Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/323830343a323763383a3a2f33322d3332203d3e20323633393232.roa
File:                     323830343a323763383a3a2f33322d3332203d3e20323633393232.roa (raw, json)
Hash identifier:          v87ZtNogRxgzjhm/0J+T/4Ff5DRMqN6Eg4RiwjbiGF4=
Subject key identifier:   C1:72:8E:84:BC:C9:CF:9C:2B:CB:A9:FA:D1:A5:E2:75:73:62:2D:F2
Certificate issuer:       /CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
Certificate serial:       2429D3DF9EC78F460F83A7EC556B465053B4BADF
Authority key identifier: 8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/323830343a323763383a3a2f33322d3332203d3e20323633393232.roa
Signing time:             Mon 22 Jun 2026 13:02:15 +0000
ROA not before:           Mon 22 Jun 2026 12:57:15 +0000
ROA not after:            Mon 21 Jun 2027 13:02:15 +0000
asID:                     263922
IP address blocks:        2804:27c8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl
                          rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:29:d3:df:9e:c7:8f:46:0f:83:a7:ec:55:6b:46:50:53:b4:ba:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
        Validity
            Not Before: Jun 22 12:57:15 2026 GMT
            Not After : Jun 21 13:02:15 2027 GMT
        Subject: CN=C1728E84BCC9CF9C2BCBA9FAD1A5E27573622DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:e4:75:6c:6b:c5:79:34:2f:03:50:d1:54:
                    d8:b4:a0:21:47:b5:f9:b4:99:39:73:3d:b9:99:ad:
                    52:a9:bf:27:b0:36:6b:a1:63:d4:e7:21:b4:f2:04:
                    8e:5f:86:ae:52:71:10:1d:59:36:45:94:cb:6a:51:
                    a2:ac:21:85:14:30:e1:1f:a9:b7:0f:16:24:76:ed:
                    6e:ac:ce:50:b9:7d:c5:45:6f:0d:06:cf:0e:8e:e7:
                    d5:84:0d:89:3c:7b:53:97:1b:49:92:32:da:24:38:
                    34:e7:19:15:bd:4f:93:38:20:b3:4d:87:60:0a:53:
                    82:48:3f:90:d9:3d:2d:85:c4:f1:9f:7e:71:19:57:
                    77:56:74:e1:c3:27:b0:9d:57:0e:2a:21:dc:7e:1f:
                    be:60:cd:00:00:ad:49:11:b5:e3:5c:37:62:b3:f6:
                    89:b0:f7:b1:e8:d3:ee:b0:25:8e:f7:c7:5f:cb:55:
                    fe:7f:35:00:15:d2:7a:1e:f8:b0:83:9a:ec:e9:e2:
                    5e:57:90:a1:76:e5:de:54:21:52:3f:86:30:6c:21:
                    60:17:c0:cd:70:8b:07:4a:38:94:85:d3:19:0a:ec:
                    ec:83:77:a5:b0:a7:04:36:41:50:23:f3:b9:9d:7f:
                    a4:ea:dc:b6:3a:cd:99:c8:65:0c:ed:d3:55:93:2d:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:72:8E:84:BC:C9:CF:9C:2B:CB:A9:FA:D1:A5:E2:75:73:62:2D:F2
            X509v3 Authority Key Identifier:
                keyid:8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/323830343a323763383a3a2f33322d3332203d3e20323633393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:ef:0e:35:65:e0:32:61:34:de:1a:20:4d:21:5d:0d:8e:
         68:12:b0:a9:d9:90:fd:6c:0a:54:dd:8f:63:34:93:4d:44:1f:
         f5:99:88:ce:3d:8b:c9:31:91:b1:8c:63:2d:15:85:33:79:5a:
         31:4c:8f:7a:f5:7c:ad:b4:e7:49:09:f5:4a:0c:71:93:ed:fc:
         36:a3:dd:eb:69:b5:cf:d1:7b:46:a2:df:1d:12:ae:13:e1:09:
         86:0c:f4:38:20:15:6c:f1:b3:bd:cf:1b:a4:00:f8:05:dc:35:
         e6:c0:1b:69:10:66:6c:43:cc:f5:ca:df:a1:6e:49:f0:e3:92:
         52:18:88:ab:e6:86:8f:6b:c1:e6:d3:9c:c2:f1:2a:18:a3:1f:
         37:78:0a:19:b7:19:43:47:ad:f0:e2:79:81:a6:19:af:e0:70:
         96:dd:58:0f:93:b0:d9:36:ff:d3:f6:d4:5c:15:07:7d:fc:a5:
         1a:8c:d0:22:f5:0c:90:28:60:b5:77:ef:4b:57:44:98:7a:9d:
         85:c6:a6:fd:b8:31:0c:4f:3c:c4:cf:de:9a:9b:ac:0f:56:79:
         2d:e4:c9:ef:d9:81:f9:d8:88:96:80:16:22:71:90:44:21:93:
         8b:12:5a:9c:0e:33:77:67:ba:9f:7f:8d:8b:d1:ee:33:2c:71:
         fb:f0:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:05 2026 by rpki-client