Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a3a2f33322d3332203d3e20323633333439.roa
File:                     323830343a313463343a3a2f33322d3332203d3e20323633333439.roa (raw, json)
Hash identifier:          yxsKbkSloWUgxI1XShO+CnmBhfQVkXSqwqOYlFGZ/t4=
Subject key identifier:   7C:D5:86:B4:E7:32:D9:00:5D:F7:0F:6E:8B:03:CD:4C:5C:5A:67:E0
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       57CC80AD26203C038EC49C41C6DC99C9A957BC4F
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a3a2f33322d3332203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:11:29 +0000
ROA not before:           Tue 14 Jul 2026 19:06:29 +0000
ROA not after:            Tue 13 Jul 2027 19:11:29 +0000
asID:                     263349
IP address blocks:        2804:14c4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cc:80:ad:26:20:3c:03:8e:c4:9c:41:c6:dc:99:c9:a9:57:bc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:06:29 2026 GMT
            Not After : Jul 13 19:11:29 2027 GMT
        Subject: CN=7CD586B4E732D9005DF70F6E8B03CD4C5C5A67E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:60:74:b8:ef:b6:72:18:2f:07:3c:2e:c1:
                    b6:69:1e:71:d1:9c:55:a3:fa:2a:c1:a5:f3:d1:06:
                    74:c4:41:90:38:1e:07:08:ad:ca:80:16:ff:6c:24:
                    ca:28:a6:95:3f:ff:f9:9b:9c:fb:d6:ed:c2:32:ea:
                    c8:b5:eb:df:f0:e1:f3:64:22:76:92:9f:5e:0b:e5:
                    cc:83:d5:3a:47:2f:5a:e8:9f:2c:ad:a1:20:0f:3e:
                    60:76:a8:d8:fd:1d:3f:89:71:d6:e0:b1:05:50:f9:
                    7a:c5:b4:64:0e:00:d9:1f:87:36:6c:cf:a2:a3:9b:
                    2f:8a:41:3b:d0:a4:05:15:af:cc:4c:1c:11:b6:ba:
                    e1:73:20:d4:8c:33:5a:75:46:25:ef:16:fb:b6:37:
                    be:a4:73:fa:d2:da:d6:22:10:1a:3c:1f:3e:7c:31:
                    c2:a3:b4:a0:a8:d5:b6:00:ab:b8:f5:f4:14:a6:0c:
                    eb:75:ff:76:94:79:d1:89:af:62:67:09:5a:1b:11:
                    6e:0b:e8:90:1c:12:b0:54:c7:b0:ce:54:b0:ab:c6:
                    21:1c:7d:ca:86:57:1c:4a:8b:d0:70:43:34:51:78:
                    e8:3a:3d:34:35:3a:c6:0d:17:8f:46:04:83:e8:53:
                    e7:7d:81:b5:7b:15:60:25:ce:b0:9c:c0:8c:3b:fa:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D5:86:B4:E7:32:D9:00:5D:F7:0F:6E:8B:03:CD:4C:5C:5A:67:E0
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a3a2f33322d3332203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:38:bd:2c:73:91:47:a7:ed:d2:0a:a2:4f:0b:e2:34:64:86:
         ed:91:81:2a:90:1e:24:f6:7e:8d:bf:10:f1:95:fa:ab:b4:32:
         28:36:e6:b3:ea:a3:aa:ef:48:3d:df:67:db:0e:8d:76:16:be:
         2b:25:3c:fe:55:90:f5:78:5e:79:ba:f2:13:7e:12:7f:60:5d:
         45:3d:62:63:a2:af:8d:8d:36:65:0d:2a:a5:bc:ca:c6:2b:c5:
         00:1d:48:0a:6f:05:bb:29:96:60:31:2c:7c:e6:a0:53:a0:eb:
         00:a5:65:f9:50:0b:66:6a:fa:5e:0c:c2:8f:59:f9:6d:1d:5e:
         14:96:28:6a:87:9a:4a:03:e6:08:26:d4:8c:c9:7e:50:02:94:
         b9:fe:55:7b:90:5c:a0:4a:b0:c2:ce:dd:48:41:86:42:45:e6:
         1d:50:a5:b9:53:12:17:c4:3c:5e:e4:14:5c:33:a5:01:7e:70:
         ac:3f:79:c6:45:7a:ec:b9:e5:52:e0:58:44:a2:d9:45:35:98:
         36:b7:88:49:d2:af:78:a4:a9:aa:ad:81:b1:c0:7b:3e:e3:0d:
         d8:0f:78:f1:6e:d7:99:e5:08:c7:12:3a:6c:93:75:c5:43:91:
         87:69:37:70:2a:95:4a:20:b7:61:bb:c1:5e:38:9d:67:1e:8d:
         63:ac:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:14 2026 by rpki-client