Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/323830343a323763383a3a2f33332d3333203d3e20323633393232.roa
File:                     323830343a323763383a3a2f33332d3333203d3e20323633393232.roa (raw, json)
Hash identifier:          4HGgm8ie6ecYt8roylNgD8CF0qqIxl3K+KGPqeOXWQk=
Subject key identifier:   16:46:F0:D9:10:89:00:C4:9B:4D:80:70:64:81:42:FB:AE:93:5C:4D
Certificate issuer:       /CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
Certificate serial:       56344FB034A289BB27AEFE14549DF56E4673F03B
Authority key identifier: 8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/323830343a323763383a3a2f33332d3333203d3e20323633393232.roa
Signing time:             Mon 22 Jun 2026 13:02:15 +0000
ROA not before:           Mon 22 Jun 2026 12:57:15 +0000
ROA not after:            Mon 21 Jun 2027 13:02:15 +0000
asID:                     263922
IP address blocks:        2804:27c8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl
                          rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:34:4f:b0:34:a2:89:bb:27:ae:fe:14:54:9d:f5:6e:46:73:f0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
        Validity
            Not Before: Jun 22 12:57:15 2026 GMT
            Not After : Jun 21 13:02:15 2027 GMT
        Subject: CN=1646F0D9108900C49B4D8070648142FBAE935C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:2b:0a:9b:45:60:e1:ee:13:71:37:81:6e:
                    6f:99:c8:82:e2:63:24:4b:30:f0:fe:18:d0:d4:87:
                    b2:5a:e0:d4:e6:98:89:6a:72:2c:18:93:8d:22:8a:
                    5f:b5:2a:b6:de:3a:18:09:70:65:b0:e3:fc:f2:b6:
                    b1:79:bf:7a:33:d9:80:55:42:17:78:48:a1:57:7e:
                    3e:de:ae:96:71:67:22:ed:06:25:95:33:9d:2e:e9:
                    59:fb:1f:3a:c3:ab:e2:21:cf:9b:2a:ac:66:18:ff:
                    58:02:d9:54:f7:3d:c1:51:68:e3:41:7e:d5:8e:7e:
                    dc:38:b0:fb:dd:06:9b:9b:11:bb:a1:0d:df:c5:06:
                    76:71:32:ce:77:a6:2e:1c:c5:ed:be:98:c1:20:96:
                    e8:25:2d:66:25:97:aa:01:c4:63:39:36:81:b8:bf:
                    fd:21:67:ff:77:15:57:f3:cd:a5:a0:bf:36:44:c6:
                    d3:c6:f4:3e:0e:bc:1f:6d:2e:16:80:17:fc:df:0c:
                    fc:4c:58:c7:1d:c0:65:46:3a:c8:cd:58:dd:63:d3:
                    17:07:11:91:4d:4a:81:95:9c:45:1a:83:62:d8:ad:
                    86:d9:31:d1:c8:c3:ff:01:f4:24:11:1c:2f:b3:b9:
                    b5:35:1f:ee:35:5e:b1:37:b6:3a:3c:75:86:f0:c0:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:46:F0:D9:10:89:00:C4:9B:4D:80:70:64:81:42:FB:AE:93:5C:4D
            X509v3 Authority Key Identifier:
                keyid:8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/323830343a323763383a3a2f33332d3333203d3e20323633393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c8::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:93:7b:59:6f:14:bc:54:e3:20:90:c8:ec:c8:31:2c:72:
         d7:ad:f9:b6:7e:9e:93:3f:de:f0:90:6a:ee:80:1b:8a:60:02:
         85:80:94:44:90:82:37:d1:24:27:13:4d:7c:d0:b9:5f:0e:e2:
         61:1a:d6:5b:d5:14:ec:13:9b:ea:e4:3a:6f:a3:3b:fc:58:e9:
         b9:d5:68:e4:c2:c4:b8:57:d6:f5:4c:1b:99:f9:cc:95:51:23:
         d4:6a:28:f0:57:1f:18:b2:cb:23:a6:b3:ee:f8:16:e8:9a:10:
         06:49:cf:2f:fc:21:57:b8:0a:c7:6f:b7:bb:31:fe:f5:d9:ac:
         8c:d2:de:57:f8:0e:68:35:d5:b5:5e:93:51:c5:82:98:f7:3f:
         06:b5:74:96:0e:95:26:2a:81:b3:7d:fb:90:e8:c7:d8:ca:1b:
         bf:37:30:72:82:fd:81:42:7b:a2:ea:d3:38:ba:9d:98:e9:a1:
         0e:a3:8d:2f:23:67:5f:5a:4a:23:1f:54:43:15:8c:98:8f:2a:
         18:7f:ea:3c:0d:9d:2c:82:a8:50:cc:25:c9:4f:a7:6e:60:9f:
         02:c4:83:c5:b1:0f:37:fd:fc:c8:9c:2c:e6:22:dd:a3:b7:0d:
         d0:73:20:a1:bc:3a:11:c2:fb:16:6e:aa:40:c1:0e:36:64:b4:
         e1:20:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:08:10 2026 by rpki-client