Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/323830343a346136343a3a2f33322d3332203d3e20323637323337.roa
File:                     323830343a346136343a3a2f33322d3332203d3e20323637323337.roa (raw, json)
Hash identifier:          I1ACpIxbmPNWFiH4GhKVK6IKl+ZEhUodIIQyaRueN9g=
Subject key identifier:   87:49:78:CC:8D:27:22:25:C1:AA:0A:BC:C6:9C:20:50:49:F9:A3:89
Certificate issuer:       /CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
Certificate serial:       06FA176DE3BCAE299613232C3FA54D92AE2D0EFD
Authority key identifier: DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/323830343a346136343a3a2f33322d3332203d3e20323637323337.roa
Signing time:             Tue 07 Jul 2026 17:30:20 +0000
ROA not before:           Tue 07 Jul 2026 17:25:20 +0000
ROA not after:            Tue 06 Jul 2027 17:30:20 +0000
asID:                     267237
IP address blocks:        2804:4a64::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl
                          rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fa:17:6d:e3:bc:ae:29:96:13:23:2c:3f:a5:4d:92:ae:2d:0e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
        Validity
            Not Before: Jul  7 17:25:20 2026 GMT
            Not After : Jul  6 17:30:20 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:f6:b6:3d:ae:1c:c3:a4:49:22:76:54:a9:
                    a1:73:0c:e5:5c:f4:33:eb:7c:75:b5:d9:d5:0e:32:
                    67:21:48:86:6b:be:74:89:ed:66:71:09:a1:80:6a:
                    6b:5e:7f:54:ed:83:5d:a2:ae:cc:f2:f1:dc:34:76:
                    b8:af:c5:1c:07:f8:60:62:04:dc:f3:36:a3:67:a8:
                    a7:30:3d:db:ef:4c:d2:41:b6:f0:a5:e6:de:1e:64:
                    48:76:2c:fe:6b:6a:e2:5c:96:88:f3:18:5e:e7:97:
                    0a:ee:55:df:6f:3b:b9:ed:d6:4a:58:b4:82:d4:ff:
                    f4:1a:79:dc:70:ad:b0:14:c4:bc:c1:32:3d:60:06:
                    96:d6:20:34:91:b2:10:5c:e7:86:10:b9:3c:89:b0:
                    52:d1:c0:be:5a:bb:72:2f:a6:57:a4:47:75:22:aa:
                    8b:46:3c:fb:bb:e9:45:7c:ed:1c:c8:9d:8b:42:f4:
                    90:b2:35:c2:86:a8:b7:7b:a1:cd:42:94:ff:d8:ba:
                    32:8e:9b:ac:54:6f:10:2b:21:d5:76:88:36:ed:0e:
                    52:ac:c3:13:61:8a:94:df:9a:2a:96:a7:d4:f6:1b:
                    dd:29:0d:87:d0:74:19:de:da:89:0b:5d:8e:71:6e:
                    0e:cf:7a:56:24:0f:01:d7:a5:34:14:69:80:fd:8e:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:49:78:CC:8D:27:22:25:C1:AA:0A:BC:C6:9C:20:50:49:F9:A3:89
            X509v3 Authority Key Identifier:
                keyid:DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/323830343a346136343a3a2f33322d3332203d3e20323637323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:b9:c1:10:ab:a0:82:8f:8e:74:75:b1:03:95:04:07:c8:
         7b:1b:b0:cf:37:32:42:b9:9c:e4:16:ca:f9:d8:dd:c0:7a:48:
         06:e3:25:3c:12:94:ed:0a:57:dd:7d:69:dd:47:fa:22:bb:d4:
         3d:0d:7d:75:27:f9:00:3f:4e:7c:cf:ec:5a:e1:41:3f:49:e4:
         4e:8b:60:29:3c:bb:71:90:b9:d9:38:69:ec:d9:82:ec:94:ef:
         05:9d:9b:49:ef:73:88:0d:c1:d9:9b:e5:86:4f:0d:38:ee:50:
         3f:2d:52:bc:8c:cf:8c:70:76:8b:d8:ba:e9:bf:4b:59:fc:35:
         d0:e8:50:de:5c:d6:15:d2:1f:bc:66:f0:ef:99:42:32:48:b8:
         06:5b:46:cb:98:fe:07:bf:2c:79:37:bf:35:1e:bc:bf:b8:5a:
         61:83:4d:e8:5e:b7:e0:ed:11:72:90:fb:76:5f:01:2d:48:1b:
         7a:e9:db:a0:10:3b:bd:e8:38:23:9b:5e:b6:70:12:88:11:d7:
         f9:97:9a:15:a2:91:6a:a5:53:d7:cf:0e:f7:87:fb:8d:47:6b:
         58:35:28:f8:1d:f1:44:21:9e:83:0e:bf:cb:c9:1c:87:79:c7:
         99:7c:79:44:89:71:e2:c1:38:25:f5:90:9d:a7:c4:36:84:f5:
         b2:f9:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:00:36 2026 by rpki-client