Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/323830343a356630633a3a2f33322d3438203d3e20323639303733.roa
File:                     323830343a356630633a3a2f33322d3438203d3e20323639303733.roa (raw, json)
Hash identifier:          UEPD61wf5X0WsMxenaxjV1rCyMBAZkP61SsMaJmc7nI=
Subject key identifier:   EF:8C:BE:94:24:D1:CD:C2:C8:76:78:58:40:61:4C:BC:25:8D:94:41
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       0F343A6F48A8B05EDE33C0F64279DB496A58D2E9
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/323830343a356630633a3a2f33322d3438203d3e20323639303733.roa
Signing time:             Mon 08 Jun 2026 12:42:38 +0000
ROA not before:           Mon 08 Jun 2026 12:37:38 +0000
ROA not after:            Mon 07 Jun 2027 12:42:38 +0000
asID:                     269073
IP address blocks:        2804:5f0c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 23:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:34:3a:6f:48:a8:b0:5e:de:33:c0:f6:42:79:db:49:6a:58:d2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Jun  8 12:37:38 2026 GMT
            Not After : Jun  7 12:42:38 2027 GMT
        Subject: CN=EF8CBE9424D1CDC2C876785840614CBC258D9441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:8c:01:86:a5:8e:ad:71:9b:1e:58:63:0a:
                    af:e7:76:42:e2:74:d3:38:3d:ff:58:97:e4:b9:33:
                    b0:9f:e0:cb:4e:17:92:e2:7f:ba:86:a8:b7:12:af:
                    96:20:e3:9a:b7:18:ff:1d:08:1f:13:b0:13:0f:9c:
                    03:54:71:02:ba:5a:d2:9c:08:36:32:d4:41:5d:6c:
                    76:54:d6:fe:63:93:2b:e7:93:06:4b:62:cd:b6:52:
                    9c:34:01:e5:f6:8c:36:21:a6:dd:44:1f:02:8c:84:
                    a1:84:26:ae:7d:92:9d:b2:32:62:94:bf:bc:49:7f:
                    5b:74:0c:c5:47:f1:95:c0:df:f7:8f:98:cb:c5:2e:
                    fc:61:0e:13:9f:c2:6a:10:cd:8e:49:8a:cd:3b:82:
                    93:61:34:66:1d:9b:93:ce:0d:4c:13:24:a1:37:e7:
                    68:b1:e6:59:0f:87:a0:c3:0a:61:ba:7b:da:2e:cd:
                    3b:83:41:0f:70:df:2b:8d:3e:26:8f:a0:c0:9f:d1:
                    20:33:d5:82:83:fc:50:97:da:8a:1b:a5:8b:dc:4d:
                    60:8e:e5:62:e7:2f:ad:16:c0:36:f4:53:8d:a5:59:
                    21:7e:78:b8:d4:34:61:92:c6:17:1a:39:90:d1:fe:
                    3d:d7:fb:a9:8d:47:ff:61:dd:f1:61:cd:12:21:f9:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8C:BE:94:24:D1:CD:C2:C8:76:78:58:40:61:4C:BC:25:8D:94:41
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/323830343a356630633a3a2f33322d3438203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:84:d8:33:5a:db:7e:ab:c9:37:8c:77:c9:9f:62:3d:6f:3f:
         1d:f0:97:0c:53:83:d8:0a:7b:16:7d:67:6f:f4:fe:f2:2a:13:
         78:e5:89:10:78:04:c5:9a:8e:62:81:8f:9c:a3:89:81:fd:1f:
         89:e2:57:77:f3:a3:32:02:df:ee:d9:49:27:d6:dd:8a:68:a9:
         b4:96:96:e5:b7:ff:4e:e0:b3:a3:e2:b0:84:cc:27:f2:6b:76:
         de:56:27:7b:87:99:bb:e9:01:fa:2d:9a:0f:ad:3b:8c:dc:d0:
         33:da:66:8a:2e:3d:ee:0e:67:b5:2d:aa:20:03:a6:7b:1e:5b:
         36:32:23:2e:41:47:b0:46:57:2b:b0:93:f2:93:1a:19:bb:24:
         8b:04:6f:65:9d:b3:69:dd:17:3c:b6:d7:b2:d6:f0:7b:98:19:
         4f:8a:ef:9e:d2:ce:1f:75:b8:9d:4a:98:95:87:1f:ec:26:2c:
         25:e5:51:8f:a8:97:61:fe:00:76:06:31:2b:7c:26:99:73:43:
         e8:56:d6:c2:b0:6a:71:5c:c1:b9:71:43:94:95:fb:8a:27:05:
         02:dd:61:64:10:40:c8:49:14:9b:53:6e:5e:af:78:d9:ea:bc:
         89:6f:51:c5:59:da:93:bc:bd:dc:95:2f:17:9a:a8:8b:8c:93:
         b4:2f:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:24:59 2026 by rpki-client