Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3230303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a3230303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          SvmIKFjpixlKimtZif19Ly6pnPyuLZzI6jaKKjbQUvE=
Subject key identifier:   66:1A:13:04:3C:63:05:E9:F8:07:AE:68:B5:D5:07:9F:7A:80:61:E0
Certificate issuer:       /CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
Certificate serial:       3C33EFF4B0EB42525137FB52FDDC010BCB013032
Authority key identifier: D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3230303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Wed 27 May 2026 17:08:01 +0000
ROA not before:           Wed 27 May 2026 17:03:01 +0000
ROA not after:            Wed 26 May 2027 17:08:01 +0000
asID:                     271612
IP address blocks:        2804:7e40:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 16:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:33:ef:f4:b0:eb:42:52:51:37:fb:52:fd:dc:01:0b:cb:01:30:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
        Validity
            Not Before: May 27 17:03:01 2026 GMT
            Not After : May 26 17:08:01 2027 GMT
        Subject: CN=661A13043C6305E9F807AE68B5D5079F7A8061E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:02:91:99:8c:15:fe:fa:2f:6c:3d:c4:56:
                    4a:32:64:47:da:bc:f4:85:e3:54:fe:22:00:8c:50:
                    63:88:9f:67:9d:86:b5:c2:b1:04:fe:88:67:5c:38:
                    95:d5:c3:5a:4a:6d:75:a9:c6:00:bb:07:1b:14:7c:
                    6a:9c:df:13:59:df:a7:7f:18:3c:52:ee:68:be:26:
                    b0:b1:d2:a9:53:e8:5c:9f:cf:60:2f:f5:e8:c7:eb:
                    c1:67:8e:5e:f8:24:be:88:7f:ac:c3:d7:6a:fc:79:
                    31:f9:43:bb:e2:d4:4e:5e:6e:3c:ff:e8:87:d4:d6:
                    3b:28:9c:90:5e:4a:3a:e0:12:23:f5:cf:ec:71:b0:
                    3f:0e:74:66:f7:39:a0:4c:e5:de:41:1b:85:cf:1f:
                    8e:d2:cd:99:09:a0:6a:b9:66:e2:42:25:a8:19:e7:
                    b0:48:1a:66:a0:3f:f9:bf:82:6c:b3:e6:b5:4b:7a:
                    1a:28:b7:f1:32:27:aa:82:3b:c0:94:f4:ca:cb:c2:
                    44:35:72:05:49:ad:ae:e0:01:b5:99:9f:92:55:dc:
                    de:d8:02:bb:1f:cc:03:a3:9e:e6:60:dc:eb:98:f4:
                    79:9d:92:be:a8:a2:55:85:fe:f9:9e:fb:23:eb:77:
                    1a:a1:d2:53:90:22:bd:3b:52:c8:bb:03:91:b7:13:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1A:13:04:3C:63:05:E9:F8:07:AE:68:B5:D5:07:9F:7A:80:61:E0
            X509v3 Authority Key Identifier:
                keyid:D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3230303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:4a:b7:45:ae:78:19:67:ac:ca:3f:60:58:ad:d6:ce:96:
         7d:4b:5c:1e:58:ef:9d:45:d6:ae:49:f3:29:54:e2:a3:ce:a1:
         68:37:c4:94:c8:19:e3:78:f7:6d:ae:50:a5:2a:cd:27:06:12:
         25:db:b9:84:66:82:fe:b1:4c:96:88:82:a7:b2:72:9f:be:38:
         21:e9:0c:76:a0:93:56:09:d5:6d:53:c5:03:1b:de:98:79:76:
         56:06:f4:7f:95:65:88:73:95:0c:ec:da:6f:80:81:ed:d2:a8:
         24:e1:d5:e8:09:da:6b:ba:ed:02:bc:b8:0a:cf:00:60:9c:c7:
         96:04:cd:19:47:62:cf:81:da:03:43:f0:a8:58:a7:20:66:71:
         a6:73:7d:52:95:f7:e7:29:54:85:2d:89:4c:29:87:f6:1e:98:
         bf:20:1e:08:b9:56:49:28:97:1d:a9:d3:ef:a2:6b:90:62:9a:
         3f:af:1d:dc:fb:bc:c8:d3:b7:3a:9a:8d:bf:19:73:21:ff:ba:
         d3:fb:ec:c8:d3:51:ae:4e:60:55:6c:cd:fc:b7:12:06:44:06:
         cf:1b:3a:cb:cd:12:df:45:60:51:1f:36:be:4c:b1:06:f5:08:
         a8:cb:80:98:2d:f9:4f:82:c6:7b:d0:bf:5f:32:b6:f1:4b:78:
         0a:8e:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:03 2026 by rpki-client