Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/323830343a333539633a323630303a3a2f33392d3339203d3e20323636323936.roa
File:                     323830343a333539633a323630303a3a2f33392d3339203d3e20323636323936.roa (raw, json)
Hash identifier:          po2se2eKH88QG8HDulvWfyBMeKqo6B5XaDZfI6wV4sI=
Subject key identifier:   22:48:67:0B:44:9F:5C:6D:D3:4B:C5:60:4C:D4:D7:34:87:18:DA:E7
Certificate issuer:       /CN=CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0
Certificate serial:       6DC2C3819B949E81D79A9964E6FEAD3673A94557
Authority key identifier: CC:D8:EE:E3:D8:BF:89:5C:5A:66:7B:14:D3:FE:EB:01:58:F3:EE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/323830343a333539633a323630303a3a2f33392d3339203d3e20323636323936.roa
Signing time:             Mon 10 Aug 2026 13:27:30 +0000
ROA not before:           Mon 10 Aug 2026 13:22:30 +0000
ROA not after:            Mon 09 Aug 2027 13:27:30 +0000
asID:                     266296
IP address blocks:        2804:359c:2600::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.crl
                          rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c2:c3:81:9b:94:9e:81:d7:9a:99:64:e6:fe:ad:36:73:a9:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0
        Validity
            Not Before: Aug 10 13:22:30 2026 GMT
            Not After : Aug  9 13:27:30 2027 GMT
        Subject: CN=2248670B449F5C6DD34BC5604CD4D7348718DAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:cc:98:b0:67:4c:01:c8:e6:68:02:f4:8d:
                    25:0b:ed:ec:fa:19:62:80:c9:80:a7:78:a7:bc:2c:
                    91:4a:ab:db:0d:ef:0a:db:cf:0d:35:38:c3:dc:11:
                    9a:4f:8e:bc:c1:0f:5b:aa:6c:41:2c:75:92:93:39:
                    4f:8a:b0:81:d7:b5:97:7b:3b:5e:1c:7a:d8:f2:15:
                    8f:d2:98:bf:e4:1d:a4:f4:1a:7d:c3:68:2a:32:a5:
                    8b:61:1a:e5:53:9c:b6:d2:6e:73:c0:bc:c6:e0:cb:
                    27:4b:3e:96:f9:84:d5:3b:ee:70:07:ed:bf:1e:10:
                    b7:f9:8a:0b:9e:f3:e6:40:2e:8d:e0:75:ce:b5:43:
                    a5:e0:3b:c1:07:de:c5:c3:3d:a5:72:2b:2a:f5:13:
                    25:ad:61:09:d7:49:e6:0b:1c:84:b9:12:ad:3d:13:
                    6c:b8:49:61:f3:d1:de:e3:a3:26:c5:fc:48:2a:be:
                    17:09:df:88:d9:16:00:de:62:95:fb:07:69:38:ba:
                    bf:bc:9c:c2:92:2a:88:1c:59:13:f7:ef:fc:f2:50:
                    f4:06:a8:f9:9d:49:dd:23:1d:d3:22:79:5e:7d:90:
                    f5:4c:29:f6:53:15:e4:10:98:ab:a8:c1:ce:26:4c:
                    b0:83:78:71:a4:0f:76:34:95:c0:51:83:94:0b:8a:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:48:67:0B:44:9F:5C:6D:D3:4B:C5:60:4C:D4:D7:34:87:18:DA:E7
            X509v3 Authority Key Identifier:
                keyid:CC:D8:EE:E3:D8:BF:89:5C:5A:66:7B:14:D3:FE:EB:01:58:F3:EE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/323830343a333539633a323630303a3a2f33392d3339203d3e20323636323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:359c:2600::/39

    Signature Algorithm: sha256WithRSAEncryption
         7e:fa:90:03:09:f5:33:65:22:11:91:9d:b0:8b:02:58:88:da:
         20:72:78:ec:e7:48:e1:ec:81:ac:9b:cc:a0:d0:af:df:25:12:
         48:05:f4:2e:9a:d5:bd:ec:5f:58:d8:b4:1e:5d:64:a7:2e:bc:
         2a:3c:f4:de:02:7d:a4:98:ea:1a:98:15:b2:ab:56:0c:17:74:
         75:56:5c:82:87:e2:d6:22:76:5f:2e:4d:37:ff:9c:36:8b:58:
         25:31:85:e9:03:af:a1:1b:f8:81:1e:0f:85:73:4c:8a:f3:ec:
         30:db:24:b3:86:66:d1:d5:5e:86:af:fa:e1:2d:d6:22:7a:bf:
         69:94:f6:ad:75:7e:88:cb:bc:83:26:47:88:04:53:4a:50:93:
         aa:ea:84:e7:f6:4c:35:68:0e:04:ac:46:2e:2d:79:a4:71:df:
         78:4b:a5:b3:33:9a:dd:07:0d:e3:68:99:02:bd:da:76:5d:92:
         ff:77:b5:b4:80:5e:9b:a6:26:1c:00:68:77:7a:49:b9:cb:4f:
         fa:ce:de:cf:e4:88:3f:d0:97:d2:17:f1:c1:20:f4:17:f6:ae:
         a3:69:45:09:96:d2:ac:d3:7b:56:4b:01:4b:75:f5:11:90:43:
         4e:1d:bf:f4:b3:1f:47:ca:fb:3f:f4:fb:84:83:09:a7:2c:cd:
         55:ac:91:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:00:28 2026 by rpki-client