Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
File:                     323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (raw, json)
Hash identifier:          c+VlePQtue7/mzmRdYTCp3wmP1oXAQOru5S86HOpxQo=
Subject key identifier:   0F:F7:24:A5:33:C0:4C:B8:03:76:43:EB:D4:F8:CA:89:DE:1B:55:06
Certificate issuer:       /CN=732AAA0223255DA10C4F5708E8C87FAE221FC7C0
Certificate serial:       69D558E7E801C190830814CC2A61416476075109
Authority key identifier: 73:2A:AA:02:23:25:5D:A1:0C:4F:57:08:E8:C8:7F:AE:22:1F:C7:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732AAA0223255DA10C4F5708E8C87FAE221FC7C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
Signing time:             Thu 14 May 2026 22:37:40 +0000
ROA not before:           Thu 14 May 2026 22:32:40 +0000
ROA not after:            Thu 13 May 2027 22:37:40 +0000
asID:                     264011
IP address blocks:        2804:2960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/732AAA0223255DA10C4F5708E8C87FAE221FC7C0.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/732AAA0223255DA10C4F5708E8C87FAE221FC7C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732AAA0223255DA10C4F5708E8C87FAE221FC7C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 17:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d5:58:e7:e8:01:c1:90:83:08:14:cc:2a:61:41:64:76:07:51:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732AAA0223255DA10C4F5708E8C87FAE221FC7C0
        Validity
            Not Before: May 14 22:32:40 2026 GMT
            Not After : May 13 22:37:40 2027 GMT
        Subject: CN=0FF724A533C04CB8037643EBD4F8CA89DE1B5506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:be:ec:27:d7:2a:74:4b:32:04:b6:30:a2:
                    c8:76:a7:1f:c0:95:cc:cb:b6:96:4b:1e:0f:6e:1c:
                    f3:bb:f7:ad:a3:e3:0c:ca:69:73:a8:1f:45:0e:e1:
                    fb:d4:13:ab:c2:fa:9d:1e:50:41:91:8d:9e:4c:6e:
                    52:ec:7a:e0:98:22:3e:c5:e7:df:08:4a:d3:ce:54:
                    58:fd:6d:5c:0d:b4:9d:89:70:93:4b:dd:1b:0d:d5:
                    f6:d7:f7:71:3e:a1:0c:c0:e7:e5:74:4a:08:5b:15:
                    9c:ed:a9:90:c7:f0:c1:d0:ee:99:ff:f7:f1:0b:01:
                    61:fc:6d:42:25:8d:05:24:3d:26:e3:12:94:17:42:
                    99:84:72:8a:84:7f:4c:28:20:99:fa:38:43:b1:a0:
                    54:01:85:fd:ab:76:e6:f5:50:1a:fd:40:c0:72:20:
                    fc:4a:96:85:89:74:e0:ab:5a:05:8b:e0:95:a6:e8:
                    92:f4:fb:d6:e4:9e:8d:b7:95:c1:27:11:a6:27:02:
                    3d:9a:30:af:33:7f:7b:2c:6e:d2:f7:fd:01:ff:d6:
                    0d:c9:11:d7:7e:d4:29:70:73:5d:dc:b1:0b:ed:6d:
                    a7:5a:bb:27:90:ec:46:f3:00:a6:77:5f:c0:82:18:
                    29:0d:ea:19:cc:4a:f7:42:3c:1a:f0:24:ec:1b:74:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F7:24:A5:33:C0:4C:B8:03:76:43:EB:D4:F8:CA:89:DE:1B:55:06
            X509v3 Authority Key Identifier:
                keyid:73:2A:AA:02:23:25:5D:A1:0C:4F:57:08:E8:C8:7F:AE:22:1F:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/732AAA0223255DA10C4F5708E8C87FAE221FC7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732AAA0223255DA10C4F5708E8C87FAE221FC7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2960::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:38:b0:ee:f8:c5:ac:6e:94:c4:da:50:54:a1:b9:3d:03:
         24:e0:3c:6d:31:f3:ea:0d:69:36:22:16:49:76:32:6a:75:ca:
         19:4c:5a:06:85:6f:b2:88:7a:e4:07:a8:04:17:7d:33:79:ea:
         c0:0e:f0:e0:35:13:79:cd:40:4f:be:bf:1d:d8:23:d5:9d:79:
         a8:ed:42:05:a4:58:df:38:fc:33:48:6b:43:67:74:a4:c0:10:
         ee:05:47:48:41:ab:17:e4:67:d2:0f:86:2e:c9:ed:73:83:10:
         5f:68:6c:16:b0:51:41:15:4b:d3:17:80:e1:81:b9:22:92:56:
         2b:aa:3c:7c:40:a6:a8:69:67:5b:ea:f8:d5:ea:cb:5e:3d:91:
         13:c5:29:0a:7a:84:27:c4:37:f7:77:aa:6d:09:7e:7a:bb:ec:
         90:8e:cd:91:12:5b:4a:4d:73:7c:70:60:76:87:d7:ea:eb:a8:
         f4:4b:9b:28:5f:43:24:c6:c5:6a:79:e7:fd:f9:9e:82:31:93:
         81:8d:06:d7:74:e6:13:4d:84:87:b7:05:3b:7c:b6:f1:d3:ef:
         2b:45:0d:a9:22:02:0e:ae:7f:17:3d:8f:87:e0:eb:f6:a6:15:
         ce:6c:ad:6f:e3:5e:d8:09:08:e7:45:c7:5e:2f:77:32:7d:53:
         75:4f:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 20:16:09 2026 by rpki-client