Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/323830343a323130303a323030303a3a2f34302d3430203d3e20323634353236.roa
File:                     323830343a323130303a323030303a3a2f34302d3430203d3e20323634353236.roa (raw, json)
Hash identifier:          KZQdS22vlZ8KOPwAEuF6cFXY3jxqy4YTLIFWgY8qJrM=
Subject key identifier:   8D:AD:DA:24:D4:5E:1B:46:FA:F7:EB:A9:E8:0F:B4:A2:E1:6E:10:E1
Certificate issuer:       /CN=420B4421486D4B3F3FDDA78BEFDCD04B114FA391
Certificate serial:       7CDCFFE7AABEEF19D312E0A57CB46C8BA713C862
Authority key identifier: 42:0B:44:21:48:6D:4B:3F:3F:DD:A7:8B:EF:DC:D0:4B:11:4F:A3:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/323830343a323130303a323030303a3a2f34302d3430203d3e20323634353236.roa
Signing time:             Thu 14 May 2026 18:53:44 +0000
ROA not before:           Thu 14 May 2026 18:48:44 +0000
ROA not after:            Thu 13 May 2027 18:53:44 +0000
asID:                     264526
IP address blocks:        2804:2100:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.crl
                          rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 13:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:dc:ff:e7:aa:be:ef:19:d3:12:e0:a5:7c:b4:6c:8b:a7:13:c8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420B4421486D4B3F3FDDA78BEFDCD04B114FA391
        Validity
            Not Before: May 14 18:48:44 2026 GMT
            Not After : May 13 18:53:44 2027 GMT
        Subject: CN=8DADDA24D45E1B46FAF7EBA9E80FB4A2E16E10E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:1e:c5:98:5a:12:c8:2e:77:db:8a:13:07:
                    d4:a1:e0:4a:12:cd:40:52:f7:36:95:9e:33:40:ce:
                    21:70:1e:76:b6:c5:04:44:d5:27:11:14:c8:ad:35:
                    44:c0:6a:a0:b2:3d:30:e7:5f:6d:9f:8e:22:84:40:
                    6f:33:59:8a:5f:4b:8f:52:bf:dd:08:c4:4f:13:03:
                    42:96:91:00:d7:4c:52:f8:c8:b0:37:c6:07:f3:96:
                    43:ea:33:21:55:b2:e5:bf:ae:d5:4e:f9:7c:5b:05:
                    cd:fa:97:9a:42:d1:93:fd:f9:4a:f5:9c:60:84:40:
                    9c:2a:76:48:ee:1c:1c:de:72:3f:42:87:68:37:f3:
                    82:d4:9b:22:61:f5:b3:bb:2d:80:dc:83:a9:68:6a:
                    8e:82:60:d0:63:51:92:42:b3:fc:31:e5:71:26:57:
                    73:d3:56:ab:fd:e9:19:3a:2b:fc:a6:4e:86:f8:0b:
                    a1:e2:38:6c:30:8b:d1:fd:cf:20:70:2c:09:22:93:
                    d8:77:44:4e:21:cc:95:35:d6:75:cb:f8:fc:1b:20:
                    2c:ec:92:28:18:ff:a7:8f:4a:72:7a:5e:cd:cc:d3:
                    21:20:f1:be:ef:d9:eb:0c:55:38:7b:c6:45:10:50:
                    76:09:fb:7d:c4:c4:79:a6:c2:16:d5:bf:7a:a0:c3:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AD:DA:24:D4:5E:1B:46:FA:F7:EB:A9:E8:0F:B4:A2:E1:6E:10:E1
            X509v3 Authority Key Identifier:
                keyid:42:0B:44:21:48:6D:4B:3F:3F:DD:A7:8B:EF:DC:D0:4B:11:4F:A3:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/323830343a323130303a323030303a3a2f34302d3430203d3e20323634353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2100:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:a6:64:cb:26:04:40:90:3a:2b:b1:1e:01:24:0e:c2:46:fe:
         7e:3f:60:bf:15:72:8d:77:b1:8b:a4:27:fc:9b:a2:55:3b:55:
         de:b8:3a:15:79:3f:70:1c:4f:15:a5:bb:f3:24:06:0b:be:fd:
         bd:b8:5c:dd:b0:34:aa:ab:df:e1:01:33:c7:64:41:84:2c:1a:
         47:e6:04:18:e4:e6:0c:83:45:44:d3:d5:66:64:53:ce:3d:12:
         ea:a2:78:82:25:d9:11:f4:d1:69:25:0d:39:6b:30:cf:d0:b8:
         0f:01:bf:6c:a8:51:c3:a4:0d:09:89:df:e4:f2:14:ea:06:00:
         63:68:f4:63:b5:dc:48:14:a6:e0:2c:f8:02:76:e2:c7:65:62:
         5e:0b:29:c4:7c:d7:55:70:96:0d:e5:83:f6:0b:4c:72:48:df:
         62:c0:4c:69:ba:35:5c:3f:2e:d1:00:65:ad:0f:93:4e:bb:ee:
         8a:52:cc:c5:a3:30:04:2e:ac:40:c2:e3:28:e7:7f:26:e7:de:
         db:20:c2:92:aa:70:6e:18:a9:32:9e:4a:d5:f8:4f:7c:03:ce:
         e2:79:86:88:80:fd:88:5b:74:1a:64:dc:24:2a:b6:d9:0d:4a:
         3c:12:3e:0c:5e:74:79:50:bf:ba:99:e3:01:6a:8a:59:58:6e:
         f2:1e:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:31:38 2026 by rpki-client