Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/323830343a333936343a343030303a3a2f33342d3334203d3e20323636303238.roa
File:                     323830343a333936343a343030303a3a2f33342d3334203d3e20323636303238.roa (raw, json)
Hash identifier:          lyOVIWopD/U4VYm/24megMd6C+F+iVG9wxeVKa66OEE=
Subject key identifier:   0E:EF:70:7D:03:DA:04:07:56:3C:73:47:17:4C:4A:E5:01:F6:49:9F
Certificate issuer:       /CN=126CBB2E01C90415CAD8020379862F937CB88B35
Certificate serial:       12740A7CEC44F3E333557E3030F1F7E9C4DE7E10
Authority key identifier: 12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/323830343a333936343a343030303a3a2f33342d3334203d3e20323636303238.roa
Signing time:             Thu 24 Jul 2025 14:21:30 +0000
ROA not before:           Thu 24 Jul 2025 14:16:30 +0000
ROA not after:            Thu 23 Jul 2026 14:21:30 +0000
asID:                     266028
IP address blocks:        2804:3964:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl
                          rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:74:0a:7c:ec:44:f3:e3:33:55:7e:30:30:f1:f7:e9:c4:de:7e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126CBB2E01C90415CAD8020379862F937CB88B35
        Validity
            Not Before: Jul 24 14:16:30 2025 GMT
            Not After : Jul 23 14:21:30 2026 GMT
        Subject: CN=0EEF707D03DA0407563C7347174C4AE501F6499F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:2c:ab:55:23:7e:a8:3e:01:94:dd:f2:c9:
                    0a:3a:a5:91:fc:9d:55:fb:29:ee:ab:89:0a:7b:17:
                    a9:04:fc:44:fa:6a:6f:cb:b1:bd:62:dc:b2:4c:da:
                    4d:f5:bc:9a:b8:78:bc:13:18:41:8d:1d:76:ae:c8:
                    e7:72:05:d6:bc:a5:35:24:a1:ae:aa:a3:83:83:a7:
                    54:60:b8:72:74:28:19:07:71:b4:74:50:fd:fb:f3:
                    32:fb:ff:6b:d9:e6:58:61:82:63:d6:ac:01:9c:96:
                    6a:d5:32:65:26:69:a3:1b:92:97:0d:e2:be:41:b4:
                    0e:68:fe:d5:8e:e9:fe:e1:37:95:ca:e0:12:63:38:
                    d0:a8:ce:4d:a0:1d:c0:c8:56:14:b2:08:68:c7:d1:
                    bc:2d:bd:d2:0b:1a:aa:41:9d:53:28:d1:9b:64:4c:
                    8c:15:f7:22:96:de:ea:91:60:96:a7:85:9e:2d:1e:
                    ef:83:ca:5c:81:e8:2d:ba:ce:a7:86:66:c4:fa:47:
                    db:7c:c0:4b:f6:31:a7:4b:4c:91:c9:83:2b:32:06:
                    11:ac:07:d0:bd:e2:b0:6f:2e:3e:bb:56:d0:e7:fd:
                    21:81:77:d5:f5:c6:17:98:18:19:0d:16:87:27:e5:
                    b1:cb:a4:a6:26:fd:34:10:06:12:62:c1:60:0e:c3:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EF:70:7D:03:DA:04:07:56:3C:73:47:17:4C:4A:E5:01:F6:49:9F
            X509v3 Authority Key Identifier:
                keyid:12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/323830343a333936343a343030303a3a2f33342d3334203d3e20323636303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3964:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ab:08:4f:4d:d7:1f:a1:49:a2:48:b4:35:3c:3a:a8:55:8b:6f:
         94:58:47:66:8a:77:1b:c5:e3:41:9f:ce:99:7c:8c:0b:70:db:
         17:66:3d:20:83:16:82:05:03:28:d8:a4:93:77:69:6c:7a:b0:
         98:4c:71:cb:9d:89:2e:d4:da:7f:cf:f9:19:e5:55:9d:7f:6d:
         19:ef:45:29:d3:4c:c8:21:45:0f:8d:e9:8e:79:01:4e:87:46:
         31:05:be:24:92:cc:cb:38:c4:53:48:9c:34:d8:98:ba:9c:94:
         11:4c:1b:b8:e7:02:dc:cf:6b:01:3d:86:0f:d7:21:40:4a:15:
         5a:b1:e9:31:b7:74:d8:c8:ee:13:d8:90:86:9f:3b:6e:8a:3e:
         1a:81:2e:71:bf:d8:0e:d4:79:51:71:f0:e3:c8:dc:05:5f:46:
         98:a6:b1:5a:e2:c4:41:e0:49:95:e0:c9:9d:7d:12:51:4d:50:
         a6:a8:21:a1:b6:a5:b3:e8:9e:64:e0:ad:dd:af:fb:fe:1d:df:
         f5:06:35:f2:bb:dd:2d:f7:66:25:b2:4c:40:6e:9b:67:32:ba:
         44:66:49:6d:c2:df:18:d2:96:8f:a4:98:1f:92:1d:eb:0c:9d:
         98:70:ea:2c:39:26:67:10:f3:ff:6c:24:9f:81:0f:71:5e:63:
         c4:b6:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:52 2025 by rpki-client