Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/323830343a6665303a3a2f33322d3438203d3e20323633303439.roa
File:                     323830343a6665303a3a2f33322d3438203d3e20323633303439.roa (raw, json)
Hash identifier:          WioHmEDTN7ZGwmJBrImU4DmfdNVLiJR2SLLNIpIvTLc=
Subject key identifier:   56:B4:6D:1F:80:10:CD:88:86:FF:8C:D1:E0:1D:19:B1:B7:07:74:0A
Certificate issuer:       /CN=8884216B4D19579BDCC46ED354EA9FD9F44859AA
Certificate serial:       2434FD3D910764D3007B4AD8C95BAECAA47CF6C7
Authority key identifier: 88:84:21:6B:4D:19:57:9B:DC:C4:6E:D3:54:EA:9F:D9:F4:48:59:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/323830343a6665303a3a2f33322d3438203d3e20323633303439.roa
Signing time:             Mon 29 Jun 2026 14:52:24 +0000
ROA not before:           Mon 29 Jun 2026 14:47:24 +0000
ROA not after:            Mon 28 Jun 2027 14:52:24 +0000
asID:                     263049
IP address blocks:        2804:fe0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8884216B4D19579BDCC46ED354EA9FD9F44859AA.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8884216B4D19579BDCC46ED354EA9FD9F44859AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:34:fd:3d:91:07:64:d3:00:7b:4a:d8:c9:5b:ae:ca:a4:7c:f6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8884216B4D19579BDCC46ED354EA9FD9F44859AA
        Validity
            Not Before: Jun 29 14:47:24 2026 GMT
            Not After : Jun 28 14:52:24 2027 GMT
        Subject: CN=56B46D1F8010CD8886FF8CD1E01D19B1B707740A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:78:3e:38:de:f6:78:db:23:66:7b:12:ac:
                    c9:0f:fc:06:5d:0e:b5:cd:cb:4a:e1:0e:85:2d:2e:
                    cd:19:94:39:9a:94:4c:26:93:87:d7:ff:51:72:ee:
                    78:dc:58:5f:39:bb:47:16:1b:bd:ae:c7:b8:91:73:
                    6b:54:70:0c:dc:94:d8:8e:f2:24:dd:88:24:22:1f:
                    44:d3:3c:c1:61:97:ab:81:0a:ad:9e:82:f0:7b:9e:
                    41:10:a1:2b:ea:aa:20:4c:0c:8a:fc:90:86:f9:75:
                    24:82:cf:72:f6:5c:54:94:bd:df:6a:17:a8:c5:4e:
                    17:6f:5e:b1:a2:68:0f:b8:af:3b:b6:7d:4c:42:d9:
                    fe:1d:48:08:ab:cc:cb:69:2c:ef:f3:31:87:bf:a7:
                    22:7a:f7:0e:75:d6:73:b6:4c:8c:89:5b:f0:08:56:
                    2e:94:41:8a:c3:70:a7:23:75:5a:52:90:9e:75:d7:
                    e1:f6:9e:3a:4a:ae:f4:29:9f:56:09:f2:f0:25:c5:
                    1c:2c:b5:29:ee:6e:a8:22:6f:27:66:cb:f5:ef:4c:
                    bd:a4:82:90:2f:75:60:c8:0d:a9:43:fb:34:7a:90:
                    75:92:fc:2d:c3:95:c1:fd:42:e2:1b:e7:fc:38:c6:
                    ee:8f:c1:da:9c:e7:8f:e4:71:04:10:92:5e:82:02:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B4:6D:1F:80:10:CD:88:86:FF:8C:D1:E0:1D:19:B1:B7:07:74:0A
            X509v3 Authority Key Identifier:
                keyid:88:84:21:6B:4D:19:57:9B:DC:C4:6E:D3:54:EA:9F:D9:F4:48:59:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8884216B4D19579BDCC46ED354EA9FD9F44859AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/323830343a6665303a3a2f33322d3438203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:e6:6d:9d:31:6b:34:b2:cc:0b:9f:6d:02:4c:55:d1:1a:97:
         7c:61:24:ca:07:c2:4c:9f:43:f3:2d:12:bb:f2:b4:c8:ff:ed:
         7b:68:38:43:5d:3b:0b:a3:b2:04:3c:03:2d:fe:09:ef:77:76:
         8e:31:26:b5:4a:43:c4:af:3f:93:22:a0:c2:cc:f0:58:0a:63:
         e9:8e:7f:c5:5d:f8:05:d1:73:89:93:40:49:9c:50:54:ca:80:
         82:23:95:88:d0:e7:d5:aa:92:4f:30:67:3f:6e:e3:2b:c2:62:
         45:45:fb:42:a5:e0:f2:49:a2:13:c3:79:c6:89:45:c8:03:79:
         b7:89:54:46:bc:63:b9:da:74:7e:e9:97:b6:8c:86:65:24:1f:
         84:83:4e:00:6e:f0:87:f6:09:2f:74:6b:ff:5d:6f:dc:97:f4:
         67:3c:f1:4e:7a:90:b0:ed:c8:18:d3:51:1b:71:60:2b:95:f8:
         0d:fc:65:fb:88:ea:8e:62:81:cf:52:d4:d3:8b:b6:1a:b6:f6:
         fe:90:51:76:30:e8:23:96:9d:5b:71:ba:5f:fd:7c:14:f7:fa:
         c7:64:ae:23:85:ff:ca:f3:fd:95:07:7f:64:7c:81:f4:83:b1:
         6f:92:cb:1b:40:b5:6a:7d:a1:46:9d:e4:21:78:b9:98:95:be:
         e6:95:b4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:06:08 2026 by rpki-client