Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a653130323a3a2f34382d3438203d3e20323633333439.roa
File:                     323830343a313463343a653130323a3a2f34382d3438203d3e20323633333439.roa (raw, json)
Hash identifier:          N4aXsJKoUhq6Nc7O6zfGFuiRwwm4jsUIkCfWkRrOA9U=
Subject key identifier:   F5:F2:BB:17:0C:61:29:E3:9E:0E:00:F9:57:A5:ED:2E:FD:C7:71:AD
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       2ADB9C38AA46B94F3F34C414C1A697C7B5348354
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a653130323a3a2f34382d3438203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:11:58 +0000
ROA not before:           Tue 14 Jul 2026 19:06:58 +0000
ROA not after:            Tue 13 Jul 2027 19:11:58 +0000
asID:                     263349
IP address blocks:        2804:14c4:e102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:db:9c:38:aa:46:b9:4f:3f:34:c4:14:c1:a6:97:c7:b5:34:83:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:06:58 2026 GMT
            Not After : Jul 13 19:11:58 2027 GMT
        Subject: CN=F5F2BB170C6129E39E0E00F957A5ED2EFDC771AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:c8:8b:bc:23:39:46:db:d3:5c:df:08:d3:
                    dd:27:96:44:16:68:68:68:70:31:4d:0f:d9:64:d1:
                    12:dd:4d:73:fd:33:41:b8:7b:90:fc:1a:27:9e:4c:
                    55:23:43:5c:f3:16:0b:a9:e0:98:16:b5:26:c6:69:
                    e5:65:2d:07:b8:8e:c1:d2:21:45:8f:3f:45:dc:cc:
                    e0:cd:38:f5:c9:b2:98:bf:3e:6f:c6:d6:41:8b:b1:
                    5a:93:52:ea:52:88:f6:ac:2e:84:87:f1:c5:ae:ed:
                    79:7b:62:38:30:9c:2f:a1:b5:46:29:f9:d5:05:64:
                    79:83:ff:62:9d:94:04:70:c9:79:64:f7:4b:bf:df:
                    e0:99:66:41:f1:f2:e2:9b:85:d2:35:c5:28:7c:27:
                    4b:96:41:01:c1:6c:32:92:b0:91:e4:74:0e:b2:f2:
                    03:4b:bd:fe:13:68:ae:46:a2:39:70:9a:b7:46:8c:
                    e4:4d:8e:b3:c1:bc:fa:df:ea:ac:b7:ae:cc:68:4b:
                    4d:55:39:32:13:be:82:3c:50:1b:cc:1b:42:03:0d:
                    5d:d2:75:22:04:dd:47:1a:80:e7:89:f0:02:74:c8:
                    c6:ef:fc:60:81:d2:d4:fd:21:8a:64:8d:8d:57:43:
                    3e:e4:8f:3e:f7:0e:18:44:81:6c:7c:15:64:5e:47:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F2:BB:17:0C:61:29:E3:9E:0E:00:F9:57:A5:ED:2E:FD:C7:71:AD
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a653130323a3a2f34382d3438203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c4:e102::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:a0:d6:8c:6b:e6:41:da:1d:a9:35:96:b9:6f:37:f1:99:3a:
         82:03:27:15:d6:5b:e7:30:3d:5c:01:ad:92:ae:ba:00:38:2d:
         cb:de:7f:25:3e:05:70:94:29:56:c4:e5:73:08:33:9c:dd:ee:
         90:5f:e1:8d:87:80:8e:4a:7f:0b:98:e0:50:30:fc:fe:67:14:
         f2:e9:3a:c2:1c:bc:57:10:7b:bd:6f:f0:36:40:b6:26:00:b0:
         34:e2:24:98:89:fd:83:ec:f9:55:b9:71:b3:f2:1f:1b:7d:0b:
         9a:d7:6e:b1:c2:ea:01:d8:12:b4:59:1e:ee:e7:9a:27:78:f2:
         bd:52:42:41:87:43:40:6c:9b:d3:ca:4d:11:75:c4:c1:91:50:
         c6:20:6e:19:4c:d6:69:fd:d7:e6:7d:87:b5:42:f7:2b:67:ed:
         f1:5a:f4:33:b8:9d:83:a1:69:76:01:71:da:b7:e1:63:44:fa:
         6d:f1:19:7c:9c:fc:75:5a:9e:58:c4:96:13:79:a8:95:d0:3b:
         ac:e1:0b:4e:70:3c:13:65:d1:96:be:bc:b5:bd:53:d6:cd:13:
         4d:e2:2a:5a:8b:ec:69:79:27:fa:b9:ad:c3:2f:27:f1:fc:ac:
         17:44:34:64:0c:87:7a:d6:95:08:44:30:42:aa:cf:2f:a5:34:
         95:37:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:09 2026 by rpki-client