Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383036383a3a2f34382d3438203d3e203238353731.roa
File:                     323030313a313264303a383036383a3a2f34382d3438203d3e203238353731.roa (raw, json)
Hash identifier:          VyqeoKANP9koXc62aXT0tGZx6mB8Gn4cgVEg0NQnlrU=
Subject key identifier:   D9:22:27:54:4C:42:49:FA:BF:95:46:E8:1D:F4:C7:02:8B:4A:1B:B5
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       03C4D8E7AD9EDAEE2B8CE809B4551653F1A65AA4
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383036383a3a2f34382d3438203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:48 +0000
ROA not before:           Fri 15 May 2026 20:42:48 +0000
ROA not after:            Fri 14 May 2027 20:47:48 +0000
asID:                     28571
IP address blocks:        2001:12d0:8068::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c4:d8:e7:ad:9e:da:ee:2b:8c:e8:09:b4:55:16:53:f1:a6:5a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:48 2026 GMT
            Not After : May 14 20:47:48 2027 GMT
        Subject: CN=D92227544C4249FABF9546E81DF4C7028B4A1BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:83:95:d4:d7:4d:11:35:a9:53:97:b0:fa:
                    ea:5e:83:93:25:f2:38:6f:18:2c:99:ed:b3:cd:64:
                    5e:9e:78:03:a3:24:a4:cc:e2:dd:bc:73:fc:d9:1b:
                    7b:90:36:52:8c:67:ce:00:2a:8a:bf:a8:9f:a9:6d:
                    fd:ee:43:29:2b:53:6a:b9:ee:17:07:ce:31:7d:04:
                    b9:5c:f6:70:4b:9c:c9:8d:73:11:8a:fa:43:0d:ea:
                    92:a7:38:c5:07:68:d6:b2:9c:a5:52:a5:0a:eb:7f:
                    26:d5:d3:e0:c9:6e:5d:bf:cd:ea:d2:a7:0a:4b:9d:
                    ee:cd:d2:d1:f6:d5:36:a3:49:43:ba:37:67:96:3a:
                    21:63:b1:c3:24:1c:2b:8a:c4:98:3e:d9:6c:63:7d:
                    18:a9:21:77:a3:d2:d6:42:e2:34:71:d3:81:e8:03:
                    57:d7:3a:51:64:a0:2e:f0:89:48:6f:69:ff:eb:f9:
                    17:c2:9e:37:b4:92:58:9a:c3:ad:e7:15:da:7c:c3:
                    92:eb:71:b0:59:eb:74:b0:63:c5:26:02:1f:81:21:
                    d5:12:23:23:5f:84:a2:a5:c7:f2:38:91:b5:b5:4d:
                    b0:51:20:8b:fd:65:81:5c:90:50:e4:63:a4:34:db:
                    dc:fc:ef:b2:a2:92:38:92:55:23:74:e7:63:84:d3:
                    b4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:22:27:54:4C:42:49:FA:BF:95:46:E8:1D:F4:C7:02:8B:4A:1B:B5
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383036383a3a2f34382d3438203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12d0:8068::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:d7:93:7a:eb:90:a3:6c:21:88:39:83:45:90:48:87:d2:1f:
         03:61:f3:80:aa:07:9f:27:77:cf:4a:a1:11:67:96:a8:c4:51:
         90:81:71:47:eb:29:c6:ea:54:7e:99:59:ec:d9:ef:c1:09:86:
         d0:36:9d:28:7c:7c:55:55:96:ac:70:38:93:98:08:1e:0f:80:
         90:6b:38:87:58:c0:3f:93:b8:44:bc:47:7b:9c:23:a5:fb:56:
         ba:0c:dd:44:b0:05:38:46:0d:94:73:43:df:ab:5b:35:e4:2b:
         61:0f:71:49:de:e8:8f:11:e0:d1:a3:58:40:36:f4:23:91:f3:
         44:b6:36:e8:2f:8c:cc:72:91:88:53:68:ed:d6:8e:6a:e2:10:
         d9:b1:8a:f3:42:51:b6:0b:95:b6:63:e2:71:76:ac:65:a0:f6:
         c6:c6:b1:86:bd:57:d3:48:38:45:1d:4c:31:67:1c:32:8a:9a:
         dc:bb:f8:93:a1:c1:bb:ec:88:69:b8:7b:d0:de:8d:94:f8:55:
         29:0a:2b:25:0c:6d:88:c1:6c:05:bf:21:d1:b7:ae:f4:77:cb:
         13:d3:9d:d1:a7:94:6f:93:7d:d8:e7:0f:2f:6f:b2:9f:20:3e:
         1b:79:d6:99:17:eb:18:90:22:3e:c7:3b:7d:cb:9d:92:3b:ae:
         74:76:6a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:17:21 2026 by rpki-client