Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a383030303a3a2f33342d3334203d3e20323732313637.roa
File:                     323830343a383266343a383030303a3a2f33342d3334203d3e20323732313637.roa (raw, json)
Hash identifier:          BHJmYoncbatYr+q7kKRNZwcTSIMiXxw844VbWxpmo4M=
Subject key identifier:   01:68:51:9B:38:46:0E:5A:9F:0F:1A:B6:07:C1:CE:E1:86:9C:16:0B
Certificate issuer:       /CN=266EB7778B34AD61D225851E8CF4924FC36A8639
Certificate serial:       4DFB35E70E09BA551BD1BE06DBDEBAB3E59CF297
Authority key identifier: 26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a383030303a3a2f33342d3334203d3e20323732313637.roa
Signing time:             Sun 22 Jun 2025 23:36:11 +0000
ROA not before:           Sun 22 Jun 2025 23:31:11 +0000
ROA not after:            Sun 21 Jun 2026 23:36:11 +0000
asID:                     272167
IP address blocks:        2804:82f4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl
                          rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fb:35:e7:0e:09:ba:55:1b:d1:be:06:db:de:ba:b3:e5:9c:f2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266EB7778B34AD61D225851E8CF4924FC36A8639
        Validity
            Not Before: Jun 22 23:31:11 2025 GMT
            Not After : Jun 21 23:36:11 2026 GMT
        Subject: CN=0168519B38460E5A9F0F1AB607C1CEE1869C160B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:d1:c8:c0:4d:29:38:91:6e:19:48:a3:03:
                    08:fa:de:a7:ab:ad:a1:05:5a:bb:cb:b0:be:de:e6:
                    5b:f7:b9:02:2e:46:e6:0d:c8:a1:12:7e:9d:09:2a:
                    09:1d:26:34:1e:88:ce:40:d3:89:72:cc:e3:35:3a:
                    c8:0b:79:5c:06:64:2d:e5:24:33:ac:78:52:2d:43:
                    36:5c:e5:08:4f:e5:c0:ea:f1:52:86:eb:b5:dc:fd:
                    9d:6f:1d:4f:75:3a:b6:a7:98:3c:84:97:f6:59:cf:
                    b4:c9:ea:fd:fd:1b:7e:17:7b:ba:c2:b8:00:ca:8c:
                    63:96:5d:33:85:9c:3b:20:5d:b6:2d:c2:46:47:cf:
                    e4:61:71:a7:fc:cb:e0:53:8b:fe:7a:63:63:72:ec:
                    53:98:35:85:1f:a4:42:01:c1:d9:5f:de:f2:48:1e:
                    2f:a6:f0:b6:eb:01:31:43:18:0e:22:f1:7b:4d:70:
                    26:17:8a:93:f9:9c:95:8f:ea:96:d3:84:e2:26:45:
                    0b:c3:91:ed:06:5d:94:53:85:61:c4:00:2a:56:8e:
                    81:e5:cd:8b:04:bc:fc:a4:36:7d:ab:79:26:85:b1:
                    09:bf:9b:46:f7:8f:d3:35:15:10:f6:c7:ff:ea:03:
                    98:65:aa:e8:e0:6a:04:fe:e5:71:52:7a:16:64:69:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:68:51:9B:38:46:0E:5A:9F:0F:1A:B6:07:C1:CE:E1:86:9C:16:0B
            X509v3 Authority Key Identifier:
                keyid:26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a383030303a3a2f33342d3334203d3e20323732313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82f4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         95:4a:44:81:cd:4a:09:27:9f:a3:24:7c:5d:10:d4:d4:e8:43:
         a9:21:30:ef:26:82:30:52:a4:a3:3e:47:8a:91:67:d7:83:fa:
         69:e1:d1:0c:ea:71:58:57:36:0b:47:24:07:0e:06:f3:1e:20:
         39:ab:57:0d:d5:81:3b:66:b6:9a:45:5c:ad:b7:40:33:9f:b1:
         cb:13:9d:60:05:bf:aa:85:d0:13:38:db:17:3e:86:2e:51:02:
         ea:b6:01:df:92:01:1c:8e:e7:b2:c1:57:5a:f6:db:0a:2a:8e:
         12:23:30:91:17:1f:56:c8:36:11:75:08:86:b3:8a:b8:c5:d9:
         84:be:04:1c:b1:cb:b6:cd:2f:f8:4e:7f:66:74:d6:de:f1:f4:
         a9:8f:3d:20:08:54:3f:04:0b:38:9a:c7:73:6c:76:fb:50:27:
         40:6f:d2:60:84:02:c6:da:ba:ef:eb:aa:9a:54:7b:ae:0f:49:
         29:18:d6:c5:a9:19:74:52:7f:cc:35:3f:a4:70:8c:b2:c8:61:
         b1:ad:dc:bb:03:ef:74:2c:b8:ae:38:54:ea:6c:a7:2e:ae:3d:
         80:5f:18:c0:68:1f:f0:4f:a4:98:65:64:1e:d5:1d:6d:80:32:
         4a:99:db:78:ac:41:69:7c:a9:8a:0b:c8:ac:37:dc:58:45:22:
         76:e8:70:20
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTfs15w4JulUb0b4G2966s+Wc8pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY2RUI3Nzc4QjM0QUQ2MUQyMjU4NTFFOENGNDkyNEZD
MzZBODYzOTAeFw0yNTA2MjIyMzMxMTFaFw0yNjA2MjEyMzM2MTFaMDMxMTAvBgNV
BAMTKDAxNjg1MTlCMzg0NjBFNUE5RjBGMUFCNjA3QzFDRUUxODY5QzE2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDdHIwE0pOJFuGUijAwj63qer
raEFWrvLsL7e5lv3uQIuRuYNyKESfp0JKgkdJjQeiM5A04lyzOM1OsgLeVwGZC3l
JDOseFItQzZc5QhP5cDq8VKG67Xc/Z1vHU91OranmDyEl/ZZz7TJ6v39G34Xe7rC
uADKjGOWXTOFnDsgXbYtwkZHz+Rhcaf8y+BTi/56Y2Ny7FOYNYUfpEIBwdlf3vJI
Hi+m8LbrATFDGA4i8XtNcCYXipP5nJWP6pbThOImRQvDke0GXZRThWHEACpWjoHl
zYsEvPykNn2reSaFsQm/m0b3j9M1FRD2x//qA5hlqujgagT+5XFSehZkaWExAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUAWhRmzhGDlqfDxq2B8HO4YacFgswHwYDVR0j
BBgwFoAUJm63d4s0rWHSJYUejPSST8NqhjkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFdYY245THoxdUNrcm01WW1USDE5bW91Rnpna2tzbWZuRHdhVldvNmZ2
ZkYvMC8yNjZFQjc3NzhCMzRBRDYxRDIyNTg1MUU4Q0Y0OTI0RkMzNkE4NjM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NkVCNzc3OEIzNEFENjFE
MjI1ODUxRThDRjQ5MjRGQzM2QTg2MzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hXWGNuOUx6MXVDa3JtNVltVEgxOW1vdUZ6Z2trc21mbkR3YVZXbzZmdmZGLzAv
MzIzODMwMzQzYTM4MzI2NjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEgvSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCVSkSBzUoJJ5+jJHxdENTU6EOpITDvJoIwUqSjPkeKkWfXg/pp4dEM6nFY
VzYLRyQHDgbzHiA5q1cN1YE7ZraaRVytt0Azn7HLE51gBb+qhdATONsXPoYuUQLq
tgHfkgEcjueywVda9tsKKo4SIzCRFx9WyDYRdQiGs4q4xdmEvgQcscu2zS/4Tn9m
dNbe8fSpjz0gCFQ/BAs4msdzbHb7UCdAb9JghALG2rrv66qaVHuuD0kpGNbFqRl0
Un/MNT+kcIyyyGGxrdy7A+90LLiuOFTqbKcurj2AXxjAaB/wT6SYZWQe1R1tgDJK
mdt4rEFpfKmKC8isN9xYRSJ26HAg
-----END CERTIFICATE-----
Generated at Fri Jul 4 21:48:30 2025 by rpki-client