Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa
File:                     323830343a353465633a3a2f33322d3332203d3e20323638363738.roa (raw, json)
Hash identifier:          q/uU7ZfWHjHSIiBTpYIFbt0Dq3Vj9tMVknpefsyrALE=
Subject key identifier:   1D:82:72:39:33:C8:7F:14:CB:E8:05:EB:11:A4:57:B0:9E:A7:55:98
Certificate issuer:       /CN=CA6E0176FA344D906847F7D46D9CB130F64AAF12
Certificate serial:       7AAD9F4B8E8A1C04B6EAE5D4A54C2178A791499A
Authority key identifier: CA:6E:01:76:FA:34:4D:90:68:47:F7:D4:6D:9C:B1:30:F6:4A:AF:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6E0176FA344D906847F7D46D9CB130F64AAF12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa
Signing time:             Fri 03 Jul 2026 15:31:43 +0000
ROA not before:           Fri 03 Jul 2026 15:26:43 +0000
ROA not after:            Fri 02 Jul 2027 15:31:43 +0000
asID:                     268678
IP address blocks:        2804:54ec::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/CA6E0176FA344D906847F7D46D9CB130F64AAF12.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/CA6E0176FA344D906847F7D46D9CB130F64AAF12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6E0176FA344D906847F7D46D9CB130F64AAF12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ad:9f:4b:8e:8a:1c:04:b6:ea:e5:d4:a5:4c:21:78:a7:91:49:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6E0176FA344D906847F7D46D9CB130F64AAF12
        Validity
            Not Before: Jul  3 15:26:43 2026 GMT
            Not After : Jul  2 15:31:43 2027 GMT
        Subject: CN=1D82723933C87F14CBE805EB11A457B09EA75598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:a7:c7:a4:44:65:1a:7b:cd:9a:11:91:35:
                    52:4c:61:93:2f:9f:8e:d7:83:f0:9b:19:55:dc:4e:
                    3d:e8:cf:3b:88:d9:60:40:9b:ed:b1:43:c7:b3:c1:
                    2a:5b:18:fe:56:9a:8c:c3:09:26:40:26:c1:95:9a:
                    d2:13:a9:b5:b6:52:f9:05:6c:e9:8c:c2:9d:13:cb:
                    69:8b:12:94:37:21:ed:0d:01:b5:25:06:5f:83:ca:
                    7d:3b:ed:df:35:a9:77:09:ca:b4:e5:2c:42:3b:13:
                    ba:ab:2a:8c:ec:29:a2:c1:32:f7:39:23:39:f3:cf:
                    4e:d6:6c:8e:80:2a:c9:3e:c4:a4:cb:de:d3:86:98:
                    c8:3c:1e:ee:af:ec:2e:ae:d0:29:c2:8f:ce:64:20:
                    c7:72:06:21:64:62:d5:69:75:f1:5c:86:1b:f3:7f:
                    e1:6d:5e:72:32:6d:26:2d:5b:53:e3:94:87:30:70:
                    97:f4:57:41:ef:2b:89:9a:84:17:56:68:d4:f5:00:
                    e9:66:de:97:46:70:26:5e:5b:24:0d:58:d7:51:9f:
                    d9:79:97:a4:5e:66:7d:80:50:ec:cb:1a:56:79:3d:
                    d9:7a:33:e0:50:90:cd:44:82:4c:97:a0:88:16:6d:
                    9a:e5:de:6a:32:23:d3:c4:93:5a:73:a3:9d:40:77:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:82:72:39:33:C8:7F:14:CB:E8:05:EB:11:A4:57:B0:9E:A7:55:98
            X509v3 Authority Key Identifier:
                keyid:CA:6E:01:76:FA:34:4D:90:68:47:F7:D4:6D:9C:B1:30:F6:4A:AF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/CA6E0176FA344D906847F7D46D9CB130F64AAF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6E0176FA344D906847F7D46D9CB130F64AAF12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:2c:4e:93:75:66:db:be:82:21:5f:8a:d4:1e:2e:04:9b:12:
         d7:d1:0c:02:6f:17:0d:b1:fa:65:de:40:13:23:73:1f:32:75:
         c9:18:9f:9c:84:19:27:3d:11:30:cd:e0:35:23:12:df:ad:f6:
         9b:85:01:f1:72:49:4f:fb:f6:65:5d:d8:ee:69:50:bf:e8:af:
         cb:b7:34:14:34:95:0c:6d:5c:de:7c:7b:fc:e8:2a:2f:d9:8b:
         a3:94:8a:b7:3a:53:dd:fa:97:a1:f3:4f:33:84:60:c7:67:f0:
         cd:b8:54:77:27:cc:27:2b:3a:15:e3:50:ad:21:40:2a:b5:3d:
         16:0c:f0:ed:79:53:7b:08:9f:a6:48:fe:3a:f1:39:e5:ec:12:
         78:c9:ce:c9:94:35:4c:ae:8e:44:f9:d3:46:64:d2:06:b0:83:
         3a:fe:9f:0b:33:c3:bb:e6:97:75:56:4e:6d:b7:74:86:7b:15:
         83:31:7e:6a:4a:45:d7:4d:89:0f:ab:4a:a8:be:fb:e7:0d:36:
         e1:a8:70:16:83:0b:07:55:0e:01:7b:f1:0c:e2:b4:2c:6c:3c:
         92:d0:df:86:d9:3f:77:62:1b:ad:da:00:27:1b:00:4b:ff:2d:
         30:e9:9e:1a:f5:5f:b0:f3:56:55:72:3a:dc:2a:d1:d5:7c:2d:
         71:02:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:10:47 2026 by rpki-client