Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/323830343a383533343a3a2f33322d3336203d3e20323732353634.roa
File:                     323830343a383533343a3a2f33322d3336203d3e20323732353634.roa (raw, json)
Hash identifier:          Jx031Xq3A34APXsLmu3J9lrzoTHjK/Mqm/jLGFZShx8=
Subject key identifier:   C6:3B:53:20:31:CF:05:E3:7D:DC:E2:D7:70:44:C3:09:27:49:48:8B
Certificate issuer:       /CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA
Certificate serial:       7B9A087DB9C3F3B5EBEA9FD9C68EC3A2B43A8C72
Authority key identifier: 8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/323830343a383533343a3a2f33322d3336203d3e20323732353634.roa
Signing time:             Mon 25 May 2026 18:40:48 +0000
ROA not before:           Mon 25 May 2026 18:35:48 +0000
ROA not after:            Mon 24 May 2027 18:40:48 +0000
asID:                     272564
IP address blocks:        2804:8534::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl
                          rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 08:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9a:08:7d:b9:c3:f3:b5:eb:ea:9f:d9:c6:8e:c3:a2:b4:3a:8c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA
        Validity
            Not Before: May 25 18:35:48 2026 GMT
            Not After : May 24 18:40:48 2027 GMT
        Subject: CN=C63B532031CF05E37DDCE2D77044C3092749488B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:89:da:26:33:32:aa:24:4f:17:49:9b:c2:
                    8f:7b:7f:5e:70:19:55:f9:3d:44:cc:66:87:27:f0:
                    63:55:dd:4f:48:56:19:7e:35:50:ab:bf:ac:f0:b6:
                    7b:be:8a:41:58:5f:74:8a:2e:79:f8:30:b1:7b:00:
                    a8:c5:80:ab:99:32:f0:72:49:11:02:31:52:94:fa:
                    ce:9f:74:82:fe:36:ea:ee:5a:51:6b:3b:72:c7:d7:
                    67:fe:a2:d1:12:45:62:4d:51:28:07:7b:b0:26:c8:
                    b7:08:30:33:27:4f:14:97:f1:a3:ce:3f:d0:36:3a:
                    0b:61:db:fd:5d:51:1c:10:b0:10:03:fd:dd:54:2a:
                    3f:93:57:92:6f:f6:52:5f:dc:0e:e1:66:fe:eb:68:
                    a6:9a:dc:3b:74:50:66:2c:e0:24:3e:7a:d5:e5:ec:
                    1f:43:c6:80:50:ab:3a:3f:ea:57:f3:30:0b:12:f3:
                    b8:82:74:9c:7c:21:a4:38:04:e8:59:79:b4:6e:15:
                    72:08:56:f9:58:39:9a:73:17:31:0d:42:ef:c0:06:
                    2e:10:27:be:0b:fd:70:dc:8b:fd:cb:eb:7a:58:67:
                    87:2a:a9:cb:c0:50:7e:f9:29:20:1a:01:19:61:40:
                    20:73:24:fb:39:64:9c:bc:3a:b3:a3:65:fe:ff:06:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3B:53:20:31:CF:05:E3:7D:DC:E2:D7:70:44:C3:09:27:49:48:8B
            X509v3 Authority Key Identifier:
                keyid:8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/323830343a383533343a3a2f33322d3336203d3e20323732353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8534::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:d2:aa:c7:5e:98:5b:58:29:60:a3:47:9e:d6:b9:81:8e:fa:
         23:29:c8:ab:aa:6d:e3:60:6c:29:bf:14:03:ff:19:10:ce:ce:
         8a:7f:c8:de:8e:8f:47:7a:61:98:2e:e5:cd:a7:39:6d:a7:4d:
         88:92:13:77:60:ad:4f:4b:e6:aa:de:4d:65:09:0f:a1:ca:da:
         94:c9:17:59:09:22:f3:f4:02:de:cb:20:91:43:42:c5:ac:ce:
         15:7d:65:8f:89:2c:43:93:22:fe:a8:c6:21:26:2e:1a:c0:c8:
         1b:46:b5:28:b7:73:d9:2a:01:9a:fd:e4:ca:14:63:bf:34:61:
         5b:74:61:ef:10:39:16:0e:a3:17:0f:1e:76:4f:5f:a6:64:24:
         ce:75:4a:76:4d:e1:af:4f:9e:1f:c7:1e:92:63:9a:e2:38:29:
         6d:b8:3b:20:60:94:fa:9f:9a:da:3f:27:2e:86:6b:1a:16:55:
         96:22:a4:f0:c9:dc:6f:14:07:4b:73:27:3c:d4:41:a8:31:1e:
         8b:9b:eb:26:cf:01:bb:a8:19:25:48:c6:69:50:9d:bc:d0:1d:
         2f:63:46:57:a7:5b:4d:ca:15:6c:2d:1d:10:6d:6b:b0:30:da:
         ef:e8:62:c2:38:13:a9:71:9d:6f:ba:7d:77:7a:5e:77:4b:ae:
         82:c1:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:03 2026 by rpki-client