Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/323830343a313264303a3a2f33322d3332203d3e20323632373036.roa
File:                     323830343a313264303a3a2f33322d3332203d3e20323632373036.roa (raw, json)
Hash identifier:          3hp6l4unuxElA1LM4U3FuUpwPxCnNMKNbJzRxlheVdI=
Subject key identifier:   82:85:10:D9:8C:F2:D0:F6:23:DA:7A:72:CB:C5:0E:6A:A6:52:F9:0D
Certificate issuer:       /CN=D7252ED92923FF7276B97F5469069929707F562C
Certificate serial:       43040240E958DE545B5E1663C952D77A3B6A888D
Authority key identifier: D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/323830343a313264303a3a2f33322d3332203d3e20323632373036.roa
Signing time:             Wed 20 May 2026 19:40:48 +0000
ROA not before:           Wed 20 May 2026 19:35:48 +0000
ROA not after:            Wed 19 May 2027 19:40:48 +0000
asID:                     262706
IP address blocks:        2804:12d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl
                          rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:04:02:40:e9:58:de:54:5b:5e:16:63:c9:52:d7:7a:3b:6a:88:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7252ED92923FF7276B97F5469069929707F562C
        Validity
            Not Before: May 20 19:35:48 2026 GMT
            Not After : May 19 19:40:48 2027 GMT
        Subject: CN=828510D98CF2D0F623DA7A72CBC50E6AA652F90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:59:db:32:43:ba:57:72:c8:af:e7:5e:6d:7b:
                    6a:12:e7:19:87:4a:c8:1e:89:39:c4:4d:c2:70:71:
                    63:c0:84:0a:fc:eb:1a:e6:d0:c1:49:14:dc:88:dc:
                    b1:fe:ac:e2:06:86:44:0f:ef:f6:0c:b1:a5:c4:a3:
                    e9:79:e5:61:9a:c6:76:be:3c:87:58:f2:8e:f6:b2:
                    fa:ba:7a:e5:e8:04:aa:dc:60:03:ad:d9:4d:40:82:
                    37:05:3b:9a:6e:98:74:35:d0:78:8f:96:32:d4:8c:
                    f1:87:b7:bd:7a:5e:d4:68:25:76:22:2a:f5:ea:91:
                    6e:21:3b:0d:79:cb:2b:1b:34:e0:f4:c8:3c:57:37:
                    b4:b6:f3:00:c6:35:0a:8c:5b:0d:bc:83:09:39:54:
                    3b:e0:06:be:c5:d6:ca:2b:91:89:21:8f:cc:bc:da:
                    fb:a3:20:69:56:10:52:f4:50:82:3d:8c:7f:ba:b7:
                    3c:dc:d7:ab:36:ff:48:eb:93:57:c5:9b:16:e4:e2:
                    b2:76:0f:05:71:79:2d:d8:76:99:69:30:93:ca:b5:
                    ef:93:71:40:51:cd:b4:85:70:56:2f:a4:06:87:1b:
                    83:3a:2b:e5:7f:36:84:51:35:de:8d:08:4b:38:6b:
                    40:72:ef:0e:af:a8:a2:25:69:b0:6c:64:b0:21:71:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:85:10:D9:8C:F2:D0:F6:23:DA:7A:72:CB:C5:0E:6A:A6:52:F9:0D
            X509v3 Authority Key Identifier:
                keyid:D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/323830343a313264303a3a2f33322d3332203d3e20323632373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:a3:d7:a2:5b:c2:75:1f:aa:b0:23:07:15:79:60:18:bb:
         1d:50:26:97:98:b0:57:02:ba:0a:65:80:68:99:9f:07:3f:5f:
         1e:4c:1b:a7:9d:dc:69:18:4f:b3:ad:a3:2d:6f:92:89:dc:02:
         85:66:25:23:79:ab:0c:b4:2c:06:e4:6a:d0:b5:70:b9:0b:c5:
         cb:3c:73:4b:f5:e0:27:02:a4:13:4f:11:93:a9:e6:de:9c:66:
         46:91:21:66:d5:e0:09:7f:ec:af:dd:f5:74:c8:f3:3c:14:ba:
         80:cc:16:41:db:d4:a6:e2:a9:5b:ab:c4:94:09:1e:40:a8:e1:
         01:d0:89:e3:48:98:00:76:20:62:22:e2:73:73:30:55:dd:80:
         20:06:28:1d:a9:fe:8d:95:ae:57:e5:b8:9c:f6:11:49:72:24:
         f9:99:e1:8c:6f:3e:46:73:74:4a:0d:76:af:5f:96:72:ae:97:
         55:b1:7b:f9:bc:34:0b:63:30:53:b7:f1:c5:64:fd:26:79:ec:
         f4:48:f9:5b:76:5a:ab:55:70:19:82:d5:e9:10:55:ff:82:23:
         cd:ea:71:57:82:3b:fd:13:e7:6e:9a:15:28:8a:a0:b6:0a:bf:
         2c:57:5a:3a:3e:46:60:8a:2a:60:cb:a2:a4:65:eb:1c:53:11:
         33:46:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:05:39 2026 by rpki-client