Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa
File:                     323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa (raw, json)
Hash identifier:          gb1voSSFwAY7CAlCyTpgwvKZd4mOnkyf0Va+arGBcU4=
Subject key identifier:   73:6F:8D:A2:BB:84:BE:CB:85:10:A5:09:B0:1F:09:F3:79:32:E5:7A
Certificate issuer:       /CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
Certificate serial:       1CDC59EBD275F996AD4EEFBB8CF8C0E141ED14DF
Authority key identifier: D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa
Signing time:             Thu 25 Jun 2026 12:07:16 +0000
ROA not before:           Thu 25 Jun 2026 12:02:16 +0000
ROA not after:            Thu 24 Jun 2027 12:07:16 +0000
asID:                     265384
IP address blocks:        2804:3340:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 02:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:dc:59:eb:d2:75:f9:96:ad:4e:ef:bb:8c:f8:c0:e1:41:ed:14:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
        Validity
            Not Before: Jun 25 12:02:16 2026 GMT
            Not After : Jun 24 12:07:16 2027 GMT
        Subject: CN=736F8DA2BB84BECB8510A509B01F09F37932E57A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:e1:4a:3e:19:92:dd:b1:52:c6:ab:70:f1:
                    88:e0:9b:dc:25:90:d2:f5:c5:7c:18:79:24:1d:c9:
                    f5:f7:bb:58:82:58:8c:98:68:22:8d:de:56:39:ce:
                    39:9c:fc:ad:fe:c4:fc:93:43:ec:6c:4a:6b:ad:00:
                    93:8c:de:9e:9d:67:04:a0:36:aa:06:b8:e8:b9:15:
                    6d:b5:75:bb:cc:2c:17:51:35:14:71:b1:9d:7e:aa:
                    83:38:a5:08:70:ad:f9:3f:d6:6d:a8:0a:9e:84:5f:
                    a4:27:b2:d6:41:3a:4f:7e:c7:65:6c:4c:53:f9:c3:
                    3d:35:85:ec:f1:90:84:3a:16:48:62:a1:97:2d:ca:
                    23:41:6e:eb:05:4d:52:0a:4e:a0:75:5a:25:ad:4d:
                    1f:42:ad:33:2f:b5:df:7c:bb:19:bd:9d:d3:88:83:
                    1f:de:f1:89:b4:29:36:aa:5a:b7:86:f4:67:dd:fa:
                    1b:b5:d3:13:3e:7f:0c:c8:2c:94:35:6e:ff:02:43:
                    1e:73:a3:aa:5b:78:5a:93:d6:0c:ea:99:5d:7c:dc:
                    b8:9e:27:ec:98:8c:50:3f:e9:18:28:60:07:6d:f2:
                    c8:42:89:a8:62:74:64:0f:75:14:2d:a5:ee:73:88:
                    fa:5f:44:6a:64:e6:6f:62:94:da:9d:44:d5:d9:da:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6F:8D:A2:BB:84:BE:CB:85:10:A5:09:B0:1F:09:F3:79:32:E5:7A
            X509v3 Authority Key Identifier:
                keyid:D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:25:24:aa:44:f2:a6:65:a3:7f:22:5a:18:a7:8e:c6:b7:b5:
         09:3a:63:e0:67:3f:53:d1:b0:3b:31:42:01:bc:5e:5d:3d:01:
         9b:c6:5e:37:18:69:67:a4:f6:55:79:f9:4c:83:0a:2e:67:da:
         4d:cf:52:36:96:26:5c:e3:fe:24:67:23:f2:9f:01:6f:cb:1b:
         20:d4:0e:9b:ff:0e:44:84:fa:d8:ae:1f:77:33:95:42:9c:83:
         83:2e:2d:bb:39:44:7e:85:d7:7a:65:76:5b:5f:fc:1e:e5:95:
         ef:3a:33:b0:76:c2:3e:c4:63:a1:2f:e3:8e:46:93:a6:a8:21:
         be:71:8d:7f:15:22:58:2d:d3:47:2e:d8:6b:a4:36:91:28:9e:
         3e:60:3b:c8:6e:77:76:cf:54:8c:12:32:a6:05:2e:d9:62:4e:
         bd:db:38:fb:3a:5e:b7:b5:f1:b7:26:10:8c:31:97:0f:7b:c5:
         c8:e3:c5:4a:79:44:42:23:e9:78:13:0c:92:87:ac:f7:90:dc:
         44:29:93:b7:f1:ee:f9:aa:b4:bd:c6:f6:1f:dc:14:a9:cb:0d:
         26:fd:5f:d6:53:81:5b:7e:e6:84:f4:0b:d4:14:a4:7b:32:cc:
         df:25:d6:f5:d3:8f:7b:d3:a4:1f:28:6d:0c:44:08:a5:1c:22:
         6b:5f:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:26:29 2026 by rpki-client