Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33332d3333203d3e20323639313037.roa
File:                     323830343a356638383a3a2f33332d3333203d3e20323639313037.roa (raw, json)
Hash identifier:          iW7jDRft8aCprzuW+y9tYt3vuHqM23tAVTTpxjGAqaI=
Subject key identifier:   55:4F:65:18:75:26:D5:85:5D:8F:F9:A4:7A:45:B7:9E:90:00:08:3A
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       56B652910AA91CAD8EEE1D5DAB7D6650D0F0C429
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33332d3333203d3e20323639313037.roa
Signing time:             Mon 15 Jun 2026 22:00:01 +0000
ROA not before:           Mon 15 Jun 2026 21:55:01 +0000
ROA not after:            Mon 14 Jun 2027 22:00:01 +0000
asID:                     269107
IP address blocks:        2804:5f88::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b6:52:91:0a:a9:1c:ad:8e:ee:1d:5d:ab:7d:66:50:d0:f0:c4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Jun 15 21:55:01 2026 GMT
            Not After : Jun 14 22:00:01 2027 GMT
        Subject: CN=3082010A0282010100AA1C409A69C920780075BD1868BBA05C50AA450D882E24DD15F0F82004D610133DB27B1219C1A5A95E3C74C8E21E82AFEBA25BEFAB492C65B50BFBE9732F315719DB243A9447C771FFEF7ED51F4A75A87C66031BCF366E8605985E1736C830BA9536AD866C8670E5415A176D4AB163E52E486A918D98DC4C7E09D1E2D158E6CBF154ADE99D76879710645A3228FB635F8543E371A434AFD8D509CADF15E403A7675E81ED1F2CE5FE7E1621606C2DC7A1DF6E2B20972181B49F5BBF580B56B0861BE3BB2FFD215999EBD722A5BFC139983BBC9D0CFA3CA76660ED7340C622D310C719838A9AF517E6A83B853F070FB8AB7ABC5763C91FC9F9EFF7C0C7FF79F73D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:40:9a:69:c9:20:78:00:75:bd:18:68:bb:
                    a0:5c:50:aa:45:0d:88:2e:24:dd:15:f0:f8:20:04:
                    d6:10:13:3d:b2:7b:12:19:c1:a5:a9:5e:3c:74:c8:
                    e2:1e:82:af:eb:a2:5b:ef:ab:49:2c:65:b5:0b:fb:
                    e9:73:2f:31:57:19:db:24:3a:94:47:c7:71:ff:ef:
                    7e:d5:1f:4a:75:a8:7c:66:03:1b:cf:36:6e:86:05:
                    98:5e:17:36:c8:30:ba:95:36:ad:86:6c:86:70:e5:
                    41:5a:17:6d:4a:b1:63:e5:2e:48:6a:91:8d:98:dc:
                    4c:7e:09:d1:e2:d1:58:e6:cb:f1:54:ad:e9:9d:76:
                    87:97:10:64:5a:32:28:fb:63:5f:85:43:e3:71:a4:
                    34:af:d8:d5:09:ca:df:15:e4:03:a7:67:5e:81:ed:
                    1f:2c:e5:fe:7e:16:21:60:6c:2d:c7:a1:df:6e:2b:
                    20:97:21:81:b4:9f:5b:bf:58:0b:56:b0:86:1b:e3:
                    bb:2f:fd:21:59:99:eb:d7:22:a5:bf:c1:39:98:3b:
                    bc:9d:0c:fa:3c:a7:66:60:ed:73:40:c6:22:d3:10:
                    c7:19:83:8a:9a:f5:17:e6:a8:3b:85:3f:07:0f:b8:
                    ab:7a:bc:57:63:c9:1f:c9:f9:ef:f7:c0:c7:ff:79:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4F:65:18:75:26:D5:85:5D:8F:F9:A4:7A:45:B7:9E:90:00:08:3A
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33332d3333203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88::/33

    Signature Algorithm: sha256WithRSAEncryption
         bf:f2:e3:8c:b7:c9:dc:fe:6e:6a:70:d1:2a:83:e0:df:c4:a8:
         fe:42:10:8d:17:fb:7b:3a:99:46:d0:f1:aa:16:73:e1:01:ca:
         80:42:49:7a:a6:e5:3f:fb:a0:fd:5b:5e:90:48:47:77:5b:f6:
         d1:89:e1:e9:c7:d8:5c:7e:66:d8:73:f9:e9:cf:2e:e9:d6:d8:
         a2:33:81:35:07:3e:fa:aa:07:39:96:a3:3a:9e:45:d1:4b:05:
         a3:db:3c:cd:33:95:c0:71:f8:74:7f:29:d2:30:2c:39:88:e8:
         37:93:bc:c2:be:02:72:f1:c8:e5:89:6c:dd:d9:fd:ff:91:3a:
         c4:1c:93:59:57:98:ba:47:15:1b:f7:22:63:3c:86:8d:91:e1:
         ac:71:9d:70:8e:3b:92:75:e1:57:e5:b5:02:d7:65:43:17:d7:
         48:69:c9:01:c0:50:a1:15:a5:9d:ae:3b:8a:70:12:2b:e8:09:
         59:7c:bf:f0:d8:b4:1f:27:cd:5b:68:2f:16:70:ed:f5:8b:68:
         27:e0:5b:ab:bf:b4:9b:eb:bc:7a:3b:93:00:8e:54:6c:73:61:
         1e:f8:52:6a:10:39:22:e2:41:69:7a:0d:8f:1f:b6:71:82:b4:
         8d:c0:17:59:0c:7e:4f:a0:a8:18:1b:09:1a:44:e7:eb:2f:11:
         3e:9e:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:24:35 2026 by rpki-client