Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/323830343a386435343a313030303a3a2f34302d3430203d3e20323733333530.roa
File:                     323830343a386435343a313030303a3a2f34302d3430203d3e20323733333530.roa (raw, json)
Hash identifier:          jGLFvrdSOH6K7cDIXlHGjtmgYvf7QHw3cUtnVU3E+UU=
Subject key identifier:   6F:CC:E1:6C:C5:71:29:F9:16:90:36:3D:87:85:0A:6D:AD:87:31:92
Certificate issuer:       /CN=C06DCE0C5EB51A8205D1036C5B9C08013C182332
Certificate serial:       0C70BA113502D0748E3E45D8E00350329F8916C8
Authority key identifier: C0:6D:CE:0C:5E:B5:1A:82:05:D1:03:6C:5B:9C:08:01:3C:18:23:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C06DCE0C5EB51A8205D1036C5B9C08013C182332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/323830343a386435343a313030303a3a2f34302d3430203d3e20323733333530.roa
Signing time:             Tue 04 Aug 2026 13:14:02 +0000
ROA not before:           Tue 04 Aug 2026 13:09:02 +0000
ROA not after:            Tue 03 Aug 2027 13:14:02 +0000
asID:                     273350
IP address blocks:        2804:8d54:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/C06DCE0C5EB51A8205D1036C5B9C08013C182332.crl
                          rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/C06DCE0C5EB51A8205D1036C5B9C08013C182332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C06DCE0C5EB51A8205D1036C5B9C08013C182332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:70:ba:11:35:02:d0:74:8e:3e:45:d8:e0:03:50:32:9f:89:16:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C06DCE0C5EB51A8205D1036C5B9C08013C182332
        Validity
            Not Before: Aug  4 13:09:02 2026 GMT
            Not After : Aug  3 13:14:02 2027 GMT
        Subject: CN=6FCCE16CC57129F91690363D87850A6DAD873192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:c1:23:42:6c:cd:4e:94:e2:26:e5:29:e4:
                    24:f1:9f:08:e7:65:bf:5b:9a:77:9d:f3:4d:c5:d9:
                    e1:52:50:bd:44:91:b8:0d:05:ed:ad:07:f1:63:a4:
                    45:fd:85:34:1e:09:8d:2b:7c:12:e4:dc:54:43:93:
                    90:b6:3a:9f:44:30:30:34:71:a4:13:e2:48:3e:bb:
                    26:ee:4f:a3:17:5d:90:d2:cd:32:73:2c:12:7d:c1:
                    dc:d8:58:9e:1f:a5:95:3d:ea:ac:52:cf:c2:78:9e:
                    22:89:da:1f:6b:73:67:8c:7e:62:bf:90:a9:80:f5:
                    d3:29:be:e4:cc:c7:6e:60:61:a5:86:eb:1d:18:08:
                    32:c5:da:85:c6:52:6d:aa:30:c8:ed:cd:af:c9:c3:
                    12:93:97:c5:1e:af:cf:a4:1d:d4:56:2b:4a:3b:67:
                    0b:9e:71:80:d7:c3:66:1f:f9:a5:be:91:3a:56:84:
                    ce:45:94:16:27:10:16:0c:0f:03:9f:d8:36:61:ea:
                    5f:98:a4:dd:f2:5d:d3:1b:67:4e:d5:63:c8:a7:a8:
                    fb:ed:a5:80:02:f5:ea:33:4e:3d:42:be:6e:c3:12:
                    e0:a1:28:2a:a0:c6:3e:92:63:00:d1:06:25:da:fc:
                    25:1a:00:42:fa:d9:9c:c2:e3:39:43:ce:a6:f6:d5:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CC:E1:6C:C5:71:29:F9:16:90:36:3D:87:85:0A:6D:AD:87:31:92
            X509v3 Authority Key Identifier:
                keyid:C0:6D:CE:0C:5E:B5:1A:82:05:D1:03:6C:5B:9C:08:01:3C:18:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/C06DCE0C5EB51A8205D1036C5B9C08013C182332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C06DCE0C5EB51A8205D1036C5B9C08013C182332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/323830343a386435343a313030303a3a2f34302d3430203d3e20323733333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d54:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:c0:4e:46:a7:0b:40:31:f0:e3:40:7c:d9:2f:51:6a:1d:
         72:d4:3e:3e:5c:99:e6:fb:1b:c7:d3:43:f0:c0:1f:4e:30:71:
         8f:74:2f:92:49:1a:83:95:26:29:d2:40:d7:1e:8a:49:44:3e:
         25:eb:b2:ae:e2:af:d7:ed:72:10:0c:c5:96:bc:f3:9c:f2:9a:
         f5:98:5d:21:40:6a:33:da:55:1c:16:0a:69:c4:8c:dd:dd:ee:
         2f:68:be:9e:00:d8:bb:79:d6:35:ff:07:6e:dc:e1:6c:71:8d:
         6d:e6:c6:3c:dd:24:d7:bc:a6:6e:b6:04:3d:4f:35:d5:34:13:
         eb:67:3c:f0:7d:0c:6f:5a:51:a4:70:89:83:fd:fb:fa:fd:66:
         66:43:14:92:81:ff:e4:1c:cf:47:65:e9:9b:08:18:19:b1:ea:
         65:b9:54:2d:cd:f1:c9:e6:34:dc:8e:e9:5f:3a:67:a2:3c:bc:
         3d:4e:07:d4:97:ef:e8:ff:c6:c4:b3:ca:95:f3:56:c2:3a:30:
         99:ae:64:b1:2f:2c:0e:38:50:2e:ed:8d:21:da:74:f6:ed:02:
         22:82:9d:fc:ce:56:da:91:70:79:3d:53:11:7f:89:b3:c4:82:
         a8:7d:e3:6f:63:eb:65:b5:e8:aa:33:e2:ef:2b:5f:ce:2f:91:
         61:31:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:40:05 2026 by rpki-client