Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3130303a3a2f34302d3430203d3e20323637333235.roa
File:                     323830343a346262343a3130303a3a2f34302d3430203d3e20323637333235.roa (raw, json)
Hash identifier:          p8aw0yt4dnMONBIxkdp297wsHBwTv5SOJ/MEXOKCCMY=
Subject key identifier:   E0:87:A6:A6:DC:2E:45:D9:08:09:27:0D:DA:BB:EF:6D:A6:F9:D7:14
Certificate issuer:       /CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
Certificate serial:       37A0F6D8BCC2EEFFE25664DB5DA5F95FC74BAA61
Authority key identifier: 9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3130303a3a2f34302d3430203d3e20323637333235.roa
Signing time:             Thu 16 Jul 2026 12:59:42 +0000
ROA not before:           Thu 16 Jul 2026 12:54:42 +0000
ROA not after:            Thu 15 Jul 2027 12:59:42 +0000
asID:                     267325
IP address blocks:        2804:4bb4:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl
                          rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a0:f6:d8:bc:c2:ee:ff:e2:56:64:db:5d:a5:f9:5f:c7:4b:aa:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
        Validity
            Not Before: Jul 16 12:54:42 2026 GMT
            Not After : Jul 15 12:59:42 2027 GMT
        Subject: CN=E087A6A6DC2E45D90809270DDABBEF6DA6F9D714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:e1:a8:03:b3:f9:a0:cf:f0:44:ff:08:bf:
                    2d:a3:ed:10:d7:b2:1f:9d:b7:51:ca:8f:ee:8a:80:
                    c0:7a:58:7e:ef:9c:28:d5:23:6d:24:31:31:2b:31:
                    20:01:ab:95:63:37:a2:d0:60:8c:e8:0b:46:8a:10:
                    bf:98:71:4c:c0:16:b2:9e:31:a7:5f:e0:0b:15:d5:
                    ee:6a:5a:6b:f1:0a:c0:38:fb:91:a9:27:67:2e:3f:
                    c8:b9:57:93:e6:c0:60:64:1e:e8:c6:4d:6c:54:48:
                    47:19:04:24:5f:bc:9c:26:7e:82:5f:3a:5a:89:43:
                    4e:77:4a:02:3e:3b:06:98:34:56:36:5e:13:8c:07:
                    fc:44:5b:9c:ee:f4:ee:d4:44:76:8f:9c:3c:2d:2b:
                    e9:98:78:be:06:d0:ca:4f:45:86:94:39:89:7a:68:
                    29:f2:b6:bf:31:7d:43:a8:59:51:2a:01:55:c5:59:
                    72:b2:3b:36:c9:b7:a5:73:89:00:2f:7f:56:2a:61:
                    7b:8f:1c:0c:77:d5:48:83:f4:4f:43:cd:c4:f9:62:
                    d9:eb:9b:83:e7:0c:ff:99:8b:cd:54:7a:ec:b3:1f:
                    6a:f3:fd:4f:93:cf:3a:59:08:58:c6:cf:32:45:6e:
                    8d:84:ce:60:ad:55:29:a7:59:6b:90:00:d1:3f:5b:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:87:A6:A6:DC:2E:45:D9:08:09:27:0D:DA:BB:EF:6D:A6:F9:D7:14
            X509v3 Authority Key Identifier:
                keyid:9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3130303a3a2f34302d3430203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:d6:23:ce:45:df:47:47:ad:90:2f:49:d2:44:bc:ea:ad:46:
         27:7e:b9:d8:41:d2:af:b8:98:25:e7:4f:52:82:14:65:26:10:
         1a:83:f2:e2:f0:83:cc:19:e6:fa:5f:29:fc:38:10:e8:97:53:
         a1:91:13:51:e0:d8:ba:a3:ac:36:82:fb:a4:f4:e8:34:24:df:
         fc:ae:10:2c:dd:92:58:a4:af:29:f9:9f:c1:b2:4e:23:d4:14:
         b4:00:42:a1:0b:04:b1:14:b7:a9:6b:e3:94:45:75:bc:6c:45:
         21:a9:72:db:1a:12:af:7a:b9:35:0a:98:99:ee:d8:f7:d7:74:
         ec:40:37:be:ed:b5:b9:34:f9:75:ae:51:bd:c5:cd:a8:95:64:
         3b:01:09:06:23:4f:a1:3f:b1:fe:d7:da:66:01:93:df:21:df:
         d3:45:57:99:db:02:e0:e0:5b:72:82:7d:24:5f:65:90:e4:55:
         36:eb:ac:9a:87:26:ab:63:7d:9a:9a:20:b7:0e:4a:d5:b6:d5:
         d5:91:0f:72:f7:36:de:10:e2:f8:7b:1b:3b:f5:fe:f6:a5:98:
         bb:bd:ff:04:87:13:42:38:43:f9:21:68:f4:d0:86:dd:76:41:
         f1:ec:71:6c:06:47:bb:16:b5:a8:03:ff:84:17:13:68:bd:74:
         b6:76:a4:3c
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUN6D22LzC7v/iVmTbXaX5X8dLqmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU4OERGMTg0QjBFMkI3NzhGQzhCRkU0MzJCQjAxQkRD
RkFGRkRGMzAeFw0yNjA3MTYxMjU0NDJaFw0yNzA3MTUxMjU5NDJaMDMxMTAvBgNV
BAMTKEUwODdBNkE2REMyRTQ1RDkwODA5MjcwRERBQkJFRjZEQTZGOUQ3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzouGoA7P5oM/wRP8Ivy2j7RDX
sh+dt1HKj+6KgMB6WH7vnCjVI20kMTErMSABq5VjN6LQYIzoC0aKEL+YcUzAFrKe
Madf4AsV1e5qWmvxCsA4+5GpJ2cuP8i5V5PmwGBkHujGTWxUSEcZBCRfvJwmfoJf
OlqJQ053SgI+OwaYNFY2XhOMB/xEW5zu9O7URHaPnDwtK+mYeL4G0MpPRYaUOYl6
aCnytr8xfUOoWVEqAVXFWXKyOzbJt6VziQAvf1YqYXuPHAx31UiD9E9DzcT5Ytnr
m4PnDP+Zi81UeuyzH2rz/U+TzzpZCFjGzzJFbo2EzmCtVSmnWWuQANE/W+blAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU4IemptwuRdkICScN2rvvbab51xQwHwYDVR0j
BBgwFoAUnojfGEsOK3ePyL/kMrsBvc+v/fMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9kUHpSZWpUeUFNOWFNOG9ZR0RpdGVYRG5MRmloYVJ1ekQxZWY0UGlLd243
LzAvOUU4OERGMTg0QjBFMkI3NzhGQzhCRkU0MzJCQjAxQkRDRkFGRkRGMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85RTg4REYxODRCMEUyQjc3OEZD
OEJGRTQzMkJCMDFCRENGQUZGREYzLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
UHpSZWpUeUFNOWFNOG9ZR0RpdGVYRG5MRmloYVJ1ekQxZWY0UGlLd243LzAvMzIz
ODMwMzQzYTM0NjI2MjM0M2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz
MjM2MzczMzMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBEu0ATANBgkqhkiG9w0BAQsFAAOCAQEA
TtYjzkXfR0etkC9J0kS86q1GJ3652EHSr7iYJedPUoIUZSYQGoPy4vCDzBnm+l8p
/DgQ6JdToZETUeDYuqOsNoL7pPToNCTf/K4QLN2SWKSvKfmfwbJOI9QUtABCoQsE
sRS3qWvjlEV1vGxFIaly2xoSr3q5NQqYme7Y99d07EA3vu21uTT5da5RvcXNqJVk
OwEJBiNPoT+x/tfaZgGT3yHf00VXmdsC4OBbcoJ9JF9lkORVNuusmocmq2N9mpog
tw5K1bbV1ZEPcvc23hDi+HsbO/X+9qWYu73/BIcTQjhD+SFo9NCG3XZB8exxbAZH
uxa1qAP/hBcTaL10tnakPA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:32:16 2026 by rpki-client