Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/323830343a363035633a3a2f33322d313238203d3e20323639313632.roa
File:                     323830343a363035633a3a2f33322d313238203d3e20323639313632.roa (raw, json)
Hash identifier:          3SGVqqDLVPLhjW/CuNyejC7uTF3hWs6W68pBsibq/eE=
Subject key identifier:   C7:FB:99:5C:9E:95:EC:CC:54:3E:DC:01:C9:A3:3F:F2:23:6D:55:05
Certificate issuer:       /CN=A126D1120D5D651106DDC682FBEC6933CF34427F
Certificate serial:       540EDE7B80513C182610E5F66D35FA6CE2710F87
Authority key identifier: A1:26:D1:12:0D:5D:65:11:06:DD:C6:82:FB:EC:69:33:CF:34:42:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A126D1120D5D651106DDC682FBEC6933CF34427F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/323830343a363035633a3a2f33322d313238203d3e20323639313632.roa
Signing time:             Tue 14 Jul 2026 02:23:54 +0000
ROA not before:           Tue 14 Jul 2026 02:18:54 +0000
ROA not after:            Tue 13 Jul 2027 02:23:54 +0000
asID:                     269162
IP address blocks:        2804:605c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/A126D1120D5D651106DDC682FBEC6933CF34427F.crl
                          rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/A126D1120D5D651106DDC682FBEC6933CF34427F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A126D1120D5D651106DDC682FBEC6933CF34427F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0e:de:7b:80:51:3c:18:26:10:e5:f6:6d:35:fa:6c:e2:71:0f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A126D1120D5D651106DDC682FBEC6933CF34427F
        Validity
            Not Before: Jul 14 02:18:54 2026 GMT
            Not After : Jul 13 02:23:54 2027 GMT
        Subject: CN=C7FB995C9E95ECCC543EDC01C9A33FF2236D5505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:9a:91:0d:63:15:52:42:ff:ef:96:23:80:
                    d2:cc:76:1a:a3:10:51:c3:3e:cc:cd:30:01:73:ac:
                    00:1e:7f:bb:ed:7d:5e:60:fa:2b:61:55:2b:01:b3:
                    ee:9e:57:ca:12:98:7f:16:61:4d:34:8f:d3:fb:99:
                    b3:9b:a6:b2:df:96:9f:bf:1f:b7:e8:21:55:22:f6:
                    70:02:2d:0c:ba:1a:f7:a0:51:b0:ee:a7:92:76:2f:
                    5c:1c:76:b2:a6:2b:64:af:25:ce:74:18:47:8a:d7:
                    66:0c:c6:5a:31:ca:de:f8:90:3e:f3:de:db:70:99:
                    75:d4:44:9b:3f:f4:87:51:2f:58:bc:62:77:2c:e9:
                    b8:9c:bc:ea:c1:cf:d5:d4:5e:d9:18:94:d0:14:34:
                    f8:d1:35:4f:59:69:7b:56:25:93:12:6d:7b:67:2c:
                    c1:1e:63:f9:c5:5c:e7:d6:fd:f6:96:d8:de:c1:24:
                    fc:f5:d4:10:07:cb:72:48:92:15:35:6f:bc:68:df:
                    1f:69:00:3c:e5:bb:1c:16:73:0d:66:9b:39:6a:3b:
                    19:5b:c2:7a:9f:84:19:69:25:2b:24:8b:1e:57:f9:
                    78:65:3e:bd:dc:f5:69:03:f0:f0:f2:4c:e7:73:13:
                    44:90:2c:bc:eb:e7:fd:86:ea:b1:fc:90:cd:74:58:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FB:99:5C:9E:95:EC:CC:54:3E:DC:01:C9:A3:3F:F2:23:6D:55:05
            X509v3 Authority Key Identifier:
                keyid:A1:26:D1:12:0D:5D:65:11:06:DD:C6:82:FB:EC:69:33:CF:34:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/A126D1120D5D651106DDC682FBEC6933CF34427F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A126D1120D5D651106DDC682FBEC6933CF34427F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEkfVedQopHejdTfHNXx8ucNrsjDjHQFLagrn7LtrF5F/0/323830343a363035633a3a2f33322d313238203d3e20323639313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:605c::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:41:c9:4f:d4:2f:3e:ef:c0:c8:4f:7a:5a:3c:99:82:b1:
         3f:21:60:5a:6d:e2:31:aa:b1:69:2b:3f:7a:ef:61:ca:45:a6:
         59:04:a3:a6:62:4f:15:ec:2d:91:31:15:90:ea:67:7a:3d:a5:
         07:3d:30:ba:55:4a:6f:17:ec:bd:6e:18:96:d3:06:9e:19:f5:
         bc:26:98:76:51:66:d1:23:1c:d9:02:ad:0a:f6:31:f0:3f:26:
         5e:c8:9d:a8:5b:9f:89:8b:c0:3f:11:89:89:04:48:86:e1:d6:
         26:9a:5e:fd:36:2c:4f:24:98:5a:6e:68:54:77:23:d5:39:ba:
         15:a4:99:8c:a6:e6:76:52:8a:45:b4:2b:59:55:e4:51:34:79:
         a6:7e:2e:55:33:67:ad:7b:fc:8a:6a:f0:9c:0a:e7:2b:9f:81:
         16:99:1e:f9:ee:e0:42:73:1b:36:5d:e8:e0:3b:f8:1f:44:92:
         e6:bc:e2:d0:d5:b5:5b:6d:5a:a4:ba:92:e3:b5:8d:cd:22:1c:
         64:4f:19:f4:55:1e:a0:21:4c:04:1f:bc:79:d2:0b:53:36:b5:
         7c:ca:b8:cd:fb:6a:ca:08:35:a5:00:e9:82:71:8c:eb:ce:42:
         5c:c6:64:46:c4:2a:86:23:d0:7f:d1:f2:b5:93:c1:3c:ee:a0:
         49:89:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:34:32 2026 by rpki-client