Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa
File:                     323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa (raw, json)
Hash identifier:          raVfvhPVgYNplDJH9NCfyOvv1f3vneeu0OcMRGI7AaA=
Subject key identifier:   DF:DE:07:76:B4:FB:24:3D:B6:65:53:5C:A5:E9:10:57:E1:C9:D7:56
Certificate issuer:       /CN=CA6E0176FA344D906847F7D46D9CB130F64AAF12
Certificate serial:       53DFD463C74C2C2FB206BD8DB57DD3A2EE6C1B21
Authority key identifier: CA:6E:01:76:FA:34:4D:90:68:47:F7:D4:6D:9C:B1:30:F6:4A:AF:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6E0176FA344D906847F7D46D9CB130F64AAF12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa
Signing time:             Fri 03 Jul 2026 15:31:42 +0000
ROA not before:           Fri 03 Jul 2026 15:26:42 +0000
ROA not after:            Fri 02 Jul 2027 15:31:42 +0000
asID:                     268678
IP address blocks:        2804:54ec:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/CA6E0176FA344D906847F7D46D9CB130F64AAF12.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/CA6E0176FA344D906847F7D46D9CB130F64AAF12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6E0176FA344D906847F7D46D9CB130F64AAF12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:df:d4:63:c7:4c:2c:2f:b2:06:bd:8d:b5:7d:d3:a2:ee:6c:1b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6E0176FA344D906847F7D46D9CB130F64AAF12
        Validity
            Not Before: Jul  3 15:26:42 2026 GMT
            Not After : Jul  2 15:31:42 2027 GMT
        Subject: CN=DFDE0776B4FB243DB665535CA5E91057E1C9D756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:bd:c5:63:cf:11:0e:4f:9d:8e:0f:a0:6c:
                    71:44:13:38:2d:90:79:9a:03:34:a1:9a:09:a8:58:
                    a8:d4:2f:fd:64:21:c7:0c:cb:3d:fc:3f:88:cb:05:
                    45:d2:af:2b:a5:a7:13:02:ce:ff:a2:9f:cf:f3:15:
                    8e:45:f6:e4:95:0e:83:68:c9:06:dc:7e:50:6f:51:
                    6e:81:23:c5:1e:4a:e0:1a:02:ce:4e:94:71:f7:07:
                    f3:e0:1a:05:45:d0:58:c9:72:4f:61:ef:de:00:13:
                    4e:3d:d2:7a:fc:82:27:77:17:06:e0:68:66:3d:7a:
                    6a:55:86:a4:c3:a7:a0:49:07:89:9a:ad:7c:e0:c0:
                    c3:cf:5c:2e:80:85:d5:14:d8:ea:e5:78:99:6b:12:
                    99:a5:e4:89:54:7e:fc:5c:bb:0c:79:86:32:c6:b6:
                    5b:f8:1b:2d:8d:76:b3:7e:7e:3a:99:18:be:85:3a:
                    76:cb:7e:23:d9:26:46:fa:4e:d7:08:6c:a1:72:3d:
                    1d:2c:19:46:08:22:b4:b6:6f:75:1c:5a:02:ba:0e:
                    55:de:5c:45:be:b7:b3:40:2a:40:66:01:61:44:14:
                    3a:50:73:1d:79:1f:1c:e5:0d:ec:64:c5:d1:8c:e2:
                    4b:26:64:58:f0:41:8c:d0:21:67:49:92:a8:c0:4e:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DE:07:76:B4:FB:24:3D:B6:65:53:5C:A5:E9:10:57:E1:C9:D7:56
            X509v3 Authority Key Identifier:
                keyid:CA:6E:01:76:FA:34:4D:90:68:47:F7:D4:6D:9C:B1:30:F6:4A:AF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/CA6E0176FA344D906847F7D46D9CB130F64AAF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6E0176FA344D906847F7D46D9CB130F64AAF12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:f1:af:19:42:6b:84:c1:15:56:94:d3:34:00:18:9a:f7:ff:
         d6:9d:b5:11:b8:ef:7a:a8:5c:fa:33:c8:a6:2d:d5:3c:20:1d:
         eb:95:9c:54:0d:78:d6:2b:0f:2b:ba:90:64:b8:75:75:32:2f:
         e9:d5:6f:1b:0d:de:b5:88:fd:c2:3f:56:6e:00:8e:77:09:17:
         76:31:24:60:e1:88:b3:4e:78:df:22:43:ff:1b:12:13:d4:42:
         10:ac:c1:fa:16:82:4d:67:82:1f:a5:05:63:16:db:2e:75:b0:
         64:44:30:5a:d1:93:9b:cf:de:d5:ac:2b:bc:d2:ac:39:17:58:
         1d:1d:5f:95:6e:6c:04:90:e9:04:cd:5b:c0:81:65:bb:18:22:
         6b:14:e4:ab:a0:97:2c:57:5e:6e:6e:ac:c7:86:ab:2d:a5:cf:
         49:3b:20:80:da:00:48:ba:6c:63:95:c5:4b:3d:07:43:fc:ab:
         cf:f1:6b:ad:69:85:df:9a:f0:ac:99:d6:59:4a:91:cf:b3:5e:
         37:05:21:83:e5:fa:e9:8a:0f:03:ab:7c:77:41:22:61:53:b0:
         3b:5f:aa:1b:f7:c4:e7:26:aa:54:0b:50:d8:42:10:69:ab:aa:
         a9:67:d3:a0:f4:72:5d:8e:d2:ba:ff:7a:99:8d:3f:44:e9:00:
         0d:0d:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:15:29 2026 by rpki-client