Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3333203d3e20323636303836.roa
File:                     323830343a336136343a3a2f33322d3333203d3e20323636303836.roa (raw, json)
Hash identifier:          zT9PoYPeqpuuzeLiWctsPvbHkYCpm3cqJtgPOq0m+fo=
Subject key identifier:   51:83:E9:69:8E:38:B5:9A:87:29:47:28:5F:C0:D5:92:D9:74:76:3C
Certificate issuer:       /CN=E0C40FA4B10FE3592FA45A02252E9834A23C3076
Certificate serial:       14929AB629D3E70C8982A587DFDA2473FD838BAF
Authority key identifier: E0:C4:0F:A4:B1:0F:E3:59:2F:A4:5A:02:25:2E:98:34:A2:3C:30:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C40FA4B10FE3592FA45A02252E9834A23C3076.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3333203d3e20323636303836.roa
Signing time:             Thu 14 May 2026 22:50:55 +0000
ROA not before:           Thu 14 May 2026 22:45:55 +0000
ROA not after:            Thu 13 May 2027 22:50:55 +0000
asID:                     266086
IP address blocks:        2804:3a64::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E0C40FA4B10FE3592FA45A02252E9834A23C3076.crl
                          rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E0C40FA4B10FE3592FA45A02252E9834A23C3076.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C40FA4B10FE3592FA45A02252E9834A23C3076.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 02:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:92:9a:b6:29:d3:e7:0c:89:82:a5:87:df:da:24:73:fd:83:8b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0C40FA4B10FE3592FA45A02252E9834A23C3076
        Validity
            Not Before: May 14 22:45:55 2026 GMT
            Not After : May 13 22:50:55 2027 GMT
        Subject: CN=5183E9698E38B59A872947285FC0D592D974763C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:e5:8d:78:28:81:39:bc:b3:c8:6f:90:43:
                    30:d2:e8:a8:0d:e8:92:70:87:fd:28:41:cb:f2:ad:
                    4f:c6:b6:76:9c:2c:c6:23:3f:19:8e:a7:b2:f8:8a:
                    fe:2a:55:63:fb:88:02:a5:43:ae:19:dd:25:86:40:
                    12:56:21:db:aa:8d:0d:e4:43:27:24:40:5d:1f:44:
                    7b:86:8a:17:33:dc:2a:ed:c5:34:e7:1d:a7:61:18:
                    09:40:e5:4b:02:fe:f7:e4:b1:2c:d0:92:b0:1d:eb:
                    f3:a4:61:4b:e2:74:fd:ea:45:a4:88:26:4f:c6:5a:
                    df:92:48:01:fb:09:3e:3d:82:d9:81:45:4a:f1:07:
                    65:5c:bc:32:4e:36:57:5a:96:5c:59:a1:60:4a:07:
                    c5:df:fb:00:24:2b:38:31:c3:aa:8d:5c:db:90:f0:
                    f0:ee:eb:b9:24:12:a1:fd:2b:d5:20:f9:89:2b:bd:
                    0d:90:e1:e3:9f:f6:cb:28:56:07:26:38:4a:58:d0:
                    04:00:96:5b:01:b2:5b:51:af:ba:db:74:d0:e3:de:
                    e4:c6:f8:8e:f3:e4:f8:df:de:0f:61:b2:16:17:be:
                    b9:23:79:99:63:bd:ad:1a:1e:5a:cc:47:8e:e0:d1:
                    f8:64:c7:5e:ce:80:92:5b:8a:de:f1:b0:36:ea:b8:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:83:E9:69:8E:38:B5:9A:87:29:47:28:5F:C0:D5:92:D9:74:76:3C
            X509v3 Authority Key Identifier:
                keyid:E0:C4:0F:A4:B1:0F:E3:59:2F:A4:5A:02:25:2E:98:34:A2:3C:30:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E0C40FA4B10FE3592FA45A02252E9834A23C3076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C40FA4B10FE3592FA45A02252E9834A23C3076.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3333203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:f6:eb:04:be:fa:04:05:1e:9d:c2:d7:7b:24:45:13:e4:f4:
         2f:ad:b7:50:b4:8e:ae:39:4a:7d:37:75:17:23:6d:49:b8:65:
         4f:14:f9:7d:9d:82:27:2c:ad:07:a9:7a:bb:40:a4:a8:f2:66:
         bd:1b:38:40:12:b2:0b:68:27:b8:84:5b:20:49:c2:49:f8:37:
         ef:34:5c:39:76:46:e6:2d:b8:6c:9a:7f:68:9e:e5:f9:c9:50:
         b0:fe:5d:2f:ae:84:76:2b:f6:fa:42:99:83:18:52:cc:b2:73:
         e2:63:d6:9b:34:b7:e8:4c:32:1a:8d:24:23:d9:f0:08:3f:8c:
         72:e1:d3:ac:78:5c:9a:26:2c:19:27:67:be:07:80:fc:a6:8d:
         af:a5:d8:6c:6a:5f:78:eb:1b:de:13:af:3e:9c:5b:b1:0f:e5:
         bc:51:52:6f:41:af:18:65:0d:a2:a9:08:65:86:6f:ba:e2:65:
         9c:cd:94:ca:29:a8:dc:22:46:75:16:ab:10:97:98:5e:b1:d5:
         8d:aa:98:f0:a9:aa:ec:cb:f3:2d:e6:7b:21:a5:47:8d:cd:a0:
         4c:f8:e8:dd:f1:c8:64:3f:a0:3e:ee:c0:bd:a2:88:f3:ff:96:
         8a:59:53:4a:e0:8f:8c:e8:2a:56:15:0f:c1:12:d3:42:07:f6:
         c4:e4:52:4a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFJKatinT5wyJgqWH39okc/2Di68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBDNDBGQTRCMTBGRTM1OTJGQTQ1QTAyMjUyRTk4MzRB
MjNDMzA3NjAeFw0yNjA1MTQyMjQ1NTVaFw0yNzA1MTMyMjUwNTVaMDMxMTAvBgNV
BAMTKDUxODNFOTY5OEUzOEI1OUE4NzI5NDcyODVGQzBENTkyRDk3NDc2M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3uWNeCiBObyzyG+QQzDS6KgN
6JJwh/0oQcvyrU/GtnacLMYjPxmOp7L4iv4qVWP7iAKlQ64Z3SWGQBJWIduqjQ3k
QyckQF0fRHuGihcz3CrtxTTnHadhGAlA5UsC/vfksSzQkrAd6/OkYUvidP3qRaSI
Jk/GWt+SSAH7CT49gtmBRUrxB2VcvDJONldallxZoWBKB8Xf+wAkKzgxw6qNXNuQ
8PDu67kkEqH9K9Ug+YkrvQ2Q4eOf9ssoVgcmOEpY0AQAllsBsltRr7rbdNDj3uTG
+I7z5Pjf3g9hshYXvrkjeZljva0aHlrMR47g0fhkx17OgJJbit7xsDbquJOlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUYPpaY44tZqHKUcoX8DVktl0djwwHwYDVR0j
BBgwFoAU4MQPpLEP41kvpFoCJS6YNKI8MHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXh2TGNSREdVRDJQQ1RBdEtSMnZtU3g4ZmhtS3VQTVMxZUYyMUVBc2Z5
REgvMC9FMEM0MEZBNEIxMEZFMzU5MkZBNDVBMDIyNTJFOTgzNEEyM0MzMDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwQzQwRkE0QjEwRkUzNTky
RkE0NUEwMjI1MkU5ODM0QTIzQzMwNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl4dkxjUkRHVUQyUENUQXRLUjJ2bVN4OGZobUt1UE1TMWVGMjFFQXNmeURILzAv
MzIzODMwMzQzYTMzNjEzNjM0M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM2
MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ6ZDANBgkqhkiG9w0BAQsFAAOCAQEAuPbrBL76
BAUencLXeyRFE+T0L623ULSOrjlKfTd1FyNtSbhlTxT5fZ2CJyytB6l6u0CkqPJm
vRs4QBKyC2gnuIRbIEnCSfg37zRcOXZG5i24bJp/aJ7l+clQsP5dL66Ediv2+kKZ
gxhSzLJz4mPWmzS36EwyGo0kI9nwCD+McuHTrHhcmiYsGSdnvgeA/KaNr6XYbGpf
eOsb3hOvPpxbsQ/lvFFSb0GvGGUNoqkIZYZvuuJlnM2Uyimo3CJGdRarEJeYXrHV
jaqY8Kmq7MvzLeZ7IaVHjc2gTPjo3fHIZD+gPu7AvaKI8/+WillTSuCPjOgqVhUP
wRLTQgf2xORSSg==
-----END CERTIFICATE-----
Generated at Sun May 24 18:47:52 2026 by rpki-client