Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/323830343a383464303a313030313a3a2f34382d3438203d3e20323732353432.roa
File:                     323830343a383464303a313030313a3a2f34382d3438203d3e20323732353432.roa (raw, json)
Hash identifier:          euIX3RuGbmvJng9Qu17Vvr4/Morc8ICd1Ykq06e59ng=
Subject key identifier:   DC:70:F7:43:44:0D:41:E0:60:40:91:71:62:92:92:D4:13:2F:3D:34
Certificate issuer:       /CN=03360C354BF0A76D3F0C6022D902E9A4E301E510
Certificate serial:       13521020304998A8934EAB8457304B171FFB6FBE
Authority key identifier: 03:36:0C:35:4B:F0:A7:6D:3F:0C:60:22:D9:02:E9:A4:E3:01:E5:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/323830343a383464303a313030313a3a2f34382d3438203d3e20323732353432.roa
Signing time:             Sat 04 Jul 2026 11:27:27 +0000
ROA not before:           Sat 04 Jul 2026 11:22:27 +0000
ROA not after:            Sat 03 Jul 2027 11:27:27 +0000
asID:                     272542
IP address blocks:        2804:84d0:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.crl
                          rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:52:10:20:30:49:98:a8:93:4e:ab:84:57:30:4b:17:1f:fb:6f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03360C354BF0A76D3F0C6022D902E9A4E301E510
        Validity
            Not Before: Jul  4 11:22:27 2026 GMT
            Not After : Jul  3 11:27:27 2027 GMT
        Subject: CN=DC70F743440D41E060409171629292D4132F3D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:15:ac:d7:ae:e1:01:7e:b5:dd:d8:9a:4c:
                    d6:21:66:60:f0:e6:12:aa:ee:24:d2:33:0b:35:70:
                    34:40:56:79:73:14:ab:71:c2:a0:9c:71:36:e9:45:
                    73:43:2c:96:bb:8f:5f:75:63:be:81:db:fa:f4:cf:
                    01:2a:db:29:d1:b9:82:44:59:3d:ee:25:fe:63:e2:
                    9f:19:f0:23:ca:5f:4f:ab:3d:58:b7:01:c8:3c:5e:
                    d4:ca:61:40:93:82:9c:e9:d5:18:07:23:c1:d8:bb:
                    7e:0f:66:57:c1:8d:89:41:82:68:e3:69:3d:d7:56:
                    0f:80:a9:1e:b4:56:e9:0b:a2:6e:8c:15:0b:67:90:
                    c3:89:7f:6f:c2:c0:10:ad:75:84:30:64:13:93:f7:
                    4f:62:ce:14:16:b6:1e:b2:0a:06:f4:85:0e:b3:52:
                    a4:9a:d8:d4:e6:4a:55:01:21:a0:22:6d:a5:19:a8:
                    e3:20:34:f5:a9:14:2c:4d:db:da:6b:b5:e2:ce:fb:
                    14:5c:16:c1:df:bd:6d:71:d2:21:dc:e1:43:60:e9:
                    71:96:a5:54:61:4b:d5:7b:70:27:2a:32:1d:ad:11:
                    cb:f9:56:9d:92:a8:e5:7a:a0:8a:75:97:3f:c6:e3:
                    6e:2c:9c:07:96:4f:27:a1:fa:61:4e:16:d1:47:7b:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:70:F7:43:44:0D:41:E0:60:40:91:71:62:92:92:D4:13:2F:3D:34
            X509v3 Authority Key Identifier:
                keyid:03:36:0C:35:4B:F0:A7:6D:3F:0C:60:22:D9:02:E9:A4:E3:01:E5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/323830343a383464303a313030313a3a2f34382d3438203d3e20323732353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84d0:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:76:c2:1d:75:dd:08:5d:76:b0:3e:6f:cb:21:b2:eb:10:6e:
         33:2c:4c:15:9f:9a:94:81:1e:e8:d8:c8:b6:92:04:17:f7:3e:
         89:8e:17:4e:43:d2:d1:18:d1:7f:1e:da:8d:23:62:53:cc:e0:
         ab:78:f6:68:c2:f1:58:54:b6:56:47:cd:f2:1a:47:90:67:93:
         9e:8d:36:00:72:2e:2b:7c:5e:d4:20:72:3c:d9:a6:be:38:d9:
         36:22:d9:e5:45:79:89:f4:cd:14:db:15:13:4a:3d:0d:80:51:
         3e:6a:83:87:c9:0f:4b:a1:8b:b8:3a:d6:df:0f:4f:6d:7e:5c:
         89:be:a7:85:18:8e:85:d7:e3:55:63:ed:21:3b:96:58:0a:70:
         79:8d:39:55:8e:cb:d2:10:40:99:12:2c:23:ab:30:44:11:a3:
         db:bd:0d:d6:bd:1c:db:cb:29:c2:30:b3:15:3f:73:99:80:70:
         91:b5:c8:6f:0b:bf:3c:43:1a:3f:0c:1d:d3:9e:c3:4a:3d:ac:
         52:c9:e3:5f:d0:9e:8f:5d:28:33:ca:bd:fe:21:14:90:7c:dd:
         dc:c4:4d:8e:e6:f8:9d:a2:5b:e4:f9:58:3e:a0:83:ab:2d:cd:
         c7:81:b1:d0:66:4f:b8:a5:a6:e7:56:28:10:3d:cf:02:96:8e:
         1b:14:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:08:19 2026 by rpki-client