Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/323830343a346138303a3a2f33322d313238203d3e20323637323434.roa
File:                     323830343a346138303a3a2f33322d313238203d3e20323637323434.roa (raw, json)
Hash identifier:          t9VV13qNQCiFeI4saPMxJnbHraNop+HVMCbAamX79NQ=
Subject key identifier:   58:7C:2E:76:C7:32:9A:B2:22:B5:B8:E8:36:08:F8:51:38:F9:DE:C6
Certificate issuer:       /CN=92C5B24C56BAFFF7BC9DC04440347A5CE545E780
Certificate serial:       153EE8A5DA5B16E2456E0B62B6C8C2DD19D1736E
Authority key identifier: 92:C5:B2:4C:56:BA:FF:F7:BC:9D:C0:44:40:34:7A:5C:E5:45:E7:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/323830343a346138303a3a2f33322d313238203d3e20323637323434.roa
Signing time:             Fri 26 Jun 2026 17:22:35 +0000
ROA not before:           Fri 26 Jun 2026 17:17:35 +0000
ROA not after:            Fri 25 Jun 2027 17:22:35 +0000
asID:                     267244
IP address blocks:        2804:4a80::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.crl
                          rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 13:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3e:e8:a5:da:5b:16:e2:45:6e:0b:62:b6:c8:c2:dd:19:d1:73:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C5B24C56BAFFF7BC9DC04440347A5CE545E780
        Validity
            Not Before: Jun 26 17:17:35 2026 GMT
            Not After : Jun 25 17:22:35 2027 GMT
        Subject: CN=587C2E76C7329AB222B5B8E83608F85138F9DEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:ca:fe:e0:22:d5:99:39:d0:f0:e4:63:ae:
                    ed:d3:29:12:07:51:e4:f9:1e:82:e0:2f:e2:b5:88:
                    29:71:7d:34:c3:6b:45:a7:b1:0b:f5:7c:d5:36:47:
                    10:d8:c1:81:b0:8d:b1:f2:16:bf:9d:e6:4b:8a:7c:
                    ee:2c:e6:02:a7:80:78:4c:71:f5:3c:d1:98:3f:9b:
                    05:6f:f8:e8:10:30:c4:c4:36:29:fc:ea:d8:5f:d6:
                    67:e2:4e:a1:5c:33:36:1c:3f:71:96:41:28:2c:ec:
                    33:2a:84:4b:0c:1d:2b:b6:ac:b9:04:03:87:5b:66:
                    98:48:e6:c9:ca:75:6c:65:9e:f1:84:80:93:ba:96:
                    e9:bb:0c:45:fc:6c:4d:76:61:c0:ae:cd:18:a4:25:
                    6b:11:56:2f:9a:f4:28:a6:6a:5b:51:6e:26:1f:73:
                    20:44:d3:cf:24:41:13:b2:70:fe:bb:5d:01:34:e0:
                    8f:47:4b:37:ca:04:42:da:8f:f3:09:32:a8:cd:6a:
                    eb:f7:50:3b:81:0d:5e:bf:58:2a:bd:df:43:9c:bf:
                    d9:5b:21:31:3f:b3:69:ec:fe:01:6f:47:5d:22:aa:
                    1f:2f:99:94:17:42:9b:14:48:1c:85:0f:6d:f9:23:
                    26:8e:70:86:74:58:09:94:bf:40:a0:f9:c8:eb:06:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7C:2E:76:C7:32:9A:B2:22:B5:B8:E8:36:08:F8:51:38:F9:DE:C6
            X509v3 Authority Key Identifier:
                keyid:92:C5:B2:4C:56:BA:FF:F7:BC:9D:C0:44:40:34:7A:5C:E5:45:E7:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/323830343a346138303a3a2f33322d313238203d3e20323637323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:99:50:48:60:c9:cc:5e:86:a8:6b:f8:d4:75:81:5c:ae:
         87:70:06:9a:15:47:7f:1d:c2:b4:98:59:ea:5c:5d:40:3d:bc:
         14:12:22:4e:f9:85:18:c1:e8:56:24:89:0f:aa:c3:61:20:14:
         7c:e4:a9:32:33:ba:d5:6a:2c:93:29:63:49:3c:05:76:f3:d0:
         f0:20:d6:18:01:50:75:40:a5:b5:4a:ca:1d:ff:c3:be:f4:f0:
         16:27:9b:56:33:9c:86:7c:4d:dc:de:86:53:cc:87:d5:21:81:
         42:92:43:d1:cf:61:32:98:9e:f4:14:4c:9d:61:18:2f:43:24:
         90:94:4e:c9:11:d6:74:69:04:5b:e5:d9:e3:79:fc:f7:99:7b:
         10:6a:d4:24:ee:f1:8e:93:1a:0b:95:c8:3d:ef:aa:bc:80:3c:
         5f:75:a9:82:13:7f:b5:29:c4:36:85:dd:4c:da:d9:29:e1:1b:
         bb:09:7c:4b:0b:6b:b6:a9:56:7f:0d:78:09:9a:79:27:4f:fb:
         42:6e:57:cf:f8:6b:9e:2f:5e:24:65:1d:54:90:8e:ac:be:b6:
         ab:31:ac:b4:9d:a8:42:e6:a9:4e:d4:37:22:10:80:83:f2:43:
         14:aa:44:8b:3e:6e:68:0f:94:72:31:93:44:9c:be:29:ac:d3:
         9a:31:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 15:38:41 2026 by rpki-client