Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323830313a38303a313764663a3a2f34382d3438203d3e203631353830.roa
File:                     323830313a38303a313764663a3a2f34382d3438203d3e203631353830.roa (raw, json)
Hash identifier:          cDvrUwNxtsVmFxPmei0lI5QCZBBJrFHPIoBfPt1iHSg=
Subject key identifier:   07:76:56:88:4A:50:C7:C1:1C:E4:4E:C9:E2:90:E2:AD:CF:D6:F4:09
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       78527A60C6C67AA1598C7676AC368FA1847E2042
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323830313a38303a313764663a3a2f34382d3438203d3e203631353830.roa
Signing time:             Tue 28 Jul 2026 17:35:29 +0000
ROA not before:           Tue 28 Jul 2026 17:30:29 +0000
ROA not after:            Tue 27 Jul 2027 17:35:29 +0000
asID:                     61580
IP address blocks:        2801:80:17df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 17:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:52:7a:60:c6:c6:7a:a1:59:8c:76:76:ac:36:8f:a1:84:7e:20:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Jul 28 17:30:29 2026 GMT
            Not After : Jul 27 17:35:29 2027 GMT
        Subject: CN=077656884A50C7C11CE44EC9E290E2ADCFD6F409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:1e:d4:b0:c3:4b:ee:32:a6:4f:15:ae:8b:
                    26:9a:50:b6:5e:73:f6:2c:70:f6:2a:66:f8:e7:e4:
                    61:d3:ad:86:30:a3:bc:fc:2f:4d:d7:4c:13:0f:ff:
                    33:c8:a1:44:6c:66:fe:4d:74:6b:e6:10:a4:b0:3e:
                    a5:7b:34:8c:d4:f9:c0:e5:78:3b:ff:38:91:70:20:
                    65:d9:ff:1f:26:f3:71:e1:9e:50:4f:04:02:c4:54:
                    65:06:2d:3c:fa:df:e5:63:2b:9b:e2:45:21:5f:39:
                    55:5d:c7:45:27:00:f5:94:07:b6:08:67:24:9c:f7:
                    43:2d:5d:6b:14:35:ac:bd:f3:d4:68:e1:de:4a:4d:
                    ee:44:96:c2:8a:42:76:77:98:db:62:93:73:37:27:
                    45:df:e8:c1:a7:4d:67:9d:e5:bc:61:1b:97:a3:12:
                    39:63:47:c4:2a:53:7a:d5:6e:60:12:11:d3:ff:88:
                    ef:f7:cb:87:62:19:0d:aa:a3:b8:4c:e7:58:96:4d:
                    14:62:e3:cc:43:48:b5:e5:19:4d:41:cf:3b:ad:6f:
                    72:bb:91:c5:cc:38:ca:5f:82:69:1a:d4:b3:99:1f:
                    30:b7:ac:3f:1d:9b:30:6d:63:23:9f:e8:93:fe:c5:
                    06:91:e2:4e:de:c4:c9:36:40:92:e2:68:1c:2f:0e:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:76:56:88:4A:50:C7:C1:1C:E4:4E:C9:E2:90:E2:AD:CF:D6:F4:09
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323830313a38303a313764663a3a2f34382d3438203d3e203631353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:17df::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:be:ce:6f:3f:f8:70:33:d5:84:bc:59:16:f8:d6:95:b6:d9:
         98:14:60:f7:4a:20:a4:36:2a:dc:81:f6:e1:48:3f:47:04:ff:
         b4:7a:98:a1:2c:fc:6b:fd:40:35:e5:36:fb:5c:e6:d1:f0:b9:
         8b:e4:b5:dc:9a:ac:b1:f4:3e:92:20:ec:ee:c0:a6:f2:e4:07:
         21:0a:32:ff:b2:ae:f5:e4:9c:44:0d:3c:15:62:71:f2:a6:7e:
         4a:62:26:f4:4f:bd:5f:a1:77:78:3c:6a:20:56:de:e1:11:02:
         fe:67:f9:07:62:b0:c6:5a:91:b8:4f:55:d5:09:f3:c4:0e:41:
         ee:ce:3b:a0:4d:95:57:37:2d:61:65:c1:1c:a9:23:aa:02:e1:
         a7:bb:18:64:09:e1:f1:40:e8:f9:f3:8f:1d:7d:6e:7d:89:8d:
         25:83:0a:25:cb:8e:48:90:e8:d4:2c:02:2d:d1:b0:5f:00:97:
         b8:34:96:20:ef:a2:6c:7d:15:47:ff:bb:61:b1:d5:20:94:59:
         11:c7:4c:9c:17:ae:43:3a:c0:b2:ae:40:de:0f:55:d4:d1:52:
         50:24:e3:af:91:d0:50:fe:96:7d:af:58:0f:78:99:a4:85:f4:
         8a:16:dd:fc:df:6b:42:d5:11:86:f4:9d:71:17:7e:94:16:d3:
         2f:1d:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:29:14 2026 by rpki-client