Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a383030303a3a2f33342d3334203d3e20323632373239.roa
File:                     323830343a313664383a383030303a3a2f33342d3334203d3e20323632373239.roa (raw, json)
Hash identifier:          wFZ24JAkyuQuA82A5SxWHPAuE4uKMVCyE+4kTIuUvtQ=
Subject key identifier:   4A:57:9A:FB:E1:88:C3:02:96:D7:3E:70:BE:7C:B4:68:E7:66:02:0F
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       7B188AB71C428E5D549D42B7C26855357253A7B3
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a383030303a3a2f33342d3334203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:59 +0000
ROA not before:           Mon 18 May 2026 15:02:59 +0000
ROA not after:            Mon 17 May 2027 15:07:59 +0000
asID:                     262729
IP address blocks:        2804:16d8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:18:8a:b7:1c:42:8e:5d:54:9d:42:b7:c2:68:55:35:72:53:a7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:59 2026 GMT
            Not After : May 17 15:07:59 2027 GMT
        Subject: CN=4A579AFBE188C30296D73E70BE7CB468E766020F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:31:e0:44:66:6a:91:6d:0d:3a:89:27:96:
                    2e:3a:b8:0e:3f:6a:78:8f:58:85:33:f3:41:d8:15:
                    cd:d1:11:5a:54:57:65:47:35:c4:2d:2c:a8:80:de:
                    b9:08:73:4b:57:65:d4:c4:11:11:da:c4:69:77:16:
                    01:41:cc:83:f7:0f:a3:98:b5:cb:83:aa:41:e8:0e:
                    7a:83:cf:4d:b4:bc:f0:7c:08:39:5e:d8:50:ce:30:
                    0a:a1:62:43:be:6b:e7:11:39:ed:9b:ce:2b:6f:64:
                    8a:6e:9a:08:14:b6:45:a2:f4:52:81:ca:78:5c:41:
                    24:61:46:fb:7b:5f:ce:7b:aa:be:f1:30:ec:77:f8:
                    00:cb:02:f2:da:b1:cf:d8:59:69:7b:59:67:f4:78:
                    1c:f2:d9:47:8d:f9:e0:36:1a:c7:92:06:cb:b3:2f:
                    e7:7c:01:b0:37:27:30:d8:4a:82:ca:8f:2f:66:2d:
                    ce:99:ff:fd:05:b6:b0:3e:c6:31:ed:36:00:fc:66:
                    78:f7:38:68:2a:6a:80:c4:59:03:e7:34:46:b6:75:
                    50:3f:b3:16:44:f4:e0:67:4c:e5:2f:5a:fc:91:38:
                    1e:de:07:76:44:77:cf:e9:46:03:73:b7:30:8b:f1:
                    1f:05:e7:d9:e2:f8:58:a7:9c:c3:b2:8d:ab:a7:fb:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:57:9A:FB:E1:88:C3:02:96:D7:3E:70:BE:7C:B4:68:E7:66:02:0F
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a383030303a3a2f33342d3334203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:f4:70:1c:14:a0:ba:b7:d4:bd:4c:d4:88:93:82:f4:bd:
         8d:f6:85:73:cc:94:8d:4e:a4:d3:ae:5d:48:26:4a:04:c9:ed:
         19:0b:8f:3e:93:6b:af:01:a9:0a:aa:8d:c4:31:cb:8e:44:66:
         63:db:13:b2:12:bc:cf:3c:c0:83:6d:6a:65:79:55:52:ff:64:
         8f:c5:bf:44:ea:b5:43:95:cf:e6:a3:f5:fc:6f:49:01:ac:e9:
         dd:92:bc:24:8d:3d:1f:c5:62:fa:e5:ee:59:b2:71:95:92:36:
         56:15:29:19:97:e1:62:43:28:fb:11:14:6a:60:a6:66:61:10:
         38:7c:42:11:3b:54:e4:45:80:32:5b:2b:9b:a1:d5:79:16:63:
         c5:d4:1f:47:34:04:cb:c3:b0:66:40:0b:b4:cb:cd:ab:e3:a7:
         ee:81:fd:9b:af:69:aa:db:f8:a6:6f:01:bc:d5:d4:96:ea:2d:
         bd:92:23:6f:94:47:74:60:c6:21:fa:c5:73:d5:9e:0f:f9:97:
         78:66:af:b9:69:f7:e6:8c:64:a4:fc:69:a9:4a:a1:a9:fb:fd:
         dc:36:0f:5a:2c:9c:5c:b8:50:37:b2:ce:8c:ec:23:f7:d0:71:
         ce:3f:d0:cf:02:00:47:5c:85:b8:45:ab:0e:6c:25:ac:27:29:
         9f:41:69:0a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUexiKtxxCjl1UnUK3wmhVNXJTp7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNjA1MTgxNTAyNTlaFw0yNzA1MTcxNTA3NTlaMDMxMTAvBgNV
BAMTKDRBNTc5QUZCRTE4OEMzMDI5NkQ3M0U3MEJFN0NCNDY4RTc2NjAyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLzHgRGZqkW0NOoknli46uA4/
aniPWIUz80HYFc3REVpUV2VHNcQtLKiA3rkIc0tXZdTEERHaxGl3FgFBzIP3D6OY
tcuDqkHoDnqDz020vPB8CDle2FDOMAqhYkO+a+cROe2bzitvZIpumggUtkWi9FKB
ynhcQSRhRvt7X857qr7xMOx3+ADLAvLasc/YWWl7WWf0eBzy2UeN+eA2GseSBsuz
L+d8AbA3JzDYSoLKjy9mLc6Z//0FtrA+xjHtNgD8Znj3OGgqaoDEWQPnNEa2dVA/
sxZE9OBnTOUvWvyROB7eB3ZEd8/pRgNztzCL8R8F59ni+FinnMOyjaun+9eXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSlea++GIwwKW1z5wvny0aOdmAg8wHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzIzODMwMzQzYTMxMzY2NDM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEFtiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAz8/RwHBSgurfUvUzUiJOC9L2N9oVzzJSNTqTTrl1IJkoEye0ZC48+k2uv
AakKqo3EMcuORGZj2xOyErzPPMCDbWpleVVS/2SPxb9E6rVDlc/mo/X8b0kBrOnd
krwkjT0fxWL65e5ZsnGVkjZWFSkZl+FiQyj7ERRqYKZmYRA4fEIRO1TkRYAyWyub
odV5FmPF1B9HNATLw7BmQAu0y82r46fugf2br2mq2/imbwG81dSW6i29kiNvlEd0
YMYh+sVz1Z4P+Zd4Zq+5affmjGSk/GmpSqGp+/3cNg9aLJxcuFA3ss6M7CP30HHO
P9DPAgBHXIW4RasObCWsJymfQWkK
-----END CERTIFICATE-----
Generated at Sun May 24 16:20:59 2026 by rpki-client