Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/323830343a376132633a3a2f33322d3332203d3e20323731333532.roa
File:                     323830343a376132633a3a2f33322d3332203d3e20323731333532.roa (raw, json)
Hash identifier:          nz9aheDg+wg00VMT52Wvj8bW3fJo1XafZAoyXVrPZC0=
Subject key identifier:   94:73:66:18:28:8D:FF:9E:8E:44:64:5A:87:CD:16:08:2A:F8:06:E2
Certificate issuer:       /CN=66CDB035108BA5CAF5AF8D476FF862F54C5DE911
Certificate serial:       57D2B5C3BA65EB95913BEB88819B44BFAE5D6947
Authority key identifier: 66:CD:B0:35:10:8B:A5:CA:F5:AF:8D:47:6F:F8:62:F5:4C:5D:E9:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/323830343a376132633a3a2f33322d3332203d3e20323731333532.roa
Signing time:             Tue 19 May 2026 14:01:26 +0000
ROA not before:           Tue 19 May 2026 13:56:26 +0000
ROA not after:            Tue 18 May 2027 14:01:26 +0000
asID:                     271352
IP address blocks:        2804:7a2c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.crl
                          rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d2:b5:c3:ba:65:eb:95:91:3b:eb:88:81:9b:44:bf:ae:5d:69:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66CDB035108BA5CAF5AF8D476FF862F54C5DE911
        Validity
            Not Before: May 19 13:56:26 2026 GMT
            Not After : May 18 14:01:26 2027 GMT
        Subject: CN=94736618288DFF9E8E44645A87CD16082AF806E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:90:eb:87:3b:e6:b4:f7:0d:81:6a:51:6b:
                    ed:5b:ff:f5:96:9e:38:61:13:0e:d5:bc:07:c2:f2:
                    e4:53:30:e4:25:b4:e9:b4:61:15:51:58:81:01:be:
                    99:7d:a2:49:de:c1:f9:8b:77:83:f3:c2:b1:70:f9:
                    95:62:c0:0a:e4:c4:ca:d9:92:cc:4a:9a:c9:cc:1e:
                    21:20:20:de:49:2b:9c:83:73:9d:9e:12:71:ca:23:
                    dd:f2:dd:e9:dd:a7:48:44:93:b4:5b:8b:91:1c:7d:
                    35:e3:0d:6a:d1:fe:6d:d9:0f:42:37:57:87:02:f1:
                    0b:a7:ea:b8:97:c0:97:72:85:19:a6:de:91:b2:29:
                    46:28:8a:8d:95:72:e9:8f:ca:c0:fc:56:17:7f:59:
                    fa:f3:5c:48:84:02:af:bb:c1:20:a9:7d:63:76:88:
                    41:95:08:c4:ac:30:7d:88:e5:ad:4f:30:fc:e1:3a:
                    91:46:dc:4d:d3:bb:47:c8:81:e0:ab:02:75:06:53:
                    19:4f:1a:1c:03:c7:f3:6f:8d:58:26:ac:33:1f:4c:
                    a6:54:6a:33:34:3d:78:02:70:c5:6a:89:58:9d:7b:
                    f2:a2:1a:80:07:8b:5d:78:53:06:0b:10:9a:db:bd:
                    2e:10:f5:75:52:f7:44:f1:88:52:00:c4:bc:b9:c3:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:73:66:18:28:8D:FF:9E:8E:44:64:5A:87:CD:16:08:2A:F8:06:E2
            X509v3 Authority Key Identifier:
                keyid:66:CD:B0:35:10:8B:A5:CA:F5:AF:8D:47:6F:F8:62:F5:4C:5D:E9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/323830343a376132633a3a2f33322d3332203d3e20323731333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:33:b2:77:14:62:17:e9:7c:bd:4d:20:3b:2e:c0:e8:b2:fc:
         bf:8c:37:f6:d5:ec:03:77:8a:be:3b:68:0f:c6:10:70:fe:c6:
         21:e5:bc:1b:5a:7d:38:e9:7b:b7:e4:03:1b:42:cc:5a:0f:97:
         52:50:c3:0c:5a:1b:ef:f0:9a:a5:c7:82:6a:fe:c0:8c:6e:04:
         1d:f6:f2:d7:47:e2:da:39:21:48:74:76:f8:65:88:fc:b8:ce:
         f9:34:a1:a4:be:b2:a6:be:d6:df:bd:cb:e0:bc:20:9e:cb:6c:
         76:95:15:3e:bb:42:d8:cc:e7:02:b6:fc:de:a2:24:28:10:04:
         96:06:79:56:f5:cc:09:b3:fb:c0:37:b6:72:c3:a9:35:90:2e:
         bf:a6:86:97:f0:85:c9:72:a7:4f:ed:0c:ef:e6:f3:17:ed:57:
         49:ac:8d:67:2c:5c:bd:a3:39:ff:6c:23:d6:52:e4:4b:a5:3b:
         3f:11:dd:dc:76:d6:67:58:2d:87:00:41:e0:06:30:79:c9:55:
         c4:96:44:94:21:f9:cf:9f:e2:c4:61:c5:67:0e:3e:44:90:01:
         79:eb:42:d2:cd:1b:b4:44:1b:e7:14:91:1c:63:5e:2d:42:a9:
         c7:b3:7a:57:ed:2f:e0:51:ef:f2:31:88:85:e3:0a:b6:41:9d:
         74:7a:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:17:14 2026 by rpki-client