Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a643130303a3a2f34302d3430203d3e20323632333532.roa
File:                     323830343a3832303a643130303a3a2f34302d3430203d3e20323632333532.roa (raw, json)
Hash identifier:          06ZZiTMnfsLHSBT+ByZn6SIQwljqpejp2IahBJANUIg=
Subject key identifier:   FA:E2:1F:13:1A:41:22:93:DE:85:64:CB:3E:5C:56:CC:76:D7:61:92
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       70DEFF9310EB51D25BCE5630D5E9A75343A2C7F3
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a643130303a3a2f34302d3430203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:35 +0000
ROA not before:           Tue 11 Aug 2026 12:20:35 +0000
ROA not after:            Tue 10 Aug 2027 12:25:35 +0000
asID:                     262352
IP address blocks:        2804:820:d100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 05:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:de:ff:93:10:eb:51:d2:5b:ce:56:30:d5:e9:a7:53:43:a2:c7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:35 2026 GMT
            Not After : Aug 10 12:25:35 2027 GMT
        Subject: CN=FAE21F131A412293DE8564CB3E5C56CC76D76192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:51:9c:65:23:ae:80:b1:b8:47:43:b6:21:
                    18:67:ef:a1:9e:be:00:a0:26:81:10:c1:7c:21:35:
                    fc:fd:2e:87:26:42:3f:18:99:23:90:bf:6a:27:a6:
                    24:db:61:8e:67:6e:db:29:b2:e2:33:05:af:b0:e3:
                    83:1e:28:6c:37:83:89:70:bc:ae:9c:77:7b:35:1c:
                    60:34:12:14:96:5e:9f:c5:6b:3f:40:fb:aa:b2:29:
                    6d:3c:11:af:9f:33:74:6f:df:7b:2a:02:7e:e8:96:
                    e6:8e:63:77:c3:91:5d:c9:bf:c1:6a:71:12:72:52:
                    5b:90:2c:2a:00:03:a2:cd:6c:2a:05:07:6a:c6:90:
                    33:0f:27:ac:57:a9:61:4b:38:c8:fd:e1:2e:52:6c:
                    71:06:d0:12:c2:12:a8:bb:31:c6:29:3a:f4:ed:8e:
                    01:e7:9b:69:ba:17:26:ab:7c:77:7f:02:7a:32:bc:
                    5a:86:c2:00:45:c8:46:21:05:32:b9:5a:0b:8b:d8:
                    bd:99:b2:82:a8:74:ea:8c:e7:95:7d:15:cd:81:fb:
                    84:d1:9d:5c:99:e8:ca:8f:eb:e7:5b:38:b7:78:08:
                    11:9b:b3:81:c1:51:2a:25:e4:7f:f2:8d:71:71:ac:
                    45:8e:b5:a7:92:60:e5:b9:18:aa:61:d1:0a:10:3d:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E2:1F:13:1A:41:22:93:DE:85:64:CB:3E:5C:56:CC:76:D7:61:92
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a643130303a3a2f34302d3430203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820:d100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:1c:2a:f9:b9:b1:c6:0d:e1:45:56:b6:3d:14:97:83:40:af:
         ce:d4:dc:86:11:60:81:77:93:e5:88:c3:8c:19:87:d5:83:04:
         73:dd:7c:5b:15:0f:eb:6d:92:ba:66:a0:5e:f0:b9:f9:cd:b4:
         4b:b0:f6:90:88:3e:37:fe:07:1a:b3:f1:09:b5:1b:e0:e4:cf:
         b2:89:b2:99:3c:35:36:23:64:e2:98:02:96:fe:7b:8c:26:bc:
         93:99:2a:ce:14:a9:2d:f6:e8:62:31:cb:26:be:a4:ab:3b:98:
         2b:49:38:47:0c:99:12:43:da:34:4b:a1:ae:f0:2a:d4:b2:e0:
         40:c3:4f:88:c0:72:1d:01:6e:a0:ca:53:cd:d8:e4:a4:65:39:
         9a:82:9f:89:80:6a:3c:f1:39:7d:2a:a4:35:3f:2c:86:b8:20:
         c1:16:75:91:a5:52:9c:71:99:38:4e:18:fd:9a:8b:dd:53:4e:
         0a:55:5a:8a:09:7f:3e:23:7d:64:85:9b:56:e7:22:11:9b:04:
         b7:5d:cd:b8:6a:de:6d:ac:77:e6:f4:e7:04:af:61:ba:99:78:
         41:3f:ed:2a:b6:58:bc:6a:86:33:7a:13:3e:c5:b2:a3:6a:fb:
         5b:1a:04:af:4c:33:d6:ac:55:ef:33:53:ad:37:43:1d:4d:d9:
         f3:63:de:9b
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUcN7/kxDrUdJbzlYw1emnU0Oix/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5M0ZERkMzQjc3Q0Y0N0ZDM0FGNjNCMzA4QjdCQUQw
QTNGN0EwQjAeFw0yNjA4MTExMjIwMzVaFw0yNzA4MTAxMjI1MzVaMDMxMTAvBgNV
BAMTKEZBRTIxRjEzMUE0MTIyOTNERTg1NjRDQjNFNUM1NkNDNzZENzYxOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAVGcZSOugLG4R0O2IRhn76Ge
vgCgJoEQwXwhNfz9LocmQj8YmSOQv2onpiTbYY5nbtspsuIzBa+w44MeKGw3g4lw
vK6cd3s1HGA0EhSWXp/Faz9A+6qyKW08Ea+fM3Rv33sqAn7oluaOY3fDkV3Jv8Fq
cRJyUluQLCoAA6LNbCoFB2rGkDMPJ6xXqWFLOMj94S5SbHEG0BLCEqi7McYpOvTt
jgHnm2m6FyarfHd/AnoyvFqGwgBFyEYhBTK5WguL2L2ZsoKodOqM55V9Fc2B+4TR
nVyZ6MqP6+dbOLd4CBGbs4HBUSol5H/yjXFxrEWOtaeSYOW5GKph0QoQPU/fAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU+uIfExpBIpPehWTLPlxWzHbXYZIwHwYDVR0j
BBgwFoAU4ZP9/Dt3z0f8OvY7MIt7rQo/egswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzAvRTE5M0ZERkMzQjc3Q0Y0N0ZDM0FGNjNCMzA4QjdCQUQwQTNGN0EwQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMTkzRkRGQzNCNzdDRjQ3RkMz
QUY2M0IzMDhCN0JBRDBBM0Y3QTBCLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzAvMzIz
ODMwMzQzYTM4MzIzMDNhNjQzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz
MjM2MzIzMzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBAgg0TANBgkqhkiG9w0BAQsFAAOCAQEA
exwq+bmxxg3hRVa2PRSXg0CvztTchhFggXeT5YjDjBmH1YMEc918WxUP622Sumag
XvC5+c20S7D2kIg+N/4HGrPxCbUb4OTPsomymTw1NiNk4pgClv57jCa8k5kqzhSp
LfboYjHLJr6kqzuYK0k4RwyZEkPaNEuhrvAq1LLgQMNPiMByHQFuoMpTzdjkpGU5
moKfiYBqPPE5fSqkNT8shrggwRZ1kaVSnHGZOE4Y/ZqL3VNOClVaigl/PiN9ZIWb
VuciEZsEt13NuGrebax35vTnBK9hupl4QT/tKrZYvGqGM3oTPsWyo2r7WxoEr0wz
1qxV7zNTrTdDHU3Z82Pemw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:20:47 2026 by rpki-client