Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/323830343a6638343a3a2f33322d313238203d3e20323633353839.roa
File:                     323830343a6638343a3a2f33322d313238203d3e20323633353839.roa (raw, json)
Hash identifier:          BJJxrGBzIQjYL7a4JlJqyIDnSyGO23KcAireiQNZvLI=
Subject key identifier:   91:DE:ED:E5:A7:37:03:D2:D6:7B:81:96:62:E0:85:91:D7:42:34:6B
Certificate issuer:       /CN=152BD93E6DEE45ED029C88DEAC673976658E9A91
Certificate serial:       42357AB152E516250234023AEE3405BF780B81CE
Authority key identifier: 15:2B:D9:3E:6D:EE:45:ED:02:9C:88:DE:AC:67:39:76:65:8E:9A:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/323830343a6638343a3a2f33322d313238203d3e20323633353839.roa
Signing time:             Wed 01 Jul 2026 13:58:43 +0000
ROA not before:           Wed 01 Jul 2026 13:53:43 +0000
ROA not after:            Wed 30 Jun 2027 13:58:43 +0000
asID:                     263589
IP address blocks:        2804:f84::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.crl
                          rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:35:7a:b1:52:e5:16:25:02:34:02:3a:ee:34:05:bf:78:0b:81:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152BD93E6DEE45ED029C88DEAC673976658E9A91
        Validity
            Not Before: Jul  1 13:53:43 2026 GMT
            Not After : Jun 30 13:58:43 2027 GMT
        Subject: CN=91DEEDE5A73703D2D67B819662E08591D742346B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:7f:15:62:70:3d:06:76:54:d9:6a:59:13:
                    f5:8b:cf:73:79:9b:2a:a4:f9:d1:67:4f:bb:00:0f:
                    a7:4b:4e:7c:04:7e:cd:3e:96:db:23:ab:78:4d:2a:
                    8b:c2:a8:5d:d5:d2:80:59:24:64:59:26:c6:a0:94:
                    0b:0f:10:1a:f7:1c:bb:79:6f:b9:d7:50:d4:24:7d:
                    f2:56:a3:5e:2e:27:f4:07:1d:7f:5a:a8:f5:63:b8:
                    33:a2:25:0b:c5:b8:42:47:69:c9:83:c4:d4:2e:24:
                    70:57:02:d3:60:9a:4e:29:63:bf:3d:61:b7:44:fb:
                    c9:5e:b0:77:1e:1c:3f:14:92:d1:53:f4:25:b8:74:
                    1e:7e:4c:d2:cf:24:7a:92:57:f1:ff:14:77:41:d4:
                    97:b4:a6:d9:d6:91:3c:15:0a:44:de:86:00:f6:c2:
                    3c:74:d0:5c:68:3c:38:02:8e:79:c5:9e:8c:f2:6d:
                    25:fd:27:b3:b5:1c:b7:9a:9d:e5:ef:c1:e5:57:35:
                    84:0b:87:ff:a0:a5:0e:1d:c6:fc:f4:6d:53:99:a8:
                    5a:27:72:86:38:b4:67:62:08:86:6e:1c:fe:35:2d:
                    42:4d:ae:b4:98:0b:f8:38:27:10:b9:16:11:e2:a5:
                    ab:35:85:83:03:14:bd:c7:4a:a6:f0:c4:03:40:dc:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DE:ED:E5:A7:37:03:D2:D6:7B:81:96:62:E0:85:91:D7:42:34:6B
            X509v3 Authority Key Identifier:
                keyid:15:2B:D9:3E:6D:EE:45:ED:02:9C:88:DE:AC:67:39:76:65:8E:9A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/323830343a6638343a3a2f33322d313238203d3e20323633353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f84::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:96:10:4c:3d:f4:14:e1:ab:f5:2a:5d:64:d9:75:5c:52:77:
         c7:0c:8b:f7:4b:21:da:cc:5e:17:17:6b:03:fe:d2:74:8c:60:
         93:46:16:ee:cc:7c:09:03:3e:0c:d6:34:0a:ff:65:ee:38:7b:
         d9:20:7d:dc:e3:1f:cf:40:d6:a4:82:5f:59:e1:61:71:55:8a:
         e7:c8:d8:bf:98:af:05:2a:ba:54:9f:34:dd:7a:87:f3:eb:37:
         15:ac:63:27:68:fb:cb:93:b6:ee:b0:21:cd:99:c4:64:e3:b0:
         8e:15:e7:1d:d0:66:14:91:9d:f8:33:e9:f9:b3:d0:10:24:4e:
         97:2b:a4:bd:ee:f6:a2:37:c8:e7:52:e9:51:a0:81:d3:cd:4c:
         03:0e:32:c6:2a:5a:48:9e:27:5f:55:ec:58:7d:21:72:75:17:
         bb:16:97:eb:5b:0b:22:da:2a:59:b7:92:92:00:aa:0f:6c:59:
         1a:5c:7e:75:8e:1c:2c:a1:e7:87:c6:e4:ac:6f:7b:3d:08:bb:
         88:bc:de:d5:4b:a2:9a:c5:69:e4:56:99:b5:4b:cf:cf:46:91:
         b1:27:c0:69:a7:d0:c8:ef:d0:16:c6:07:42:2b:50:f1:23:40:
         f5:1b:b8:2e:32:07:58:cd:91:77:45:be:3f:a2:24:81:28:5e:
         95:09:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:03 2026 by rpki-client