Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          b/6nKaqDdzEbfjPAOKI+jiauGUXDUdE38bEqkzp2CdE=
Subject key identifier:   D7:38:A7:60:DD:3E:28:FB:D7:A6:28:BC:A5:CB:8B:EF:F8:F4:8C:17
Certificate issuer:       /CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
Certificate serial:       1271F5E6451C5F66A9016C6802AC51337F0C9203
Authority key identifier: D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Wed 27 May 2026 17:08:05 +0000
ROA not before:           Wed 27 May 2026 17:03:05 +0000
ROA not after:            Wed 26 May 2027 17:08:05 +0000
asID:                     271612
IP address blocks:        2804:7e40:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 16:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:71:f5:e6:45:1c:5f:66:a9:01:6c:68:02:ac:51:33:7f:0c:92:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
        Validity
            Not Before: May 27 17:03:05 2026 GMT
            Not After : May 26 17:08:05 2027 GMT
        Subject: CN=D738A760DD3E28FBD7A628BCA5CB8BEFF8F48C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:93:0b:6a:e1:51:bb:cb:2f:c8:63:c4:aa:
                    5c:1f:c0:03:26:ce:bb:a1:0f:a8:1c:bc:b2:cf:5c:
                    a3:31:a3:f1:4a:87:34:36:93:e8:01:45:db:e0:1e:
                    36:aa:4e:0f:10:7c:ef:df:1b:52:63:b9:86:58:1c:
                    ce:9b:01:c9:a0:b0:d2:ef:82:1d:e7:e4:34:f6:2e:
                    4e:39:52:65:26:3f:4a:f4:a8:bd:81:3a:8e:a4:a8:
                    25:61:0f:60:1f:f4:5a:9a:fe:6c:be:6f:1d:5b:1d:
                    f2:4f:d4:7e:9f:7e:63:e9:85:a6:8e:ad:0e:03:e9:
                    ba:0e:40:17:7e:b0:ba:45:c1:6b:2a:e3:07:c6:39:
                    a0:2b:1e:0f:6d:2e:ae:46:14:6a:f1:9a:7e:37:6b:
                    1c:ce:0e:cc:d7:d1:13:2b:7d:3b:21:37:16:7a:87:
                    8a:5f:02:66:6c:de:0c:54:38:c2:13:f2:a2:bb:33:
                    20:55:0f:f8:44:35:7d:0d:da:dc:3a:b6:ba:f6:1e:
                    5a:21:92:1e:82:b2:cf:94:d1:59:e1:2d:4d:fa:73:
                    97:7d:c9:7c:5a:c0:8b:01:9b:2b:70:25:61:13:d3:
                    09:09:4c:5f:f5:3a:74:c8:f7:ac:ae:8b:f3:0c:ac:
                    63:20:3a:48:e1:56:11:eb:74:81:82:ca:ee:6a:ce:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:38:A7:60:DD:3E:28:FB:D7:A6:28:BC:A5:CB:8B:EF:F8:F4:8C:17
            X509v3 Authority Key Identifier:
                keyid:D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:0f:c1:cd:8a:7c:c7:cf:44:43:a5:6b:34:fb:7e:a0:fa:c5:
         b3:0b:50:d5:16:d4:e8:83:6c:d8:ec:85:ec:71:8a:15:40:f8:
         a0:61:7a:9e:72:9f:85:4d:f9:2e:b1:42:4c:6c:13:3c:db:e9:
         2b:e8:d4:10:2e:dd:e8:24:27:f2:2e:b9:24:74:49:dc:9f:b8:
         da:94:ae:30:b3:0c:55:44:d9:05:92:19:02:8c:67:47:62:db:
         1e:24:4b:c7:da:ff:34:e7:bb:fe:75:1d:79:46:f9:f8:e8:6d:
         9b:2f:bd:ae:9c:33:ad:8d:a7:7d:6c:7b:48:13:f5:eb:16:0a:
         7b:ef:50:53:ee:25:91:e1:64:53:40:cc:2d:a1:00:c5:f3:84:
         d3:10:62:dd:08:c8:1e:15:43:80:82:ef:f6:4c:d9:d0:94:31:
         fe:6f:3d:fc:0a:37:11:b7:d5:8a:16:a3:87:e8:fd:b2:f3:61:
         2d:2d:94:a0:7e:a6:ec:5b:11:86:be:06:ee:ec:ad:29:e2:2e:
         16:70:39:fc:8d:8e:05:0f:51:07:be:0c:af:72:9f:b8:2b:ce:
         5c:da:4a:ec:f0:12:ba:9c:a4:80:71:d9:63:f2:65:7d:5a:e4:
         28:6d:db:d5:d3:3b:7b:c0:48:14:21:a0:bc:f3:31:1f:a9:91:
         07:4a:bd:cb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEnH15kUcX2apAWxoAqxRM38MkgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ0OUUzN0RFNUZERTFDNDE0RjE2OUJBMDBDOUFDNjNE
NTZFRUY4MzAeFw0yNjA1MjcxNzAzMDVaFw0yNzA1MjYxNzA4MDVaMDMxMTAvBgNV
BAMTKEQ3MzhBNzYwREQzRTI4RkJEN0E2MjhCQ0E1Q0I4QkVGRjhGNDhDMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGv5MLauFRu8svyGPEqlwfwAMm
zruhD6gcvLLPXKMxo/FKhzQ2k+gBRdvgHjaqTg8QfO/fG1JjuYZYHM6bAcmgsNLv
gh3n5DT2Lk45UmUmP0r0qL2BOo6kqCVhD2Af9Fqa/my+bx1bHfJP1H6ffmPphaaO
rQ4D6boOQBd+sLpFwWsq4wfGOaArHg9tLq5GFGrxmn43axzODszX0RMrfTshNxZ6
h4pfAmZs3gxUOMIT8qK7MyBVD/hENX0N2tw6trr2Hlohkh6Css+U0VnhLU36c5d9
yXxawIsBmytwJWET0wkJTF/1OnTI96yui/MMrGMgOkjhVhHrdIGCyu5qzq7tAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU1zinYN0+KPvXpii8pcuL7/j0jBcwHwYDVR0j
BBgwFoAU1EnjfeX94cQU8Wm6AMmsY9Vu74MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM
bjUvMC9ENDQ5RTM3REU1RkRFMUM0MTRGMTY5QkEwMEM5QUM2M0Q1NkVFRjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NDlFMzdERTVGREUxQzQx
NEYxNjlCQTAwQzlBQzYzRDU2RUVGODMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzAv
MzIzODMwMzQzYTM3NjUzNDMwM2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMTM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEfkAQMA0GCSqGSIb3DQEBCwUA
A4IBAQBtD8HNinzHz0RDpWs0+36g+sWzC1DVFtTog2zY7IXscYoVQPigYXqecp+F
TfkusUJMbBM82+kr6NQQLt3oJCfyLrkkdEncn7jalK4wswxVRNkFkhkCjGdHYtse
JEvH2v8057v+dR15Rvn46G2bL72unDOtjad9bHtIE/XrFgp771BT7iWR4WRTQMwt
oQDF84TTEGLdCMgeFUOAgu/2TNnQlDH+bz38CjcRt9WKFqOH6P2y82EtLZSgfqbs
WxGGvgbu7K0p4i4WcDn8jY4FD1EHvgyvcp+4K85c2krs8BK6nKSAcdlj8mV9WuQo
bdvV0zt7wEgUIaC88zEfqZEHSr3L
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:08:52 2026 by rpki-client