Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a633030303a3a2f33342d3334203d3e20323638303535.roa
File:                     323830343a353734343a633030303a3a2f33342d3334203d3e20323638303535.roa (raw, json)
Hash identifier:          4s4TLz+lGdbI7PTDohyareODa8qXXKS9vgSnntuUVTc=
Subject key identifier:   DE:AB:DC:B0:20:6E:0F:C6:C6:A9:06:D9:74:04:88:C5:5A:15:F9:69
Certificate issuer:       /CN=6254A025F47543DDA4959890FB3C567C5E360743
Certificate serial:       04BB19F6C426E706ACAC36F3764A492C3DA1CE15
Authority key identifier: 62:54:A0:25:F4:75:43:DD:A4:95:98:90:FB:3C:56:7C:5E:36:07:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6254A025F47543DDA4959890FB3C567C5E360743.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a633030303a3a2f33342d3334203d3e20323638303535.roa
Signing time:             Mon 30 Mar 2026 14:58:14 +0000
ROA not before:           Mon 30 Mar 2026 14:53:14 +0000
ROA not after:            Mon 29 Mar 2027 14:58:14 +0000
asID:                     268055
IP address blocks:        2804:5744:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/6254A025F47543DDA4959890FB3C567C5E360743.crl
                          rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/6254A025F47543DDA4959890FB3C567C5E360743.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6254A025F47543DDA4959890FB3C567C5E360743.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bb:19:f6:c4:26:e7:06:ac:ac:36:f3:76:4a:49:2c:3d:a1:ce:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6254A025F47543DDA4959890FB3C567C5E360743
        Validity
            Not Before: Mar 30 14:53:14 2026 GMT
            Not After : Mar 29 14:58:14 2027 GMT
        Subject: CN=DEABDCB0206E0FC6C6A906D9740488C55A15F969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2e:9a:60:af:75:29:b0:1c:a5:7b:c0:62:39:
                    4a:37:f8:64:2f:b1:ef:d7:36:c7:55:e0:4e:2f:01:
                    21:e3:e1:2d:12:3d:3b:2f:1b:c5:8b:6c:8b:e2:2d:
                    05:bf:1c:cb:cd:04:33:1e:be:4a:21:a5:6d:e3:ee:
                    a5:d8:38:0d:be:b1:b7:84:b4:ab:ca:c6:12:83:ce:
                    a5:b7:81:89:6d:14:aa:ac:8d:3a:8d:2e:3b:d8:2c:
                    18:f8:99:10:aa:af:4f:7d:44:dd:b2:dc:ae:8d:6c:
                    53:08:2f:6e:4a:a8:4c:cc:bb:30:85:7d:b4:cd:55:
                    5a:ab:73:d1:34:9c:ca:b6:c1:b3:a7:15:99:69:41:
                    c6:6b:80:e6:3e:ef:b7:f3:74:88:4f:eb:68:c0:17:
                    b0:24:57:c2:c3:24:f8:79:3e:92:64:74:34:94:1d:
                    99:92:c1:fb:37:1f:41:f6:3e:03:88:1d:00:a2:69:
                    d7:09:72:98:b2:a4:d7:9a:d9:d6:22:53:ec:5a:42:
                    aa:38:b5:bf:3f:52:1c:21:f7:1c:2c:f1:9f:b7:b8:
                    2e:b6:a1:67:c0:0c:db:4c:98:dd:ee:11:5e:a4:1c:
                    51:4b:77:45:fd:91:31:96:01:bd:1f:2a:a8:ae:4c:
                    f8:50:6f:2b:16:76:cf:e0:3e:36:71:c2:35:c6:5a:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AB:DC:B0:20:6E:0F:C6:C6:A9:06:D9:74:04:88:C5:5A:15:F9:69
            X509v3 Authority Key Identifier:
                keyid:62:54:A0:25:F4:75:43:DD:A4:95:98:90:FB:3C:56:7C:5E:36:07:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/6254A025F47543DDA4959890FB3C567C5E360743.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6254A025F47543DDA4959890FB3C567C5E360743.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a633030303a3a2f33342d3334203d3e20323638303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5744:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:35:06:46:0c:30:ce:d1:f4:39:e6:9c:74:78:7b:23:5b:ee:
         52:d4:ca:a1:00:3f:46:89:97:da:60:ff:46:7a:08:f8:57:f6:
         1f:fa:70:a2:e3:67:03:66:1a:9d:47:1b:4f:a4:1d:a9:03:cd:
         54:b2:30:46:cc:70:9f:7f:83:a0:ac:a2:75:e8:02:c9:ed:27:
         40:02:8b:f4:cc:72:d9:5c:3a:96:9d:81:c2:2a:13:80:38:a8:
         63:0d:03:8d:76:a4:91:0e:b1:32:e2:30:00:5b:5b:a2:53:db:
         fa:ab:2c:9b:36:33:47:8b:bd:58:43:93:55:55:95:46:36:6d:
         8c:32:e3:d5:f6:76:c6:eb:c9:4e:77:15:2e:9f:0c:93:04:d2:
         ff:09:59:d7:63:d5:4a:d6:33:14:a9:07:97:42:98:ef:52:a1:
         12:9f:98:16:66:40:46:3a:4d:9b:72:c5:2c:d4:db:7d:d3:82:
         40:0d:f9:0d:35:82:02:7f:79:b5:da:94:da:4d:c3:17:a8:1b:
         2c:5d:e3:9f:a4:8b:45:ca:99:5c:77:2d:cc:ee:e7:28:8e:7e:
         01:69:6a:84:2e:1b:b5:17:f3:a1:38:c9:1d:e1:a6:f6:a1:fc:
         d7:13:a7:42:d3:32:f5:d4:69:84:10:31:f5:ec:01:31:e9:d7:
         2d:7a:8b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:09:42 2026 by rpki-client