Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/323830343a346136343a3230303a3a2f34322d3432203d3e20323637323337.roa
File:                     323830343a346136343a3230303a3a2f34322d3432203d3e20323637323337.roa (raw, json)
Hash identifier:          JgdF3JpiwKQIxevluS7w3Iy/OleCRStBS2m6+M7RMTc=
Subject key identifier:   AA:AB:9D:D2:C8:A4:0F:4D:57:B3:03:41:32:B4:35:63:16:F4:A4:86
Certificate issuer:       /CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
Certificate serial:       40855C7AE4FD644CE65C0659019D821D72891F
Authority key identifier: DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/323830343a346136343a3230303a3a2f34322d3432203d3e20323637323337.roa
Signing time:             Tue 07 Jul 2026 17:31:06 +0000
ROA not before:           Tue 07 Jul 2026 17:26:06 +0000
ROA not after:            Tue 06 Jul 2027 17:31:06 +0000
asID:                     267237
IP address blocks:        2804:4a64:200::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl
                          rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:85:5c:7a:e4:fd:64:4c:e6:5c:06:59:01:9d:82:1d:72:89:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
        Validity
            Not Before: Jul  7 17:26:06 2026 GMT
            Not After : Jul  6 17:31:06 2027 GMT
        Subject: CN=3082010A0282010100BEDB3ECA90D374B349E1E6346D297175454322EDFA5C95EB40D65AE06FA2E874D0A3BF53622D8881B4E38AA3DD24802470FAA74D9F4A528B97D183E8BF077C978266C6CC3C3DB6382B0251677F37D9488CA41AB77A7C93DB67D6506CDC38BA1BB2370FFAE3165DE5A9A190C6314A78B2BFFA892A77498A47FEF51C51535FC6180AB0242F966EC96A5BC95FF47F3736C5FF0A915E2D701B8189C4BDF0C9DB69B86A97DF272ECB264050EF3A4504B5CC81E4E253BC4646646FE4A8AF529AF735978F5A6A76AB64A55BCE07B74F1FDA81E2BC9B0CED7A9719B4454DEC2ED6F50D7F182144396D711A1697AFD385BBEB6A8A878024B60D6407E88B6B56D193CAF48F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:3e:ca:90:d3:74:b3:49:e1:e6:34:6d:29:
                    71:75:45:43:22:ed:fa:5c:95:eb:40:d6:5a:e0:6f:
                    a2:e8:74:d0:a3:bf:53:62:2d:88:81:b4:e3:8a:a3:
                    dd:24:80:24:70:fa:a7:4d:9f:4a:52:8b:97:d1:83:
                    e8:bf:07:7c:97:82:66:c6:cc:3c:3d:b6:38:2b:02:
                    51:67:7f:37:d9:48:8c:a4:1a:b7:7a:7c:93:db:67:
                    d6:50:6c:dc:38:ba:1b:b2:37:0f:fa:e3:16:5d:e5:
                    a9:a1:90:c6:31:4a:78:b2:bf:fa:89:2a:77:49:8a:
                    47:fe:f5:1c:51:53:5f:c6:18:0a:b0:24:2f:96:6e:
                    c9:6a:5b:c9:5f:f4:7f:37:36:c5:ff:0a:91:5e:2d:
                    70:1b:81:89:c4:bd:f0:c9:db:69:b8:6a:97:df:27:
                    2e:cb:26:40:50:ef:3a:45:04:b5:cc:81:e4:e2:53:
                    bc:46:46:64:6f:e4:a8:af:52:9a:f7:35:97:8f:5a:
                    6a:76:ab:64:a5:5b:ce:07:b7:4f:1f:da:81:e2:bc:
                    9b:0c:ed:7a:97:19:b4:45:4d:ec:2e:d6:f5:0d:7f:
                    18:21:44:39:6d:71:1a:16:97:af:d3:85:bb:eb:6a:
                    8a:87:80:24:b6:0d:64:07:e8:8b:6b:56:d1:93:ca:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AB:9D:D2:C8:A4:0F:4D:57:B3:03:41:32:B4:35:63:16:F4:A4:86
            X509v3 Authority Key Identifier:
                keyid:DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/323830343a346136343a3230303a3a2f34322d3432203d3e20323637323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a64:200::/42

    Signature Algorithm: sha256WithRSAEncryption
         b7:f7:f3:24:19:48:35:4e:49:5f:25:d9:70:dd:43:ea:7e:49:
         e7:e2:6f:dd:5b:4b:c9:01:df:f1:3e:6e:44:28:86:0d:08:e1:
         b9:32:07:c7:5f:2e:0f:a5:64:2c:61:25:d1:63:d4:b3:6a:61:
         9c:ab:f2:05:1a:6d:0d:9f:b2:24:e5:5f:bc:4f:33:ae:8d:96:
         9a:43:df:86:e5:e4:73:da:ef:46:ea:77:ec:74:08:05:d2:e7:
         2d:b9:aa:f0:ca:73:25:96:ab:33:1e:f2:4c:08:c8:25:03:71:
         b7:d7:1b:1b:c6:d7:85:1a:55:50:2a:5c:1a:86:bd:86:b5:1e:
         13:b4:02:c4:a9:d7:99:b1:ea:82:dd:78:21:b6:39:10:d4:ca:
         e8:08:e2:a3:f9:b6:49:03:25:3b:6c:04:2e:2c:29:4b:de:07:
         a0:de:9a:6c:80:ca:e6:ac:b3:c5:62:6f:bf:60:d5:a5:be:35:
         34:82:3f:87:d4:f2:b3:12:35:eb:aa:e7:fb:ad:03:b9:d3:51:
         a5:83:ae:98:1f:a4:7c:32:96:43:7a:5f:62:4a:91:ba:e6:7c:
         d4:29:82:6e:bd:5f:4e:f4:9f:13:e5:7e:dc:8a:7d:65:fa:bc:
         f6:f8:d3:cc:51:e1:5c:86:4b:4c:e4:83:e6:f3:4c:4f:83:d3:
         9d:f5:0b:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:00:05 2026 by rpki-client