Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/323830343a363333303a3a2f33322d313238203d3e20323639333434.roa
File:                     323830343a363333303a3a2f33322d313238203d3e20323639333434.roa (raw, json)
Hash identifier:          /W8ixXc57I4yt5WZLwS1829L8iJsObmYCyHf71E43c0=
Subject key identifier:   8B:63:1A:E3:97:67:F4:73:09:2A:74:65:4A:31:A9:8A:BC:C9:2F:A2
Certificate issuer:       /CN=230EFCB699C0FEA1A2484670B3A15A4FBF2162B3
Certificate serial:       37735D761E6A7D49F54753D1E45D1F6E42FDAE92
Authority key identifier: 23:0E:FC:B6:99:C0:FE:A1:A2:48:46:70:B3:A1:5A:4F:BF:21:62:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/323830343a363333303a3a2f33322d313238203d3e20323639333434.roa
Signing time:             Mon 27 Jul 2026 12:45:22 +0000
ROA not before:           Mon 27 Jul 2026 12:40:22 +0000
ROA not after:            Mon 26 Jul 2027 12:45:22 +0000
asID:                     269344
IP address blocks:        2804:6330::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.crl
                          rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 01:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:73:5d:76:1e:6a:7d:49:f5:47:53:d1:e4:5d:1f:6e:42:fd:ae:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230EFCB699C0FEA1A2484670B3A15A4FBF2162B3
        Validity
            Not Before: Jul 27 12:40:22 2026 GMT
            Not After : Jul 26 12:45:22 2027 GMT
        Subject: CN=8B631AE39767F473092A74654A31A98ABCC92FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:60:36:42:5b:61:63:97:c5:55:76:7f:51:
                    b2:3a:c8:66:1d:12:82:27:5f:86:93:6e:7d:69:44:
                    f5:a4:3b:ad:38:0e:b3:55:bc:f6:8c:64:31:95:f0:
                    3a:48:c1:f6:8b:3d:46:69:09:5c:c3:e7:43:74:52:
                    e3:9a:4e:12:e1:57:c9:6d:4e:5c:ff:93:1d:74:88:
                    10:c6:dc:e4:27:9a:a4:37:b6:0b:24:98:88:50:8a:
                    57:14:11:cd:7b:fe:95:38:e8:a6:e6:2a:ac:0b:20:
                    49:3d:29:96:94:8b:a6:4b:6b:2c:b4:77:09:65:73:
                    1b:73:8b:eb:c6:c0:1a:56:1e:ea:c8:2b:73:a2:4c:
                    4e:32:27:9a:3d:d5:71:a8:51:4f:f3:17:ae:54:5d:
                    71:75:4f:86:80:53:51:be:ed:a4:3c:44:28:90:10:
                    a4:9e:e9:d4:be:e9:78:2a:a0:eb:5e:10:bb:1f:6d:
                    4d:c6:92:bb:33:69:22:af:c9:76:ff:ae:a3:cc:e9:
                    2a:ac:bd:62:68:01:5f:62:e1:9a:04:4c:60:19:0f:
                    0b:9d:87:00:95:44:95:b9:8a:f1:b5:8a:6e:11:59:
                    12:6a:29:bf:1a:35:a0:5c:6a:20:a8:ec:ab:1c:67:
                    20:8c:37:b3:54:cc:8f:c5:57:4a:72:67:58:41:7c:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:63:1A:E3:97:67:F4:73:09:2A:74:65:4A:31:A9:8A:BC:C9:2F:A2
            X509v3 Authority Key Identifier:
                keyid:23:0E:FC:B6:99:C0:FE:A1:A2:48:46:70:B3:A1:5A:4F:BF:21:62:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/323830343a363333303a3a2f33322d313238203d3e20323639333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6330::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:42:34:31:79:86:27:1e:64:aa:92:55:b2:94:81:e8:95:33:
         2d:94:7f:6f:94:85:69:68:4d:cb:63:e4:4a:00:08:0f:43:80:
         82:c6:79:21:12:1f:da:fe:24:78:9b:15:f6:9a:f4:f3:ae:88:
         b1:66:c3:d8:13:37:0f:f8:5d:62:eb:56:78:c9:af:8c:71:a7:
         5d:28:5f:3e:70:a9:b8:41:43:87:16:6a:7d:96:ed:8b:d9:89:
         35:5f:ea:fe:a1:e6:fa:6a:0d:b0:7c:33:bc:c2:74:22:fc:48:
         f6:38:19:2a:7e:0e:ae:49:49:cc:5b:36:b8:46:84:6f:b1:e8:
         36:1b:a7:b8:2a:30:41:2d:26:ad:36:fd:42:27:f9:d9:9c:7d:
         c3:44:86:a0:b6:cd:29:7f:00:0a:98:57:b9:59:02:7b:3c:67:
         bb:a5:27:44:7c:82:56:b5:b2:f6:4e:d8:bd:85:39:68:11:0c:
         6c:01:4f:d5:09:e6:cf:9e:69:29:3d:68:3f:3f:3c:83:a9:5d:
         31:97:1a:f4:cc:1b:8c:ff:cd:40:7c:a5:98:dc:c9:26:ad:91:
         20:9f:10:46:29:1b:6b:e0:2b:52:89:82:66:d8:89:6e:a6:1b:
         9e:99:21:53:fa:5e:96:26:41:c6:db:b6:8b:80:cb:66:96:39:
         c7:1c:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:29:19 2026 by rpki-client