Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/323830343a366335343a323030303a3a2f33352d3335203d3e20323730343630.roa
File:                     323830343a366335343a323030303a3a2f33352d3335203d3e20323730343630.roa (raw, json)
Hash identifier:          gpgh2xrfm88adNbTLqZF/FxrwU7ox0xyD+CH97e+f9E=
Subject key identifier:   A0:01:9E:AB:CE:FB:E6:19:0F:D5:6C:7B:23:0C:6D:8E:BD:FF:2A:6F
Certificate issuer:       /CN=CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E
Certificate serial:       79BD0B149A8170F7D7374BB8241D8D47A80A2F36
Authority key identifier: CA:5C:74:EF:BA:F0:84:A9:DE:47:01:FC:A8:81:B6:A3:EE:99:5B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/323830343a366335343a323030303a3a2f33352d3335203d3e20323730343630.roa
Signing time:             Thu 02 Jul 2026 16:52:01 +0000
ROA not before:           Thu 02 Jul 2026 16:47:01 +0000
ROA not after:            Thu 01 Jul 2027 16:52:01 +0000
asID:                     270460
IP address blocks:        2804:6c54:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl
                          rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 02:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bd:0b:14:9a:81:70:f7:d7:37:4b:b8:24:1d:8d:47:a8:0a:2f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E
        Validity
            Not Before: Jul  2 16:47:01 2026 GMT
            Not After : Jul  1 16:52:01 2027 GMT
        Subject: CN=A0019EABCEFBE6190FD56C7B230C6D8EBDFF2A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:17:05:68:95:83:1a:29:73:3d:e0:11:41:
                    3e:7e:a6:a6:6d:e2:ac:ff:ec:b9:cf:e7:7c:73:34:
                    17:22:17:1a:3c:24:ad:fa:88:20:d5:e3:a2:d1:fc:
                    8e:d7:57:ec:a2:97:a8:60:bc:6d:2f:a8:22:b5:ac:
                    9e:92:ea:bf:67:3c:ab:b9:2e:c8:f9:aa:58:3e:2b:
                    54:17:36:f8:d5:d1:66:81:12:41:8e:ed:b3:68:7c:
                    91:bb:ae:58:0a:ad:df:79:2e:0f:7f:ca:c4:cc:94:
                    83:e8:5d:06:a0:80:ca:f8:11:2c:93:18:f8:bc:e0:
                    5e:76:28:3b:eb:96:46:a4:79:f6:1f:c4:e7:ee:42:
                    79:c2:7f:cc:c4:6d:98:ac:f0:35:d2:7e:9e:6c:27:
                    9b:05:4b:32:c3:fc:4e:09:3b:e1:9c:33:4a:ed:65:
                    80:a3:24:87:d7:80:40:fa:32:3c:27:93:55:10:cb:
                    ff:1d:1c:43:2a:31:5b:bd:dc:34:9b:37:4e:51:11:
                    09:dc:2f:ce:8b:4c:81:e0:d4:cb:e4:3d:e3:bc:58:
                    45:b1:6a:30:fd:e3:6d:4f:01:59:97:88:3e:8f:12:
                    a9:ea:0f:6e:5b:ea:7f:a1:33:c5:79:73:20:39:88:
                    ef:9c:48:21:18:84:d8:89:b9:39:ea:7e:d5:a3:74:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:01:9E:AB:CE:FB:E6:19:0F:D5:6C:7B:23:0C:6D:8E:BD:FF:2A:6F
            X509v3 Authority Key Identifier:
                keyid:CA:5C:74:EF:BA:F0:84:A9:DE:47:01:FC:A8:81:B6:A3:EE:99:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/323830343a366335343a323030303a3a2f33352d3335203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c54:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         77:e0:11:ea:67:79:bc:a5:7e:2b:b0:43:f8:9c:c0:39:f9:c2:
         b0:9f:04:a6:97:c1:81:de:91:a3:cc:fa:9f:24:8b:ee:51:73:
         05:2d:35:86:e8:9f:c2:91:9b:49:6d:b6:0a:d3:42:2e:62:fb:
         6b:49:fe:05:98:88:f6:27:23:0e:b5:52:f2:63:2e:69:6c:bb:
         68:1b:a9:03:13:98:dd:c1:7e:36:6a:8d:b8:d5:ec:17:d9:d1:
         b9:2f:4b:db:70:73:41:8f:e0:23:9c:44:a6:e7:45:f9:bf:0c:
         88:37:e7:d8:2d:e7:68:0a:19:ea:85:13:fd:0c:d1:ca:97:85:
         e9:8e:8b:8f:80:0f:82:fa:2f:81:08:aa:53:d5:e6:0a:79:2e:
         e6:8e:a2:d2:1d:5e:cd:94:37:44:00:9d:e5:03:55:bb:a7:ba:
         b3:ed:88:5e:63:36:f5:e0:7e:b2:05:a1:54:ec:c8:23:b9:11:
         8b:9a:c0:90:2e:d5:25:9b:ca:54:58:52:21:4f:6b:ba:79:a2:
         40:6f:0c:37:78:c2:0d:a6:c8:5b:e0:4f:0f:3f:70:3b:66:4f:
         f5:c8:3b:21:bf:b5:54:2c:72:b5:4a:5e:65:2f:b3:8a:66:4a:
         17:7d:8a:09:ea:69:78:32:64:ca:b3:59:a5:93:98:57:b5:0a:
         6c:07:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:01:26 2026 by rpki-client