Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa
File:                     323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa (raw, json)
Hash identifier:          g4veOKVua6UsdbkssFfnzibjHo4NNQ8RwYX2bjpHrk8=
Subject key identifier:   48:5F:2B:EF:95:D5:23:2C:C3:72:B4:C6:C7:7C:F9:7F:68:F4:B8:CE
Certificate issuer:       /CN=258338C892819C29299C2555CE03148F8D63A950
Certificate serial:       0EA5AA71614D812B749DA4357F75F4957A43830F
Authority key identifier: 25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa
Signing time:             Fri 19 Jun 2026 14:14:00 +0000
ROA not before:           Fri 19 Jun 2026 14:09:00 +0000
ROA not after:            Fri 18 Jun 2027 14:14:00 +0000
asID:                     270997
IP address blocks:        2804:74b0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl
                          rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a5:aa:71:61:4d:81:2b:74:9d:a4:35:7f:75:f4:95:7a:43:83:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258338C892819C29299C2555CE03148F8D63A950
        Validity
            Not Before: Jun 19 14:09:00 2026 GMT
            Not After : Jun 18 14:14:00 2027 GMT
        Subject: CN=485F2BEF95D5232CC372B4C6C77CF97F68F4B8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:54:06:70:67:c0:2e:e2:2b:a6:b8:0f:90:
                    69:1b:6d:7f:b7:dd:90:f2:41:84:d8:0b:57:f8:5d:
                    b3:b6:f3:1a:22:cd:ab:b2:1e:98:10:9d:fe:58:aa:
                    3a:61:70:77:41:d0:48:a7:b4:be:23:be:45:5e:11:
                    3c:6b:84:96:de:37:3f:f6:e0:cb:d0:8e:b4:c2:f8:
                    1d:8c:2b:4e:f7:fc:55:41:90:87:eb:bf:74:ac:42:
                    ce:e0:d1:b5:07:fc:3f:b2:92:49:b9:1b:ac:70:fb:
                    42:05:2c:11:02:29:09:de:8a:bc:b6:f3:26:9f:8d:
                    40:4a:d2:7b:21:f1:38:03:1d:2a:af:92:dd:4a:04:
                    69:55:21:a2:0a:8c:d2:de:b3:00:e4:b7:4a:cf:22:
                    d0:98:ce:bc:93:e7:1b:cf:44:89:18:0c:4d:2d:61:
                    43:db:10:3d:bb:57:03:4e:aa:56:a3:b3:13:79:da:
                    1f:f2:95:54:87:20:33:53:00:90:1e:cc:c6:c8:72:
                    c4:69:b3:85:9a:65:44:a0:09:04:05:64:83:b4:d6:
                    56:fa:4e:73:74:40:da:68:9d:8c:6b:19:8d:b6:db:
                    5b:28:ea:e3:48:39:d2:9e:7f:48:44:15:f9:a1:a6:
                    14:00:26:66:1b:c9:9d:42:d4:12:26:e2:17:d1:d8:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5F:2B:EF:95:D5:23:2C:C3:72:B4:C6:C7:7C:F9:7F:68:F4:B8:CE
            X509v3 Authority Key Identifier:
                keyid:25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:e7:c2:95:84:e9:cb:1c:5c:cc:68:5d:d6:e3:17:5c:83:6a:
         3a:a7:67:db:fa:07:15:ed:99:0d:35:91:dc:be:6f:e0:11:da:
         99:5e:2b:28:42:fe:b7:72:9e:65:ef:09:ba:c0:0a:05:30:9b:
         20:50:6d:a3:a0:78:ff:f5:81:5b:28:75:e3:d1:9f:dd:44:98:
         6c:ef:70:dd:aa:63:5a:34:c3:7e:46:22:cb:b9:33:e3:76:5c:
         f9:73:43:5e:48:40:13:ea:a2:b7:6a:31:65:e6:64:f9:d3:40:
         33:dc:d5:1b:e4:af:36:27:60:12:a8:99:2a:a6:eb:7b:56:e0:
         90:03:c4:db:6a:e0:52:df:42:ae:e6:ed:19:30:c2:a4:18:36:
         e7:b4:de:dc:28:f4:a2:6f:3f:ca:20:62:b5:ce:5d:01:70:f4:
         6d:4b:6e:ec:5d:14:ac:a4:a0:5a:fe:fb:9a:4c:ea:25:59:0a:
         f8:34:34:63:1c:a9:ba:5c:53:a6:3c:62:70:1d:30:37:f0:ce:
         ea:b8:4a:b0:ce:3c:8d:69:16:5e:7a:e5:4a:86:d2:43:b1:14:
         60:b2:ff:ad:fc:e3:0b:e6:18:53:83:e0:ca:5b:54:85:b0:1d:
         d2:15:c7:3b:c1:af:01:80:0a:f2:4f:b4:87:23:36:3c:11:08:
         a7:fd:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:06:59 2026 by rpki-client