Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a343030303a3a2f33342d3334203d3e20323638343837.roa
File:                     323830343a353166383a343030303a3a2f33342d3334203d3e20323638343837.roa (raw, json)
Hash identifier:          fy9x1PZbrDREcGKZ5vVvvdKEWv0N3rAzVnj2u6C51pc=
Subject key identifier:   34:AC:F9:04:EC:FB:16:93:CA:07:B0:33:8F:4C:44:6E:34:48:12:52
Certificate issuer:       /CN=464B947257F06B70E4456A2AACFED298FBBEE866
Certificate serial:       3505EF26D6060A71892901A9DE1BAED2DBD12EFA
Authority key identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a343030303a3a2f33342d3334203d3e20323638343837.roa
Signing time:             Fri 26 Jun 2026 13:54:17 +0000
ROA not before:           Fri 26 Jun 2026 13:49:17 +0000
ROA not after:            Fri 25 Jun 2027 13:54:17 +0000
asID:                     268487
IP address blocks:        2804:51f8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl
                          rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:05:ef:26:d6:06:0a:71:89:29:01:a9:de:1b:ae:d2:db:d1:2e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464B947257F06B70E4456A2AACFED298FBBEE866
        Validity
            Not Before: Jun 26 13:49:17 2026 GMT
            Not After : Jun 25 13:54:17 2027 GMT
        Subject: CN=34ACF904ECFB1693CA07B0338F4C446E34481252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:9a:5f:4e:ad:ee:5e:bc:ea:5c:0e:41:bf:
                    34:7a:b0:99:6f:40:ea:94:50:c5:7f:71:19:64:47:
                    e5:62:fe:5a:8e:3c:ad:88:14:02:87:c7:b5:63:b6:
                    a3:52:44:ca:1f:f7:4e:43:79:cc:d3:cf:e5:35:49:
                    df:80:d7:9e:85:83:f9:75:22:4e:bc:54:89:05:b6:
                    41:17:b7:01:cd:8e:8a:c4:53:88:e4:f0:5e:e4:c5:
                    e3:f5:d3:cb:1a:5f:ef:83:8d:11:51:62:f1:4f:d6:
                    1b:ec:b4:41:87:62:61:eb:2a:39:5c:78:a9:b3:14:
                    44:a9:57:95:31:44:89:a7:d0:46:f3:e7:6c:00:ce:
                    12:cf:6c:15:e2:15:69:43:d3:d7:17:00:60:a9:30:
                    2c:d6:46:17:9f:c0:cf:80:92:61:96:1f:1d:88:44:
                    f0:9c:4b:0f:80:c3:5c:a9:a9:dd:31:63:7f:e1:27:
                    96:d4:62:b7:38:ae:21:e4:47:71:f9:1c:17:c7:20:
                    4b:9b:92:ac:1d:0e:89:e5:f0:09:5b:d8:cc:7d:c9:
                    6c:dc:47:7f:2b:b5:6d:57:1a:1b:59:62:a3:9b:e0:
                    54:33:4c:0f:45:a2:fd:01:55:b5:c0:c2:cd:7a:00:
                    10:ea:fa:b6:e1:2c:1e:31:15:7f:26:94:84:46:39:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:F9:04:EC:FB:16:93:CA:07:B0:33:8F:4C:44:6E:34:48:12:52
            X509v3 Authority Key Identifier:
                keyid:46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a343030303a3a2f33342d3334203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51f8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:35:41:34:82:3f:b8:73:61:77:eb:84:f6:56:96:4d:e3:02:
         d1:da:e0:8d:f4:80:8d:2a:10:a7:36:5a:ae:1e:c9:cd:83:68:
         c3:79:ea:90:1f:47:c0:08:fc:57:40:5c:b8:12:c8:74:65:f3:
         e9:af:47:2b:d1:32:63:d7:71:44:7f:73:12:1e:ac:88:71:13:
         c5:d8:b1:a2:f0:ed:72:91:4d:56:10:c8:cd:fc:e5:d0:f1:6a:
         76:51:d1:85:bc:dd:59:c0:b7:35:2c:37:02:fe:d2:c8:1f:58:
         8a:b7:d5:b4:69:a5:68:d5:f6:8d:a9:ff:90:11:01:c6:db:43:
         6b:82:35:69:ab:5b:7b:a9:1b:35:38:d4:60:1d:de:3b:34:e6:
         82:85:3c:97:1c:9f:41:ca:32:05:56:1a:1a:4b:27:7d:b7:98:
         a5:2f:ce:9c:f1:26:66:79:09:99:54:e4:a3:7c:d9:86:d3:ee:
         50:25:02:62:14:e9:f2:54:83:08:1e:ee:4c:e3:c1:94:35:46:
         de:ab:7f:f9:8f:cd:56:3e:be:8b:10:09:e3:cd:17:a5:da:d9:
         bd:32:71:32:d0:5d:6a:2b:31:b8:4a:af:26:2f:88:a6:ec:e0:
         89:9f:89:29:be:e5:c9:01:58:da:58:9a:49:e5:3a:de:a5:9d:
         c2:24:00:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:08:42 2026 by rpki-client