Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/323830343a383165303a3a2f33332d3333203d3e20323732343833.roa
File:                     323830343a383165303a3a2f33332d3333203d3e20323732343833.roa (raw, json)
Hash identifier:          GI80vOCqNWXTvQ3V4W4Su5iZhDqj/Zyoh4eD9hy/+Pc=
Subject key identifier:   F1:44:58:6F:63:48:FA:FD:C2:FB:17:51:2F:EF:94:9C:C5:EE:F3:D4
Certificate issuer:       /CN=666606F99C2508C2DE4EB343F8E6FE1D724F72C8
Certificate serial:       64EC7BCB62E6F4C43D99B4AB7DE3662784222A7A
Authority key identifier: 66:66:06:F9:9C:25:08:C2:DE:4E:B3:43:F8:E6:FE:1D:72:4F:72:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/323830343a383165303a3a2f33332d3333203d3e20323732343833.roa
Signing time:             Fri 26 Jun 2026 20:42:28 +0000
ROA not before:           Fri 26 Jun 2026 20:37:28 +0000
ROA not after:            Fri 25 Jun 2027 20:42:28 +0000
asID:                     272483
IP address blocks:        2804:81e0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.crl
                          rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ec:7b:cb:62:e6:f4:c4:3d:99:b4:ab:7d:e3:66:27:84:22:2a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666606F99C2508C2DE4EB343F8E6FE1D724F72C8
        Validity
            Not Before: Jun 26 20:37:28 2026 GMT
            Not After : Jun 25 20:42:28 2027 GMT
        Subject: CN=F144586F6348FAFDC2FB17512FEF949CC5EEF3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:6d:bb:e5:8a:8b:66:b3:5b:e4:05:1b:13:
                    b5:70:95:7d:f0:ec:76:32:b8:52:0b:05:52:1c:fc:
                    78:e5:19:37:d8:17:12:84:9b:1b:ef:4f:a9:c9:00:
                    22:03:7f:64:da:8a:46:dc:9c:17:f7:d9:26:5b:f4:
                    0d:f1:a4:2e:db:7b:ea:2e:f3:44:d4:1c:81:b7:11:
                    21:ad:a1:a6:06:43:f8:1f:f0:84:a6:e1:26:cd:d4:
                    89:32:48:de:c2:ce:df:e8:5f:7c:b6:aa:aa:01:9e:
                    15:a4:b4:6e:be:a2:9b:ef:dc:bd:db:65:08:c8:55:
                    5f:f4:94:b8:f4:e8:9b:04:1b:b3:ae:16:d4:0b:29:
                    fd:74:82:fc:96:18:49:4d:dd:ea:48:4d:1a:79:d2:
                    5c:8e:c9:dc:5d:e8:7e:3f:e7:fe:f1:e2:e2:03:4b:
                    e0:79:fb:d5:ad:5b:44:b7:88:1d:bb:70:73:f0:d7:
                    96:e6:3b:4b:71:33:40:0c:67:c4:67:2a:24:b6:41:
                    bf:61:fb:46:4c:52:08:7a:a1:fc:df:be:74:20:dc:
                    2b:63:78:36:22:0e:68:7f:ce:12:c1:ac:bd:0a:20:
                    ba:73:69:89:d3:27:43:25:5b:3d:7f:83:ed:a9:23:
                    49:5d:fb:f4:fc:67:f6:19:87:7c:74:d7:a8:6e:ad:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:44:58:6F:63:48:FA:FD:C2:FB:17:51:2F:EF:94:9C:C5:EE:F3:D4
            X509v3 Authority Key Identifier:
                keyid:66:66:06:F9:9C:25:08:C2:DE:4E:B3:43:F8:E6:FE:1D:72:4F:72:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/323830343a383165303a3a2f33332d3333203d3e20323732343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:d0:8f:07:c2:71:fe:5b:b9:ab:56:45:79:75:5f:eb:d6:b3:
         b4:8f:47:9d:79:df:39:7b:66:b0:c1:d0:29:31:29:87:03:9b:
         19:3c:9d:57:4e:1e:9e:85:72:c6:52:c5:54:11:f2:09:a1:e4:
         40:11:6c:a1:8b:8c:84:94:f7:18:5c:02:f9:2c:6b:3b:53:43:
         3e:1b:79:cf:e3:91:2e:d7:b7:24:8b:25:3c:a8:27:6a:94:be:
         da:fa:f1:90:99:e7:24:42:73:69:66:24:63:1e:60:5c:48:6c:
         20:d7:b7:54:1d:72:8b:d6:01:e9:75:43:3c:76:a1:41:e8:e4:
         d8:bf:63:af:b7:c8:a8:49:f0:7b:b8:f2:89:77:cf:60:52:b5:
         6e:9d:15:17:9f:af:e7:86:99:35:65:fc:bc:9c:f2:8c:a8:3a:
         1b:23:b9:b8:53:8e:05:19:2e:20:91:bc:3c:54:3b:d8:76:3d:
         a7:c1:7c:03:d7:63:fd:9c:a0:a9:23:cb:2a:91:4f:a4:a2:5a:
         42:bc:28:04:f1:c6:c6:04:34:d0:f8:05:09:88:08:52:e2:0e:
         79:d2:ea:ca:c7:a2:a7:df:84:e4:44:db:6f:95:64:b2:df:ab:
         f3:8e:e9:5c:e2:b2:7d:f1:5b:ad:23:4d:fd:94:56:70:c5:50:
         ee:e9:14:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:12 2026 by rpki-client