Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/323830343a343465303a3a2f33322d3438203d3e203631353836.roa
File:                     323830343a343465303a3a2f33322d3438203d3e203631353836.roa (raw, json)
Hash identifier:          bPbcp4JaF36mBI0U2P9ZjbPnNCiXWSH6gHN6oCyVNZY=
Subject key identifier:   F7:25:60:3B:83:7B:82:32:86:41:08:67:B3:D4:89:5D:0A:F7:B5:E9
Certificate issuer:       /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E
Certificate serial:       21486A55ABD01763F34E176FFC8C80E2BC713BB2
Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/323830343a343465303a3a2f33322d3438203d3e203631353836.roa
Signing time:             Wed 23 Sep 2026 20:01:57 +0000
ROA not before:           Wed 23 Sep 2026 19:56:57 +0000
ROA not after:            Wed 22 Sep 2027 20:01:57 +0000
asID:                     61586
IP address blocks:        2804:44e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl
                          rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 00:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:48:6a:55:ab:d0:17:63:f3:4e:17:6f:fc:8c:80:e2:bc:71:3b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E
        Validity
            Not Before: Sep 23 19:56:57 2026 GMT
            Not After : Sep 22 20:01:57 2027 GMT
        Subject: CN=F725603B837B823286410867B3D4895D0AF7B5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:b1:74:2c:8b:a0:8e:4a:c9:27:4c:54:f7:
                    b7:2a:a2:b7:ed:b8:7d:eb:ef:0f:b0:41:1a:28:dc:
                    56:3e:02:89:d9:dc:36:c9:b2:30:b1:62:ef:49:f0:
                    b7:00:49:78:5b:08:66:b9:77:c1:f3:e6:04:82:aa:
                    6a:af:f6:be:b9:93:8c:f0:58:ba:5d:44:6d:f8:09:
                    9d:55:0f:b5:cf:04:29:cc:55:be:f2:40:53:1e:f1:
                    ca:67:37:72:35:30:d2:f5:fe:9d:69:69:c7:56:cf:
                    9c:62:65:0d:be:02:8b:6f:30:c5:77:d7:bb:b9:a3:
                    13:db:66:62:83:6f:07:7c:27:6d:3e:80:62:14:97:
                    00:a7:90:0a:a3:09:1e:2f:21:11:b5:1a:ef:27:81:
                    0f:ec:6c:31:1f:4d:85:8a:a8:77:ae:61:df:c8:58:
                    e0:b5:94:83:d2:65:cf:d6:92:79:8f:6b:78:ce:47:
                    ec:a3:21:a8:c4:81:ec:76:92:c9:de:37:9c:99:c1:
                    f5:ab:6a:d6:a6:07:4c:dd:46:74:ad:04:aa:a5:08:
                    19:a3:90:90:35:e6:8f:08:63:98:82:61:b2:21:7f:
                    bf:63:09:5c:fa:eb:d1:25:db:65:f8:6b:18:91:ee:
                    5b:4d:4f:46:43:44:72:bd:bd:41:55:3f:69:cd:12:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:60:3B:83:7B:82:32:86:41:08:67:B3:D4:89:5D:0A:F7:B5:E9
            X509v3 Authority Key Identifier:
                keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/323830343a343465303a3a2f33322d3438203d3e203631353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:a6:73:97:ae:d5:62:91:4d:65:05:44:70:33:29:c2:5a:0d:
         a7:98:82:a8:1c:77:fc:83:1a:05:96:e2:35:c4:49:92:45:93:
         f1:f4:c0:a4:cb:09:26:69:70:ce:5f:d3:d9:e6:1c:23:56:f4:
         82:59:60:be:94:0f:83:ad:ca:f9:04:ea:6c:0a:24:41:d7:bf:
         df:c7:01:93:29:2e:4c:c8:a0:82:a7:c5:4b:0d:c5:46:05:84:
         de:65:8b:dc:f9:4f:57:09:90:c2:c3:95:f8:3f:0a:60:46:02:
         86:0f:f4:a0:ba:86:9e:51:a3:c6:30:99:a7:53:fd:c5:74:46:
         eb:66:95:82:fa:65:09:8d:3a:86:78:42:c1:57:0c:bb:d8:9d:
         d5:26:aa:bc:b9:0b:1b:32:e4:e0:36:fe:8f:ba:d0:f1:35:ff:
         85:23:c5:3f:d3:0e:95:62:0a:5e:09:12:14:dc:70:54:62:7f:
         70:13:d4:9b:2b:a5:68:aa:1e:92:9f:12:b5:d8:cc:8c:a8:6b:
         6d:52:17:53:5d:39:de:89:b5:e2:5a:c7:01:e1:3d:6a:ca:71:
         a6:f7:f6:c4:f7:c2:04:2e:23:66:89:b9:ea:34:68:b8:f5:f0:
         03:bd:64:1d:13:60:d7:8a:40:d9:f0:93:53:ca:f3:b5:ea:d4:
         d6:2e:15:2d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIUhqVavQF2PzThdv/IyA4rxxO7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUyNUMxNTJCQUNGRDJERDk4OEUyM0U5Qzk3QUExQUVC
NEJBNUIzRTAeFw0yNjA5MjMxOTU2NTdaFw0yNzA5MjIyMDAxNTdaMDMxMTAvBgNV
BAMTKEY3MjU2MDNCODM3QjgyMzI4NjQxMDg2N0IzRDQ4OTVEMEFGN0I1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWLF0LIugjkrJJ0xU97cqorft
uH3r7w+wQRoo3FY+AonZ3DbJsjCxYu9J8LcASXhbCGa5d8Hz5gSCqmqv9r65k4zw
WLpdRG34CZ1VD7XPBCnMVb7yQFMe8cpnN3I1MNL1/p1pacdWz5xiZQ2+AotvMMV3
17u5oxPbZmKDbwd8J20+gGIUlwCnkAqjCR4vIRG1Gu8ngQ/sbDEfTYWKqHeuYd/I
WOC1lIPSZc/WknmPa3jOR+yjIajEgex2ksneN5yZwfWratamB0zdRnStBKqlCBmj
kJA15o8IY5iCYbIhf79jCVz669El22X4axiR7ltNT0ZDRHK9vUFVP2nNEpTDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9yVgO4N7gjKGQQhns9SJXQr3tekwHwYDVR0j
BBgwFoAUviXBUrrP0t2YjiPpyXqhrrS6Wz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdo
cHYvMC9CRTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMjVDMTUyQkFDRkQyREQ5
ODhFMjNFOUM5N0FBMUFFQjRCQTVCM0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hjN0syVXY1RHoxYnhpSFhuTU1tb0dkZ2ZYcm9RNmNVd2NOOXRVQW1HaHB2LzAv
MzIzODMwMzQzYTM0MzQ2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM1
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEROAwDQYJKoZIhvcNAQELBQADggEBADKmc5eu1WKR
TWUFRHAzKcJaDaeYgqgcd/yDGgWW4jXESZJFk/H0wKTLCSZpcM5f09nmHCNW9IJZ
YL6UD4OtyvkE6mwKJEHXv9/HAZMpLkzIoIKnxUsNxUYFhN5li9z5T1cJkMLDlfg/
CmBGAoYP9KC6hp5Ro8YwmadT/cV0RutmlYL6ZQmNOoZ4QsFXDLvYndUmqry5Cxsy
5OA2/o+60PE1/4UjxT/TDpViCl4JEhTccFRif3AT1JsrpWiqHpKfErXYzIyoa21S
F1NdOd6JteJaxwHhPWrKcab39sT3wgQuI2aJueo0aLj18AO9ZB0TYNeKQNnwk1PK
87Xq1NYuFS0=
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:47:51 2026 by rpki-client