Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/323830343a366238303a3a2f33322d3332203d3e20323730343034.roa
File:                     323830343a366238303a3a2f33322d3332203d3e20323730343034.roa (raw, json)
Hash identifier:          FXfFGSGqnRMEEmi0C4WJJOKdnUaFn09aZiKQPE/f9SM=
Subject key identifier:   D0:45:7D:85:8E:39:92:8E:41:0A:AE:C7:45:DD:8D:A9:8A:49:91:78
Certificate issuer:       /CN=4B8A48206BDC82006361ECB45F61527768738318
Certificate serial:       3FD9F258C6E2D09EBEFE5A7DCDB20D48CDF34196
Authority key identifier: 4B:8A:48:20:6B:DC:82:00:63:61:EC:B4:5F:61:52:77:68:73:83:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B8A48206BDC82006361ECB45F61527768738318.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/323830343a366238303a3a2f33322d3332203d3e20323730343034.roa
Signing time:             Mon 20 Jul 2026 15:44:50 +0000
ROA not before:           Mon 20 Jul 2026 15:39:50 +0000
ROA not after:            Mon 19 Jul 2027 15:44:50 +0000
asID:                     270404
IP address blocks:        2804:6b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/4B8A48206BDC82006361ECB45F61527768738318.crl
                          rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/4B8A48206BDC82006361ECB45F61527768738318.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B8A48206BDC82006361ECB45F61527768738318.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d9:f2:58:c6:e2:d0:9e:be:fe:5a:7d:cd:b2:0d:48:cd:f3:41:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B8A48206BDC82006361ECB45F61527768738318
        Validity
            Not Before: Jul 20 15:39:50 2026 GMT
            Not After : Jul 19 15:44:50 2027 GMT
        Subject: CN=D0457D858E39928E410AAEC745DD8DA98A499178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a7:20:b8:69:c5:c1:6c:98:03:b5:96:d4:fa:
                    d5:88:8e:a0:56:19:5d:0e:df:35:e7:82:ae:6e:85:
                    3d:30:90:32:e8:52:8c:58:aa:e2:85:9b:23:7f:9a:
                    65:a5:ac:58:d0:f4:8c:29:54:97:66:11:4a:55:0f:
                    ba:f1:c3:9b:fc:5f:52:4e:53:2b:82:e7:ab:d3:b2:
                    b0:31:5a:f1:4e:0c:d1:6a:c4:9d:4f:ff:96:05:21:
                    c7:2d:32:bd:dc:7a:33:3c:ed:5e:48:32:6e:d5:ff:
                    41:27:87:13:42:a3:4e:37:94:e5:5f:9b:95:73:49:
                    f7:d3:2e:f0:70:38:14:8f:2d:10:6b:64:83:cc:e4:
                    dd:15:a9:58:85:53:d0:99:1f:b9:a9:85:b6:72:32:
                    a7:1a:16:ed:b1:6f:a7:8b:e2:7b:7b:02:d3:8c:4d:
                    02:a4:b7:99:84:7e:76:8c:1c:e5:b0:08:84:bf:b9:
                    76:c3:10:80:74:d3:07:92:08:d5:ed:17:b7:6e:e0:
                    97:87:38:11:30:77:c6:db:7f:48:b2:9a:ca:0c:4e:
                    ed:4c:b6:7a:6b:ad:a0:58:6a:79:2d:da:31:ca:67:
                    27:4c:b6:f1:cf:5e:12:7a:c5:a8:1c:9b:88:eb:0a:
                    7c:59:2c:c8:93:7c:b7:00:52:d6:a6:72:22:b5:50:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:45:7D:85:8E:39:92:8E:41:0A:AE:C7:45:DD:8D:A9:8A:49:91:78
            X509v3 Authority Key Identifier:
                keyid:4B:8A:48:20:6B:DC:82:00:63:61:EC:B4:5F:61:52:77:68:73:83:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/4B8A48206BDC82006361ECB45F61527768738318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B8A48206BDC82006361ECB45F61527768738318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/323830343a366238303a3a2f33322d3332203d3e20323730343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:2e:7e:ff:43:d0:b3:92:e1:76:cc:ef:14:10:8b:24:8e:d7:
         87:1b:bd:27:94:58:67:15:64:47:25:50:5d:ec:4e:9e:8f:7d:
         b9:73:0d:ee:4d:b9:00:be:25:ed:22:af:1d:c0:09:fb:29:80:
         0f:15:8b:76:b7:cf:da:3b:9b:fa:5c:9e:c2:42:ac:cd:ba:af:
         a0:80:5d:63:4a:cc:6c:68:45:11:3a:db:be:1e:c2:2c:cb:72:
         37:64:d7:a0:c2:66:4e:f9:5a:11:21:d9:57:1e:3d:da:a6:3a:
         c0:af:e2:0a:c5:4d:6b:46:a3:b4:98:83:65:02:d7:c0:4e:e8:
         31:76:b2:1f:56:1b:ed:8f:3c:df:e8:a9:84:99:81:f6:25:bf:
         53:25:c1:a2:63:eb:4c:c9:9a:38:9a:da:e7:6f:47:5e:c4:5d:
         81:29:bf:3a:4b:d3:19:4d:c8:55:91:97:13:c9:a1:b0:34:78:
         f7:ba:2f:de:03:05:21:63:eb:6f:e9:1e:a4:40:00:ff:83:c2:
         c2:a5:dd:17:37:10:82:b9:0a:23:68:05:5c:eb:c3:d2:cd:ff:
         e6:a1:4e:16:5b:df:b3:82:d6:d1:7f:36:e8:c3:c4:74:2d:28:
         80:1d:95:05:d6:00:a0:3b:6a:86:48:5e:bd:66:94:80:b6:53:
         fc:a3:37:6c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUP9nyWMbi0J6+/lp9zbINSM3zQZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI4QTQ4MjA2QkRDODIwMDYzNjFFQ0I0NUY2MTUyNzc2
ODczODMxODAeFw0yNjA3MjAxNTM5NTBaFw0yNzA3MTkxNTQ0NTBaMDMxMTAvBgNV
BAMTKEQwNDU3RDg1OEUzOTkyOEU0MTBBQUVDNzQ1REQ4REE5OEE0OTkxNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpyC4acXBbJgDtZbU+tWIjqBW
GV0O3zXngq5uhT0wkDLoUoxYquKFmyN/mmWlrFjQ9IwpVJdmEUpVD7rxw5v8X1JO
UyuC56vTsrAxWvFODNFqxJ1P/5YFIcctMr3cejM87V5IMm7V/0EnhxNCo043lOVf
m5VzSffTLvBwOBSPLRBrZIPM5N0VqViFU9CZH7mphbZyMqcaFu2xb6eL4nt7AtOM
TQKkt5mEfnaMHOWwCIS/uXbDEIB00weSCNXtF7du4JeHOBEwd8bbf0iymsoMTu1M
tnprraBYankt2jHKZydMtvHPXhJ6xagcm4jrCnxZLMiTfLcAUtamciK1UIwTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0EV9hY45ko5BCq7HRd2NqYpJkXgwHwYDVR0j
BBgwFoAUS4pIIGvcggBjYey0X2FSd2hzgxgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1ZvRzRyMllyQ0xabzg3MVNqS1ZVYk1wY3RIVjMyaWRlS1Y0Q2lFR3lU
aTEvMC80QjhBNDgyMDZCREM4MjAwNjM2MUVDQjQ1RjYxNTI3NzY4NzM4MzE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOEE0ODIwNkJEQzgyMDA2
MzYxRUNCNDVGNjE1Mjc3Njg3MzgzMTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWb0c0cjJZckNMWm84NzFTaktWVWJNcGN0SFYzMmlkZUtWNENpRUd5VGkxLzAv
MzIzODMwMzQzYTM2NjIzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzQzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARrgDANBgkqhkiG9w0BAQsFAAOCAQEAAS5+/0PQ
s5LhdszvFBCLJI7Xhxu9J5RYZxVkRyVQXexOno99uXMN7k25AL4l7SKvHcAJ+ymA
DxWLdrfP2jub+lyewkKszbqvoIBdY0rMbGhFETrbvh7CLMtyN2TXoMJmTvlaESHZ
Vx492qY6wK/iCsVNa0ajtJiDZQLXwE7oMXayH1Yb7Y883+iphJmB9iW/UyXBomPr
TMmaOJra529HXsRdgSm/OkvTGU3IVZGXE8mhsDR497ov3gMFIWPrb+kepEAA/4PC
wqXdFzcQgrkKI2gFXOvD0s3/5qFOFlvfs4LW0X826MPEdC0ogB2VBdYAoDtqhkhe
vWaUgLZT/KM3bA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:30 2026 by rpki-client