Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a323030303a3a2f33362d3336203d3e20323638373730.roa
File:                     323830343a356136343a323030303a3a2f33362d3336203d3e20323638373730.roa (raw, json)
Hash identifier:          b0CERLh73Q061JFuAqv6UIHvgY3t1OxWw9YTv88uNiM=
Subject key identifier:   E8:21:47:2E:CF:CB:13:F7:98:16:C3:12:B4:0D:04:4B:00:1E:19:A4
Certificate issuer:       /CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7
Certificate serial:       204208837130D303142C1EE615BDA32317CBCE76
Authority key identifier: AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a323030303a3a2f33362d3336203d3e20323638373730.roa
Signing time:             Thu 21 May 2026 22:41:23 +0000
ROA not before:           Thu 21 May 2026 22:36:23 +0000
ROA not after:            Thu 20 May 2027 22:41:23 +0000
asID:                     268770
IP address blocks:        2804:5a64:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 05:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:42:08:83:71:30:d3:03:14:2c:1e:e6:15:bd:a3:23:17:cb:ce:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7
        Validity
            Not Before: May 21 22:36:23 2026 GMT
            Not After : May 20 22:41:23 2027 GMT
        Subject: CN=E821472ECFCB13F79816C312B40D044B001E19A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:b0:cd:f0:81:17:03:61:6c:c4:07:5c:22:
                    7d:eb:11:4c:dc:5e:9d:c4:0c:ce:15:50:7d:16:5e:
                    73:f1:2d:39:ff:85:29:e7:f7:11:29:98:fa:03:9e:
                    e9:7d:4b:67:12:2e:c8:1a:c7:99:f5:c0:f6:45:59:
                    5f:80:69:92:5c:4b:3e:7b:de:d8:7e:af:cb:6e:00:
                    ee:ea:2b:a8:e0:6e:c2:19:9c:1e:61:c6:4b:b4:65:
                    94:12:df:da:bd:43:4a:8b:ac:0a:d9:cd:d4:ae:b1:
                    93:a0:6c:e2:34:93:2d:98:92:2f:e4:12:78:7a:c5:
                    59:4f:08:2e:a0:17:15:dc:ad:4a:17:59:bc:df:59:
                    cf:69:d0:c0:8c:dc:7e:e3:ec:1b:3e:d0:02:71:38:
                    6a:e3:4b:f8:da:b9:50:cd:6c:d2:b9:52:78:16:83:
                    41:4f:96:8f:0c:43:dc:73:c9:95:ca:95:ae:33:b5:
                    9b:a3:5e:dc:04:e0:62:ae:d0:7e:b5:ef:47:e1:24:
                    56:b1:ed:b4:99:c8:92:1d:0a:a5:8a:7d:18:32:5f:
                    0a:f2:b5:74:47:00:d0:9b:78:fb:64:d8:8a:80:29:
                    16:61:c6:1e:a3:12:c9:d5:15:ec:58:32:2f:3c:2d:
                    36:8f:79:86:2e:09:2e:48:62:11:ba:f3:65:58:0b:
                    8a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:47:2E:CF:CB:13:F7:98:16:C3:12:B4:0D:04:4B:00:1E:19:A4
            X509v3 Authority Key Identifier:
                keyid:AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a323030303a3a2f33362d3336203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a64:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         98:31:53:5c:09:4f:a1:07:a1:fe:df:e0:31:d4:ba:ae:87:28:
         42:e5:ba:63:5b:50:8f:77:b3:c7:5e:0e:fd:06:7d:5a:11:82:
         1a:05:d9:71:90:6d:96:6d:f4:25:9a:d9:33:51:c5:cf:70:b1:
         d9:8e:dd:8e:eb:57:8e:c1:ea:91:c3:4a:2a:96:99:91:5a:65:
         4c:d9:bf:53:eb:f6:48:9e:29:5e:58:34:61:88:66:18:64:b8:
         1f:97:52:5e:93:b6:80:f6:ee:e1:0f:b7:a0:c1:41:f9:05:27:
         38:a9:fe:69:4c:09:da:fa:49:ab:ed:bc:71:e5:ec:6f:f3:09:
         74:1e:7e:92:2e:40:d6:10:53:e6:a8:35:1c:13:df:bb:43:68:
         d8:13:03:9c:35:79:6e:52:a3:75:c0:e9:08:db:8d:1d:bf:a0:
         96:b8:4d:eb:e9:fe:0a:59:e8:40:1c:f8:e2:a1:f6:b7:e0:58:
         3a:0a:a5:52:66:70:3c:d1:f6:c0:d0:fe:1a:90:a0:b1:ee:62:
         de:33:ae:68:75:d5:66:4c:f2:0c:4a:27:f3:bf:5a:e1:08:b5:
         05:72:fc:25:8f:cf:3f:40:0b:14:14:f6:b6:ad:db:e9:67:19:
         b7:f7:bb:3c:9a:54:f7:fe:16:be:90:ea:bf:c7:5d:da:12:ad:
         1a:41:91:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 20:16:09 2026 by rpki-client