Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dr2kVd4jwGdHoz9Q9BZYFHh266yBprzwnSsx24oq2hfR/0/323830343a336632383a3a2f33322d3438203d3e20323636363433.roa
File:                     323830343a336632383a3a2f33322d3438203d3e20323636363433.roa (raw, json)
Hash identifier:          165qipZ475RBQEm1NRf4X8Z1HkV9ulevKwgn9UACMWE=
Subject key identifier:   90:03:26:84:87:71:A7:1D:0C:F4:0A:FA:5B:BB:D8:0A:C9:32:CB:D9
Certificate issuer:       /CN=13D32C61474CDAC3E106F7C9F364F87C6FA80EA4
Certificate serial:       08646DBB543C3E442CE364E3296E8BF2B14F8E28
Authority key identifier: 13:D3:2C:61:47:4C:DA:C3:E1:06:F7:C9:F3:64:F8:7C:6F:A8:0E:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13D32C61474CDAC3E106F7C9F364F87C6FA80EA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dr2kVd4jwGdHoz9Q9BZYFHh266yBprzwnSsx24oq2hfR/0/323830343a336632383a3a2f33322d3438203d3e20323636363433.roa
Signing time:             Mon 15 Jun 2026 14:35:34 +0000
ROA not before:           Mon 15 Jun 2026 14:30:34 +0000
ROA not after:            Mon 14 Jun 2027 14:35:34 +0000
asID:                     266643
IP address blocks:        2804:3f28::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dr2kVd4jwGdHoz9Q9BZYFHh266yBprzwnSsx24oq2hfR/0/13D32C61474CDAC3E106F7C9F364F87C6FA80EA4.crl
                          rsync://rpki-repo.registro.br/repo/Dr2kVd4jwGdHoz9Q9BZYFHh266yBprzwnSsx24oq2hfR/0/13D32C61474CDAC3E106F7C9F364F87C6FA80EA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13D32C61474CDAC3E106F7C9F364F87C6FA80EA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:64:6d:bb:54:3c:3e:44:2c:e3:64:e3:29:6e:8b:f2:b1:4f:8e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D32C61474CDAC3E106F7C9F364F87C6FA80EA4
        Validity
            Not Before: Jun 15 14:30:34 2026 GMT
            Not After : Jun 14 14:35:34 2027 GMT
        Subject: CN=900326848771A71D0CF40AFA5BBBD80AC932CBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:fa:ff:d4:18:e7:16:3c:d8:fc:d4:b0:da:
                    eb:41:d7:78:42:73:c0:43:6f:b6:f6:5b:f3:2a:b9:
                    7b:09:0d:61:8a:79:4a:3b:58:68:c0:d0:b2:2b:5a:
                    8a:6b:dd:62:a7:d5:9b:65:d5:7c:69:14:17:83:96:
                    da:54:ec:4d:f8:47:0a:fa:b9:70:fb:50:e2:ba:38:
                    e9:7c:6c:71:1a:81:85:97:4f:46:f3:1b:df:e7:26:
                    36:e5:24:e7:c5:f4:6b:72:4e:67:0a:c3:35:99:e0:
                    07:a4:a4:62:64:6b:63:80:0f:b5:b7:93:56:d4:e9:
                    aa:b1:8e:c6:33:b1:2a:42:8b:bc:b5:2e:ee:29:12:
                    8a:9b:8c:12:5b:4f:87:b3:a3:cf:af:ba:14:58:8e:
                    86:27:75:06:df:20:2c:af:33:c8:af:fb:1c:0c:2a:
                    d1:43:b3:f5:26:91:15:44:81:cf:a4:a0:1e:95:70:
                    71:49:1f:59:6a:db:fc:e1:b9:67:81:33:a7:30:26:
                    d4:2b:6a:5e:89:aa:4f:72:e8:7b:f9:44:64:c0:3f:
                    52:48:78:a2:3a:87:ab:a2:4a:b3:98:db:29:93:12:
                    e0:c5:f9:ba:bc:9b:10:6d:55:3d:af:ab:78:ab:a5:
                    d6:ce:2d:13:65:6b:10:d9:0b:3f:ec:6e:14:05:86:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:03:26:84:87:71:A7:1D:0C:F4:0A:FA:5B:BB:D8:0A:C9:32:CB:D9
            X509v3 Authority Key Identifier:
                keyid:13:D3:2C:61:47:4C:DA:C3:E1:06:F7:C9:F3:64:F8:7C:6F:A8:0E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dr2kVd4jwGdHoz9Q9BZYFHh266yBprzwnSsx24oq2hfR/0/13D32C61474CDAC3E106F7C9F364F87C6FA80EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13D32C61474CDAC3E106F7C9F364F87C6FA80EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dr2kVd4jwGdHoz9Q9BZYFHh266yBprzwnSsx24oq2hfR/0/323830343a336632383a3a2f33322d3438203d3e20323636363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:c7:b1:c6:c0:d6:3c:a8:bf:34:de:2a:e0:75:d3:da:24:31:
         e8:b5:06:ff:7d:cc:8c:0a:ef:94:b5:95:85:3e:23:b1:c0:79:
         f7:52:27:7e:80:8a:ca:75:70:b1:3e:3b:65:01:ef:6f:2c:95:
         24:f0:2c:53:5b:70:cb:ff:7a:e5:31:ae:d3:6b:15:58:cc:04:
         5c:60:f7:4b:ca:5b:87:42:94:1b:a4:ea:6a:95:23:b5:aa:8b:
         6b:4c:19:26:0a:3c:7c:d2:9c:b2:7e:a0:3f:c9:f2:2b:bd:41:
         d6:76:bf:07:ac:e0:18:43:ca:2e:e1:c6:0d:bd:b0:d4:95:03:
         17:53:67:d5:45:55:8d:69:e1:96:92:a7:5f:16:66:9a:a2:08:
         95:79:7f:5f:92:e8:70:b9:e5:e3:0a:85:86:4d:79:16:7f:43:
         83:6c:9c:63:42:c9:56:ae:05:d8:4a:28:db:6d:7e:d9:9a:ce:
         4e:45:8c:81:68:e9:8e:86:1a:74:02:c4:83:9f:66:18:e9:19:
         25:0d:2e:08:f7:08:ff:0d:c3:95:11:6f:e8:59:e0:f1:d7:1d:
         52:5a:03:53:23:ba:21:2a:f1:a2:a1:d2:bb:dd:f2:a1:e5:53:
         74:a4:b2:c8:c2:16:04:84:54:68:fd:0e:3c:49:56:25:b8:5e:
         e8:95:ca:ce
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCGRtu1Q8PkQs42TjKW6L8rFPjigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNEMzJDNjE0NzRDREFDM0UxMDZGN0M5RjM2NEY4N0M2
RkE4MEVBNDAeFw0yNjA2MTUxNDMwMzRaFw0yNzA2MTQxNDM1MzRaMDMxMTAvBgNV
BAMTKDkwMDMyNjg0ODc3MUE3MUQwQ0Y0MEFGQTVCQkJEODBBQzkzMkNCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcpPr/1BjnFjzY/NSw2utB13hC
c8BDb7b2W/MquXsJDWGKeUo7WGjA0LIrWopr3WKn1Ztl1XxpFBeDltpU7E34Rwr6
uXD7UOK6OOl8bHEagYWXT0bzG9/nJjblJOfF9GtyTmcKwzWZ4AekpGJka2OAD7W3
k1bU6aqxjsYzsSpCi7y1Lu4pEoqbjBJbT4ezo8+vuhRYjoYndQbfICyvM8iv+xwM
KtFDs/UmkRVEgc+koB6VcHFJH1lq2/zhuWeBM6cwJtQral6Jqk9y6Hv5RGTAP1JI
eKI6h6uiSrOY2ymTEuDF+bq8mxBtVT2vq3irpdbOLRNlaxDZCz/sbhQFhsd/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUkAMmhIdxpx0M9Ar6W7vYCskyy9kwHwYDVR0j
BBgwFoAUE9MsYUdM2sPhBvfJ82T4fG+oDqQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHIya1ZkNGp3R2RIb3o5UTlCWllGSGgyNjZ5QnByenduU3N4MjRvcTJo
ZlIvMC8xM0QzMkM2MTQ3NENEQUMzRTEwNkY3QzlGMzY0Rjg3QzZGQTgwRUE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzRDMyQzYxNDc0Q0RBQzNF
MTA2RjdDOUYzNjRGODdDNkZBODBFQTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RyMmtWZDRqd0dkSG96OVE5QlpZRkhoMjY2eUJwcnp3blNzeDI0b3EyaGZSLzAv
MzIzODMwMzQzYTMzNjYzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/KDANBgkqhkiG9w0BAQsFAAOCAQEAS8exxsDW
PKi/NN4q4HXT2iQx6LUG/33MjArvlLWVhT4jscB591InfoCKynVwsT47ZQHvbyyV
JPAsU1twy/965TGu02sVWMwEXGD3S8pbh0KUG6TqapUjtaqLa0wZJgo8fNKcsn6g
P8nyK71B1na/B6zgGEPKLuHGDb2w1JUDF1Nn1UVVjWnhlpKnXxZmmqIIlXl/X5Lo
cLnl4wqFhk15Fn9Dg2ycY0LJVq4F2Eoo221+2ZrOTkWMgWjpjoYadALEg59mGOkZ
JQ0uCPcI/w3DlRFv6Fng8dcdUloDUyO6ISrxoqHSu93yoeVTdKSyyMIWBIRUaP0O
PElWJbhe6JXKzg==
-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:19 2026 by rpki-client