Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a383030303a3a2f33342d3334203d3e20323637353838.roa
File:                     323830343a343363303a383030303a3a2f33342d3334203d3e20323637353838.roa (raw, json)
Hash identifier:          SSSZbHa057REw/to7MbEW+FIAvQMuBcJSQb5G5zQxXM=
Subject key identifier:   63:8A:09:4C:08:56:82:74:3F:17:70:9A:62:12:7B:65:00:AC:8B:75
Certificate issuer:       /CN=EB27E991207232DB9C6D847F06224E25D3606469
Certificate serial:       25D9A60BA2DE98A69EA0D737854B3F986F73A14A
Authority key identifier: EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a383030303a3a2f33342d3334203d3e20323637353838.roa
Signing time:             Thu 30 Jul 2026 01:12:00 +0000
ROA not before:           Thu 30 Jul 2026 01:07:00 +0000
ROA not after:            Thu 29 Jul 2027 01:12:00 +0000
asID:                     267588
IP address blocks:        2804:43c0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl
                          rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 09:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d9:a6:0b:a2:de:98:a6:9e:a0:d7:37:85:4b:3f:98:6f:73:a1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB27E991207232DB9C6D847F06224E25D3606469
        Validity
            Not Before: Jul 30 01:07:00 2026 GMT
            Not After : Jul 29 01:12:00 2027 GMT
        Subject: CN=3082010A0282010100B0A4F84A461C24FAD47E52458C1BF5A89392B4D32F19F0BAF86DB5A358C2897102EE729D4FD489FBD93765EF09AA434DD1225AF90AE697499E45A5E9417610762FDFC1241842EF86A6E231DB3D80CB44AFE517706997D76AF422CCD6BD5B70CC3EDED697EFCD485B985E13315749D390575A76EAEF133B0273F42193C51E8A5B0A4F5368600B2BE3038B8C59CBB813357B458F05D7065B5B9F1E9018CE0102316EDEDE6762DBCBADD1856D2EBC680864BCB9BB83C39D8D860F0DCEDAE0C0BBBD030459E234D7ACBF652443B549D1B635BC459CA799D41FFF303C01522CC0B90EAA8CDE09489A1135A07FC4CD978C84E4AC9F5A13D6989DA2C2EF79048DD0D85F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:f8:4a:46:1c:24:fa:d4:7e:52:45:8c:1b:
                    f5:a8:93:92:b4:d3:2f:19:f0:ba:f8:6d:b5:a3:58:
                    c2:89:71:02:ee:72:9d:4f:d4:89:fb:d9:37:65:ef:
                    09:aa:43:4d:d1:22:5a:f9:0a:e6:97:49:9e:45:a5:
                    e9:41:76:10:76:2f:df:c1:24:18:42:ef:86:a6:e2:
                    31:db:3d:80:cb:44:af:e5:17:70:69:97:d7:6a:f4:
                    22:cc:d6:bd:5b:70:cc:3e:de:d6:97:ef:cd:48:5b:
                    98:5e:13:31:57:49:d3:90:57:5a:76:ea:ef:13:3b:
                    02:73:f4:21:93:c5:1e:8a:5b:0a:4f:53:68:60:0b:
                    2b:e3:03:8b:8c:59:cb:b8:13:35:7b:45:8f:05:d7:
                    06:5b:5b:9f:1e:90:18:ce:01:02:31:6e:de:de:67:
                    62:db:cb:ad:d1:85:6d:2e:bc:68:08:64:bc:b9:bb:
                    83:c3:9d:8d:86:0f:0d:ce:da:e0:c0:bb:bd:03:04:
                    59:e2:34:d7:ac:bf:65:24:43:b5:49:d1:b6:35:bc:
                    45:9c:a7:99:d4:1f:ff:30:3c:01:52:2c:c0:b9:0e:
                    aa:8c:de:09:48:9a:11:35:a0:7f:c4:cd:97:8c:84:
                    e4:ac:9f:5a:13:d6:98:9d:a2:c2:ef:79:04:8d:d0:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8A:09:4C:08:56:82:74:3F:17:70:9A:62:12:7B:65:00:AC:8B:75
            X509v3 Authority Key Identifier:
                keyid:EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a383030303a3a2f33342d3334203d3e20323637353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c6:d3:4a:47:fe:66:ea:88:df:5b:9b:7a:28:9e:aa:70:1a:13:
         16:90:5d:b8:70:4d:d3:45:a4:9c:11:51:0d:98:18:3e:0f:a8:
         4b:e3:e6:84:3a:54:6a:75:0d:70:86:90:9f:c3:7c:08:e3:44:
         d5:45:e4:67:e7:78:ba:36:fc:9b:21:75:fa:4b:e4:0b:e1:df:
         f5:9b:22:11:02:4a:46:eb:96:ca:ef:3d:19:07:4c:09:69:50:
         58:03:34:be:1c:29:97:0f:ed:2b:ae:4a:0c:93:82:1b:ba:ee:
         f4:f1:0c:74:2e:60:6b:de:f6:d8:3a:6d:6b:e8:e9:a5:2a:3c:
         bb:a5:68:4c:dd:cd:e2:5b:c7:b9:b2:67:1d:23:3f:45:fc:d3:
         ec:15:be:0a:f6:a6:b6:c7:ba:6b:ea:83:74:05:d4:6e:8a:08:
         cb:a5:2f:4f:35:d5:88:72:70:61:81:d9:bb:74:75:08:49:3c:
         98:ea:57:7f:c4:99:db:d1:f5:aa:aa:3e:3b:b5:6e:66:55:56:
         ac:46:9e:1e:b8:72:39:66:92:10:f8:ce:a1:9f:9d:12:a6:be:
         6f:4b:bc:da:d0:50:6f:46:0f:9a:e5:b4:ed:3b:c3:3b:43:79:
         7a:7d:06:d5:29:57:3a:04:3b:ef:b2:3c:59:c9:6f:ec:9e:ed:
         fd:30:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 18:06:14 2026 by rpki-client