Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a383030303a3a2f33332d3333203d3e20323639323630.roa
File:                     323830343a363164383a383030303a3a2f33332d3333203d3e20323639323630.roa (raw, json)
Hash identifier:          CXZAFodqMItB79gNa99Sa38THedzl3IC9D/No5v3gPw=
Subject key identifier:   9E:D2:6D:2F:7F:BB:5B:82:2B:04:83:9A:C5:90:00:8E:C8:5D:D6:BA
Certificate issuer:       /CN=C0E122946327FEE7B6C863D65951CF364128033D
Certificate serial:       2C2AC95CAFB82907A911DEC88D9761950134B63A
Authority key identifier: C0:E1:22:94:63:27:FE:E7:B6:C8:63:D6:59:51:CF:36:41:28:03:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E122946327FEE7B6C863D65951CF364128033D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a383030303a3a2f33332d3333203d3e20323639323630.roa
Signing time:             Thu 25 Jun 2026 14:34:33 +0000
ROA not before:           Thu 25 Jun 2026 14:29:33 +0000
ROA not after:            Thu 24 Jun 2027 14:34:33 +0000
asID:                     269260
IP address blocks:        2804:61d8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/C0E122946327FEE7B6C863D65951CF364128033D.crl
                          rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/C0E122946327FEE7B6C863D65951CF364128033D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E122946327FEE7B6C863D65951CF364128033D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 02:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2a:c9:5c:af:b8:29:07:a9:11:de:c8:8d:97:61:95:01:34:b6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E122946327FEE7B6C863D65951CF364128033D
        Validity
            Not Before: Jun 25 14:29:33 2026 GMT
            Not After : Jun 24 14:34:33 2027 GMT
        Subject: CN=9ED26D2F7FBB5B822B04839AC590008EC85DD6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:c2:fb:01:18:30:cb:40:82:eb:92:a5:66:
                    bc:3a:66:00:db:c3:72:c1:0c:d9:43:19:d4:13:27:
                    5a:57:79:86:ef:0d:2e:3f:7a:1a:aa:9d:b4:d7:88:
                    86:d7:47:a0:94:fc:94:93:6b:44:73:20:87:9d:7f:
                    a2:8c:e2:7b:d1:9f:c6:5d:19:af:b2:6e:d1:15:94:
                    35:ae:27:3c:96:d7:50:a1:4a:7c:3a:51:3f:c0:9c:
                    cd:a3:73:13:86:8d:08:a7:66:b1:1c:86:f2:c2:a1:
                    44:31:76:84:47:dc:4f:82:21:b1:53:aa:80:77:85:
                    c3:26:12:27:cf:a7:5d:3e:bf:ff:a5:60:95:1f:83:
                    a7:c4:4d:fa:70:e7:07:0e:ae:0f:df:5f:38:40:40:
                    99:c1:fe:5d:d6:30:88:0c:0c:3a:f8:99:4f:7d:45:
                    05:00:ef:6f:89:5f:06:83:ec:98:20:1c:2f:dd:c4:
                    a9:8e:31:66:ac:3f:d5:fc:eb:2f:d8:3f:1f:54:2b:
                    b5:d3:b6:44:fb:c5:43:a5:bb:e1:c0:94:8f:8b:45:
                    1c:00:2c:16:19:6b:ad:07:4f:4b:e9:12:20:96:e4:
                    8b:32:11:45:0a:23:f9:8b:5e:ba:e9:1b:1a:68:94:
                    12:3a:81:37:55:99:12:b7:c7:27:0c:ac:f6:35:2b:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D2:6D:2F:7F:BB:5B:82:2B:04:83:9A:C5:90:00:8E:C8:5D:D6:BA
            X509v3 Authority Key Identifier:
                keyid:C0:E1:22:94:63:27:FE:E7:B6:C8:63:D6:59:51:CF:36:41:28:03:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/C0E122946327FEE7B6C863D65951CF364128033D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E122946327FEE7B6C863D65951CF364128033D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a383030303a3a2f33332d3333203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61d8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         db:8c:dc:90:ce:f2:a8:a2:97:8f:72:af:1a:12:54:54:f0:c8:
         37:05:48:1f:95:ae:71:c2:71:f3:60:c4:55:3a:80:46:0e:b7:
         0c:03:36:18:97:4b:ee:f7:0f:b1:b8:8a:64:0f:5a:03:a3:5d:
         d1:b8:c4:69:8c:56:7a:6f:08:3a:ec:1a:56:ad:b8:98:0b:53:
         9c:51:7f:3d:35:10:37:4e:f9:4d:f8:ca:68:03:d1:d3:a4:37:
         79:a8:0a:d4:03:64:06:7e:6c:53:08:9e:e0:10:4f:20:d2:8d:
         f8:97:2e:f2:25:ab:15:7f:62:fb:3c:9b:24:73:fe:84:b7:be:
         cb:a0:92:74:96:88:3c:f6:e9:30:25:05:5d:83:5b:75:08:71:
         14:e7:cc:a0:9b:c5:a8:dc:87:34:b4:ec:73:0b:e4:f7:5f:bf:
         51:f7:d6:99:9b:66:f2:b6:d6:ed:27:94:c7:bf:a4:bf:b1:de:
         53:35:6b:68:84:1c:0e:9d:c7:ca:8e:54:0c:2f:61:f4:7a:46:
         6a:c9:22:c6:6c:82:2d:a7:1d:c1:78:52:ef:46:37:7e:54:fa:
         25:5a:27:2a:2a:50:98:36:ea:2b:94:17:bd:7f:aa:27:af:a8:
         6c:c3:a9:22:99:56:75:97:46:64:24:e3:9c:74:48:ee:e6:82:
         b3:37:79:8b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULCrJXK+4KQepEd7IjZdhlQE0tjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBFMTIyOTQ2MzI3RkVFN0I2Qzg2M0Q2NTk1MUNGMzY0
MTI4MDMzRDAeFw0yNjA2MjUxNDI5MzNaFw0yNzA2MjQxNDM0MzNaMDMxMTAvBgNV
BAMTKDlFRDI2RDJGN0ZCQjVCODIyQjA0ODM5QUM1OTAwMDhFQzg1REQ2QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9O8L7ARgwy0CC65KlZrw6ZgDb
w3LBDNlDGdQTJ1pXeYbvDS4/ehqqnbTXiIbXR6CU/JSTa0RzIIedf6KM4nvRn8Zd
Ga+ybtEVlDWuJzyW11ChSnw6UT/AnM2jcxOGjQinZrEchvLCoUQxdoRH3E+CIbFT
qoB3hcMmEifPp10+v/+lYJUfg6fETfpw5wcOrg/fXzhAQJnB/l3WMIgMDDr4mU99
RQUA72+JXwaD7JggHC/dxKmOMWasP9X86y/YPx9UK7XTtkT7xUOlu+HAlI+LRRwA
LBYZa60HT0vpEiCW5IsyEUUKI/mLXrrpGxpolBI6gTdVmRK3xycMrPY1K9bDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUntJtL3+7W4IrBIOaxZAAjshd1rowHwYDVR0j
BBgwFoAUwOEilGMn/ue2yGPWWVHPNkEoAz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1VxUXdhOHlEVGg4emJLTnNBTnlkNnhWd2V1TEs3YVl2S3JKYWppREpz
MXUvMC9DMEUxMjI5NDYzMjdGRUU3QjZDODYzRDY1OTUxQ0YzNjQxMjgwMzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwRTEyMjk0NjMyN0ZFRTdC
NkM4NjNENjU5NTFDRjM2NDEyODAzM0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdVcVF3YTh5RFRoOHpiS05zQU55ZDZ4VndldUxLN2FZdktySmFqaURKczF1LzAv
MzIzODMwMzQzYTM2MzE2NDM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTMyMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEYdiAMA0GCSqGSIb3DQEBCwUA
A4IBAQDbjNyQzvKoopePcq8aElRU8Mg3BUgfla5xwnHzYMRVOoBGDrcMAzYYl0vu
9w+xuIpkD1oDo13RuMRpjFZ6bwg67BpWrbiYC1OcUX89NRA3TvlN+MpoA9HTpDd5
qArUA2QGfmxTCJ7gEE8g0o34ly7yJasVf2L7PJskc/6Et77LoJJ0log89ukwJQVd
g1t1CHEU58ygm8Wo3Ic0tOxzC+T3X79R99aZm2byttbtJ5THv6S/sd5TNWtohBwO
ncfKjlQML2H0ekZqySLGbIItpx3BeFLvRjd+VPolWicqKlCYNuorlBe9f6onr6hs
w6kimVZ1l0ZkJOOcdEju5oKzN3mL
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:17 2026 by rpki-client