Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/323830343a326239343a3a2f33322d313238203d3e20323635313631.roa
File:                     323830343a326239343a3a2f33322d313238203d3e20323635313631.roa (raw, json)
Hash identifier:          uQMdl9fglRtvk0BMT59O2V3hfMOFHBOb1+zJdZn8zgw=
Subject key identifier:   56:7B:BB:A2:70:7F:10:58:B5:13:2F:DE:D2:C5:76:37:4E:72:50:99
Certificate issuer:       /CN=88253E1822F73AA3A3B16BE2183CEC4E54413750
Certificate serial:       114F7355371C6F1D209EAA5623BB413D4ECE4684
Authority key identifier: 88:25:3E:18:22:F7:3A:A3:A3:B1:6B:E2:18:3C:EC:4E:54:41:37:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88253E1822F73AA3A3B16BE2183CEC4E54413750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/323830343a326239343a3a2f33322d313238203d3e20323635313631.roa
Signing time:             Tue 02 Jun 2026 11:31:58 +0000
ROA not before:           Tue 02 Jun 2026 11:26:58 +0000
ROA not after:            Tue 01 Jun 2027 11:31:58 +0000
asID:                     265161
IP address blocks:        2804:2b94::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/88253E1822F73AA3A3B16BE2183CEC4E54413750.crl
                          rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/88253E1822F73AA3A3B16BE2183CEC4E54413750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88253E1822F73AA3A3B16BE2183CEC4E54413750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 21:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4f:73:55:37:1c:6f:1d:20:9e:aa:56:23:bb:41:3d:4e:ce:46:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88253E1822F73AA3A3B16BE2183CEC4E54413750
        Validity
            Not Before: Jun  2 11:26:58 2026 GMT
            Not After : Jun  1 11:31:58 2027 GMT
        Subject: CN=567BBBA2707F1058B5132FDED2C576374E725099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:86:1d:44:cc:e7:5f:f1:eb:0e:64:f8:6d:
                    a3:a2:4a:92:15:91:c0:86:fd:cb:30:3f:1a:44:be:
                    12:31:a1:09:5b:3b:cc:e8:96:79:2c:aa:43:1c:3e:
                    96:8c:dd:bf:30:63:d2:9b:6d:f4:42:a0:d3:69:bd:
                    c2:69:b6:15:5a:cf:7a:4d:01:39:e7:12:d5:ce:4b:
                    3f:85:9a:c7:31:0c:aa:a8:8c:75:8a:c5:a7:2d:20:
                    71:22:52:81:0a:22:9c:ff:80:3f:3a:03:ef:6e:4a:
                    b1:49:2e:82:12:72:31:08:78:a8:a0:4d:3c:be:b3:
                    d8:df:42:d5:dc:be:2c:d5:51:ac:ec:9a:f1:d8:4c:
                    05:8d:b1:fc:d8:99:86:7c:48:c0:6b:fa:73:03:fb:
                    3d:48:c4:fa:a6:4e:e9:02:dd:72:41:d2:de:b6:19:
                    bb:85:fc:76:cd:cf:4e:07:b4:8c:f1:28:27:28:25:
                    e4:c0:68:0b:86:2f:8c:18:fe:17:81:a8:1a:49:7a:
                    c0:5e:14:49:24:8c:34:86:df:44:b4:fd:52:60:98:
                    85:e8:f3:47:73:06:85:b0:ea:7a:8b:3c:ac:47:ad:
                    b8:8f:f7:dd:ee:dc:b2:20:b9:8d:9f:05:79:32:d9:
                    b2:9c:19:ba:70:41:02:e4:7b:5d:ff:8e:16:bf:e6:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:BB:A2:70:7F:10:58:B5:13:2F:DE:D2:C5:76:37:4E:72:50:99
            X509v3 Authority Key Identifier:
                keyid:88:25:3E:18:22:F7:3A:A3:A3:B1:6B:E2:18:3C:EC:4E:54:41:37:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/88253E1822F73AA3A3B16BE2183CEC4E54413750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88253E1822F73AA3A3B16BE2183CEC4E54413750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/323830343a326239343a3a2f33322d313238203d3e20323635313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b94::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:85:9c:5b:20:eb:84:00:13:af:ad:f0:b9:50:0b:f9:2c:3f:
         fa:91:b6:22:4d:43:ad:85:c1:32:9a:65:01:e2:b7:c1:29:0d:
         33:ad:80:f5:e7:a1:d4:e4:de:41:c3:bb:d5:0d:a1:31:f8:b0:
         c3:66:1c:6e:d6:4f:d9:18:05:16:f4:34:dd:de:d5:54:2b:5f:
         fa:c4:91:6a:ca:8b:6e:ab:2a:cc:6a:f5:63:7e:bd:67:fb:53:
         e7:e1:1f:85:03:7d:7a:d1:47:fd:60:08:b4:ec:87:72:9a:a2:
         3a:c3:4d:40:36:d1:f9:be:43:d1:f1:35:a0:d3:36:2a:80:fe:
         8a:3e:ac:4e:fc:a3:24:0e:e2:ed:75:08:f6:98:27:1d:2f:77:
         ab:88:a9:36:59:01:d2:1f:c9:9a:36:81:bf:c7:1d:6c:77:d4:
         a8:84:d6:81:d7:c9:3b:91:3e:58:0b:a1:34:8d:47:45:02:79:
         07:60:10:cb:55:26:c2:0d:8f:15:e6:a9:03:79:15:ea:94:86:
         ba:f9:2f:9b:ea:c5:ad:48:d4:a7:eb:7a:09:4e:75:d9:81:17:
         9d:75:58:de:1a:d2:93:38:b8:f5:81:9b:d8:a8:67:02:c4:4f:
         2b:8a:91:83:c9:40:a5:fb:66:89:ab:2a:2b:6c:25:d3:02:bb:
         c9:ef:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:57:38 2026 by rpki-client