Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3230303a3a2f34322d3432203d3e20323633343237.roa
File:                     323830343a313139633a3230303a3a2f34322d3432203d3e20323633343237.roa (raw, json)
Hash identifier:          vlMLUsmMa+YTsT6hfaal4/anhOrtoR5D8gDhaRYcJrE=
Subject key identifier:   BA:84:AB:86:ED:85:EB:4C:7B:50:9C:3F:FF:6C:03:B1:B8:97:74:E9
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       56F69B2E4D3DBFE8386F42DC34AF67EA2B1E6991
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3230303a3a2f34322d3432203d3e20323633343237.roa
Signing time:             Tue 23 Jun 2026 21:14:34 +0000
ROA not before:           Tue 23 Jun 2026 21:09:34 +0000
ROA not after:            Tue 22 Jun 2027 21:14:34 +0000
asID:                     263427
IP address blocks:        2804:119c:200::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f6:9b:2e:4d:3d:bf:e8:38:6f:42:dc:34:af:67:ea:2b:1e:69:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jun 23 21:09:34 2026 GMT
            Not After : Jun 22 21:14:34 2027 GMT
        Subject: CN=BA84AB86ED85EB4C7B509C3FFF6C03B1B89774E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:11:6c:c1:25:6b:ec:6e:a1:20:ac:b1:9c:
                    21:0c:6e:c4:57:ff:d1:48:f4:68:d3:f5:2a:d6:c6:
                    7d:82:71:d9:47:6e:91:c0:d1:cb:f9:c9:65:79:2e:
                    bf:f7:b1:77:28:28:42:a0:72:32:58:ed:ae:a8:e4:
                    a8:72:99:d2:e1:26:9b:86:a6:7d:5d:91:dc:d3:06:
                    de:9d:52:37:4d:69:cc:5d:c2:c0:2b:8f:18:ff:c5:
                    a9:da:3c:8a:b0:e3:99:ee:c3:a7:bb:d3:5d:ae:cb:
                    3c:c5:2f:27:eb:07:c9:df:7a:8f:7f:a8:6a:fa:17:
                    c0:56:7d:ce:cb:e2:09:7b:87:df:cf:c9:f3:a5:4d:
                    e3:54:8c:53:0e:f6:dd:1f:9c:33:94:ba:f4:f1:37:
                    9e:01:25:55:18:5e:ed:c7:8c:99:c8:e0:55:76:d6:
                    27:c9:fd:e0:cb:8e:18:9f:80:36:c8:58:e9:bb:29:
                    e4:9d:bd:36:32:16:ad:1a:21:59:4c:0e:0f:35:a0:
                    a4:7f:f1:0b:12:61:4a:b0:1f:e7:60:76:b8:7a:36:
                    f3:c8:4d:28:9c:99:d7:86:39:d5:21:fe:b7:79:cc:
                    41:8e:04:01:e4:ac:52:a3:e5:06:55:49:4d:ea:f3:
                    bf:f6:1e:25:bc:0d:72:66:c8:69:d2:4f:57:23:36:
                    61:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:AB:86:ED:85:EB:4C:7B:50:9C:3F:FF:6C:03:B1:B8:97:74:E9
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3230303a3a2f34322d3432203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:119c:200::/42

    Signature Algorithm: sha256WithRSAEncryption
         a8:1c:66:b9:bb:17:69:45:77:8d:19:1c:50:ec:f6:8e:f0:f2:
         1c:d8:1c:26:4d:e2:77:41:6f:65:7a:47:7b:4d:20:f1:93:ce:
         c6:ce:b2:f2:07:45:c2:8b:95:e7:4d:b2:51:d6:f8:3a:38:ba:
         65:16:e0:f1:ca:b5:06:3d:39:cd:85:8e:02:71:b1:4a:bd:bd:
         69:b0:e1:ce:52:75:9a:4e:11:c8:1e:5c:cc:64:b6:69:3a:2a:
         47:84:69:e7:64:9e:ec:4a:c7:ea:aa:79:5b:a1:14:f4:9f:19:
         52:1b:b3:e7:17:97:f9:b6:1d:c3:35:60:c0:56:7c:04:c4:c5:
         13:25:42:f8:ff:b4:cd:89:ec:3d:f9:00:ca:e2:b9:31:ec:31:
         aa:66:c0:22:7f:f4:5c:0a:d6:46:aa:07:ec:90:62:6b:f8:40:
         3e:ac:de:58:77:52:ae:69:a3:94:3d:0e:5e:4c:31:14:b5:57:
         6b:08:49:47:80:53:63:af:68:bf:9d:bb:e7:f3:32:6d:ca:5f:
         ef:4e:03:ef:cf:77:ac:85:6b:6c:78:7f:8b:92:d2:74:35:16:
         b7:ce:b6:48:26:0e:76:ea:61:71:0e:6e:67:b4:e1:0e:45:a2:
         5d:29:b6:bb:89:cb:6c:40:9b:06:b1:79:62:1c:89:ea:58:07:
         92:e6:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:15:50 2026 by rpki-client