Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a383030303a3a2f33342d3334203d3e20323731363038.roa
File:                     323830343a376533303a383030303a3a2f33342d3334203d3e20323731363038.roa (raw, json)
Hash identifier:          vh12t3XIGBY4X2rjC9MqFhMM+LFTI7KHZC7iDnKo3ns=
Subject key identifier:   9C:1F:C3:A8:C8:81:0C:E7:35:14:3A:07:2B:FF:70:55:17:D4:36:81
Certificate issuer:       /CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
Certificate serial:       303C34B61B280FD6168859882C27D57236A4978B
Authority key identifier: 27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a383030303a3a2f33342d3334203d3e20323731363038.roa
Signing time:             Tue 30 Jun 2026 00:06:29 +0000
ROA not before:           Tue 30 Jun 2026 00:01:29 +0000
ROA not after:            Tue 29 Jun 2027 00:06:29 +0000
asID:                     271608
IP address blocks:        2804:7e30:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl
                          rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3c:34:b6:1b:28:0f:d6:16:88:59:88:2c:27:d5:72:36:a4:97:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
        Validity
            Not Before: Jun 30 00:01:29 2026 GMT
            Not After : Jun 29 00:06:29 2027 GMT
        Subject: CN=9C1FC3A8C8810CE735143A072BFF705517D43681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:8c:cc:56:c8:6e:7c:69:be:44:fb:62:68:
                    33:09:90:79:19:ec:76:8e:ea:27:69:a8:78:eb:e9:
                    bc:0e:20:a9:63:18:dd:67:e8:80:a2:15:99:a7:43:
                    b3:a0:6a:bf:c2:cc:32:c8:11:5b:05:97:f4:68:d5:
                    be:8a:89:ae:26:d8:de:8a:52:73:f5:50:9d:06:43:
                    ec:21:f7:f0:b2:5b:c7:dc:e2:94:5b:31:1c:bc:c3:
                    70:74:8d:f9:7e:e5:a8:00:60:95:9b:7d:65:e6:3b:
                    6e:b3:1b:6e:02:c6:9e:3e:15:48:40:83:76:6f:28:
                    50:c1:31:0e:26:d5:9f:81:ba:fd:dd:8b:f2:79:4c:
                    e1:2a:e9:af:c2:b0:02:9e:1a:6c:c2:f5:d7:9b:92:
                    3e:ac:0e:94:ee:ef:30:6a:dd:e4:c4:2d:6e:f2:fd:
                    7e:db:d6:b2:0f:fb:9b:fe:57:b2:ec:a7:d5:9b:2a:
                    35:bd:32:95:5e:32:f9:a3:c3:e5:57:d8:24:a4:8e:
                    33:03:7e:ef:9a:31:63:8c:57:99:88:ab:31:ef:fc:
                    61:92:a7:7f:de:51:70:8e:cd:2e:db:f4:86:64:d3:
                    a2:67:c2:63:9a:4c:d1:c0:ca:ad:2c:14:e2:9e:65:
                    56:fb:38:44:fb:53:59:d4:b7:f0:c7:08:51:b6:93:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1F:C3:A8:C8:81:0C:E7:35:14:3A:07:2B:FF:70:55:17:D4:36:81
            X509v3 Authority Key Identifier:
                keyid:27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a383030303a3a2f33342d3334203d3e20323731363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e30:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9b:d8:e3:12:d9:03:49:57:df:3e:6d:eb:82:89:65:32:e7:3d:
         52:83:8a:f6:03:c9:b2:61:00:80:f1:2d:98:0e:f3:c9:ea:ad:
         e6:6c:f5:13:c9:b8:34:4b:45:2e:e5:68:c4:4a:cd:65:88:91:
         66:ae:8d:43:5a:b6:89:42:eb:0a:f5:ac:b8:9b:e7:1c:a5:14:
         d0:2d:95:82:8f:26:56:a4:8d:25:de:36:20:80:7e:26:4a:ec:
         e1:bb:45:5e:fb:90:45:61:23:f5:bf:5a:b8:cf:a2:d0:9a:12:
         40:96:d6:ac:5b:a6:ae:1a:a2:a4:e5:81:7d:f2:99:39:9b:0b:
         c0:d8:c3:2b:e4:54:25:e5:c8:88:7e:65:cb:0f:3d:75:e4:55:
         86:3e:16:10:b4:1a:cc:36:22:96:d6:9e:75:4d:c0:2c:f3:11:
         e2:4d:1c:89:40:e7:c1:0f:a8:40:b7:8d:9b:d1:a3:20:c4:b1:
         ef:88:79:b5:eb:8a:38:da:6b:44:8e:66:aa:21:89:ea:0c:76:
         f0:35:4d:34:83:44:c4:41:fb:33:76:68:07:ad:90:28:1b:cb:
         db:bc:de:59:0a:e9:3a:24:2a:7e:60:18:ee:3e:73:08:11:c0:
         26:6e:5f:bb:10:76:c3:e5:91:e0:86:f9:0a:5e:d2:bf:62:01:
         24:af:39:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:18:12 2026 by rpki-client