Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          MjVVckNKHy4urhDF3cb9JL2Og5O0NTk7QgL5Mbpgf7U=
Subject key identifier:   69:BB:D3:9F:11:A4:A2:01:10:D5:93:BB:8D:ED:48:E7:25:D5:4E:A1
Certificate issuer:       /CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
Certificate serial:       10F1D977E736969CFEDE40FC4602A4A8D926B754
Authority key identifier: D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Wed 27 May 2026 17:08:10 +0000
ROA not before:           Wed 27 May 2026 17:03:10 +0000
ROA not after:            Wed 26 May 2027 17:08:10 +0000
asID:                     271612
IP address blocks:        2804:7e40:3000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 16:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f1:d9:77:e7:36:96:9c:fe:de:40:fc:46:02:a4:a8:d9:26:b7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
        Validity
            Not Before: May 27 17:03:10 2026 GMT
            Not After : May 26 17:08:10 2027 GMT
        Subject: CN=69BBD39F11A4A20110D593BB8DED48E725D54EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a4:9f:aa:f9:fa:81:6a:4d:8d:f5:0c:57:43:
                    c7:22:b8:74:6f:89:6e:d9:75:54:01:58:b2:f5:5b:
                    fb:a4:44:c4:d7:c0:96:9d:77:93:77:d9:1e:ef:ac:
                    fe:88:f5:02:9f:b2:13:00:e6:e4:db:46:8d:22:83:
                    22:31:9f:69:87:1c:84:0f:a6:7a:70:f4:04:1d:22:
                    08:a3:d6:5d:7a:b5:cb:98:94:f6:91:d5:66:2f:09:
                    22:68:46:c8:be:7e:26:1e:f6:ad:4e:b8:6d:66:22:
                    f2:dd:ab:7f:ba:2c:96:4b:95:79:22:e7:97:84:4e:
                    35:08:77:2e:1e:f6:a6:9e:5f:eb:79:00:ec:58:94:
                    7e:23:1e:97:2a:ce:c8:30:3f:ba:d5:5c:b5:1d:d0:
                    41:4d:a1:f5:cb:bf:d8:27:30:c2:1e:84:89:b8:10:
                    56:99:65:1c:35:2a:1b:48:69:91:56:ba:d3:6b:99:
                    65:32:4b:89:76:55:76:80:30:08:fc:f9:85:c6:72:
                    db:b9:a2:e4:0c:b7:be:5a:b5:d4:24:67:90:0d:0c:
                    30:f9:18:ab:1e:34:10:b1:35:2e:a8:f1:3d:b5:31:
                    9f:d9:e1:bc:1f:ac:80:2d:e4:5c:0b:b3:39:37:00:
                    b2:66:6b:24:a8:4c:4d:f2:98:5d:76:c7:94:d9:c5:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:D3:9F:11:A4:A2:01:10:D5:93:BB:8D:ED:48:E7:25:D5:4E:A1
            X509v3 Authority Key Identifier:
                keyid:D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a333030303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:ff:31:45:b9:e4:5d:cd:5f:24:26:9f:bc:b3:73:38:ad:
         4d:1b:91:e2:42:d2:82:a8:97:76:11:be:4c:b6:09:52:f2:80:
         dd:72:86:34:2d:d2:1c:01:9d:ec:ca:47:1b:fa:05:ae:f9:19:
         d2:6c:4a:f5:fc:a7:5b:c5:a7:26:de:94:71:20:62:94:c0:02:
         25:c2:b0:1d:86:64:68:aa:39:b0:e7:ee:c4:56:8a:4a:14:a6:
         e0:98:2c:08:7e:d6:8c:ba:5b:43:4a:e2:d7:b9:10:03:5f:24:
         e9:bc:7a:9b:04:4f:ce:e0:b7:dc:81:09:ab:6a:a3:69:4a:34:
         14:69:21:47:64:be:77:fc:e7:09:69:2c:ea:9b:2a:60:58:50:
         d0:df:a3:8c:8d:bd:91:ae:9d:58:82:d1:e1:00:4d:a8:ac:e6:
         37:d5:92:af:60:bf:b4:e4:cc:18:7f:cf:59:89:1b:a5:08:76:
         87:a2:a2:e3:a4:15:7b:eb:bc:4c:24:97:1d:f7:e1:d1:98:75:
         bb:3f:80:4d:f0:de:b7:f8:8e:7f:7f:20:d9:cc:ca:fd:35:84:
         f3:4c:19:30:d1:d4:f9:f1:dd:34:76:96:48:91:68:2c:3b:69:
         2a:f1:2f:41:08:b5:0a:f6:11:f6:b1:2f:4d:34:6e:88:b2:64:
         31:6f:30:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:08:53 2026 by rpki-client