363933.roa (raw, json)
Hash identifier:          TrgpFLJHIj4+wD1cKX/MFVsR1SRxrhdZLC8Xqo14ee0=
Subject key identifier:   56:17:EF:93:01:E5:41:28:08:C1:F6:75:20:3B:77:1F:6E:4E:0A:97
Certificate issuer:       /CN=4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4
Certificate serial:       08C0FF62325FF9336C1387A0CFB321C8B8FBF26D
Authority key identifier: 4C:E9:E7:F7:AC:19:70:7A:6A:10:B2:51:C6:CD:06:F8:39:82:EB:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a3a2f33322d313238203d3e20323734363933.roa
Signing time:             Sat 18 Jul 2026 00:35:22 +0000
ROA not before:           Sat 18 Jul 2026 00:30:22 +0000
ROA not after:            Sat 17 Jul 2027 00:35:22 +0000
asID:                     274693
IP address blocks:        2804:9228::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.crl
                          rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c0:ff:62:32:5f:f9:33:6c:13:87:a0:cf:b3:21:c8:b8:fb:f2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4
        Validity
            Not Before: Jul 18 00:30:22 2026 GMT
            Not After : Jul 17 00:35:22 2027 GMT
        Subject: CN=5617EF9301E5412808C1F675203B771F6E4E0A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:6b:b6:1b:33:9a:37:e0:b9:f9:53:ce:c1:
                    63:4e:6d:4d:3e:3d:c8:25:2d:79:aa:8d:ee:84:e1:
                    8f:8c:59:46:7e:f7:65:e0:02:0c:a2:86:53:0d:78:
                    32:db:a4:0a:ff:1a:29:b2:c6:ce:58:87:8c:f7:6a:
                    98:96:3f:99:81:7e:e7:3f:9a:af:a7:53:ea:41:50:
                    c2:ed:af:30:db:6c:91:ce:09:36:53:7b:bf:34:4f:
                    b0:6f:6d:76:70:7f:08:0b:72:54:2d:3d:a9:8c:51:
                    72:cf:a7:f9:12:cc:ca:d8:c4:df:5c:03:0a:2e:d5:
                    a1:01:e8:0d:cb:cf:a7:95:96:4d:65:2d:e6:5f:91:
                    35:68:e5:b6:cb:c4:19:5f:70:7d:c7:6e:64:94:93:
                    28:5f:d0:cc:b1:f4:bc:b0:3d:93:2b:27:5f:8c:a1:
                    4b:0e:91:70:5f:51:07:a5:df:d9:10:84:33:ad:92:
                    81:84:55:31:64:75:5c:b3:eb:e2:e9:7b:15:5e:2a:
                    44:c0:62:e9:b4:86:69:0c:9d:a1:19:cf:76:8c:e1:
                    95:94:11:85:5b:99:45:6b:9a:5f:fa:69:d7:57:eb:
                    e5:94:ad:02:a0:38:1d:2d:bc:d1:e0:c2:01:13:eb:
                    86:cb:be:b0:ec:21:08:45:02:2e:19:d4:37:7e:fe:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:17:EF:93:01:E5:41:28:08:C1:F6:75:20:3B:77:1F:6E:4E:0A:97
            X509v3 Authority Key Identifier:
                keyid:4C:E9:E7:F7:AC:19:70:7A:6A:10:B2:51:C6:CD:06:F8:39:82:EB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a3a2f33322d313238203d3e20323734363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9228::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:77:eb:27:3b:2c:4b:09:6f:11:3a:2d:63:26:18:b2:02:
         01:01:7a:01:3c:11:c2:14:18:9a:32:da:3f:6a:51:89:6d:ac:
         fd:6c:c1:43:90:4f:64:fe:68:e3:bf:ad:f0:d5:f3:a8:ff:3c:
         57:9e:33:86:f0:70:47:db:1a:d1:61:0e:e6:36:47:aa:e8:3f:
         6c:e8:bf:f9:2a:2c:13:da:aa:11:a4:25:e6:15:e6:e6:45:c9:
         e3:e6:da:9c:3d:50:9d:b8:66:a5:e4:fe:80:71:a6:58:5e:fa:
         f9:5d:1b:39:89:6f:d2:13:6f:4a:b3:f2:17:56:e5:64:bf:6e:
         96:8d:b9:98:d7:6a:d5:43:19:54:ca:ce:17:cd:2e:24:f5:7c:
         1a:f5:03:24:45:07:ef:4f:2e:2e:b7:22:9d:1f:d1:f6:7c:38:
         ad:d4:f8:97:72:b5:76:93:9a:d5:e6:a6:59:28:2b:5a:c1:3c:
         56:d5:e6:fd:4b:97:75:48:18:34:a3:47:6c:95:ed:02:53:4b:
         f2:7b:b2:b5:cb:40:dc:14:07:0f:01:a2:8c:b3:ad:60:66:48:
         ed:15:71:c5:f1:13:b8:b3:17:de:80:f7:32:0c:85:cc:27:9b:
         7e:ea:74:32:99:90:f5:5b:74:44:6e:28:a1:49:85:47:05:04:
         31:1c:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:23:58 2026 by rpki-client