Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a343030303a3a2f33342d3334203d3e20323633363536.roa
File:                     323830343a313066633a343030303a3a2f33342d3334203d3e20323633363536.roa (raw, json)
Hash identifier:          d8gjRz8/cyLpfc5e1ciutPtGzuOxVm+Bu4yByhQKVC8=
Subject key identifier:   56:17:13:26:36:37:5E:0D:61:9E:68:C9:E6:39:90:73:48:24:9A:AC
Certificate issuer:       /CN=9314D53106A385E776432E46329AA22CC6980F59
Certificate serial:       716FCC683920CE62C47F45CCC6F7EB8F1328340B
Authority key identifier: 93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a343030303a3a2f33342d3334203d3e20323633363536.roa
Signing time:             Wed 20 May 2026 17:47:47 +0000
ROA not before:           Wed 20 May 2026 17:42:47 +0000
ROA not after:            Wed 19 May 2027 17:47:47 +0000
asID:                     263656
IP address blocks:        2804:10fc:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6f:cc:68:39:20:ce:62:c4:7f:45:cc:c6:f7:eb:8f:13:28:34:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9314D53106A385E776432E46329AA22CC6980F59
        Validity
            Not Before: May 20 17:42:47 2026 GMT
            Not After : May 19 17:47:47 2027 GMT
        Subject: CN=5617132636375E0D619E68C9E639907348249AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:1d:68:90:98:32:de:c8:44:64:d6:89:9d:
                    d3:36:07:f2:bc:55:87:17:6e:0a:5d:c9:59:0b:ab:
                    da:aa:97:12:5b:9e:2e:6e:18:e7:5e:53:a6:ad:88:
                    1f:c7:be:1f:14:f2:5c:72:fe:cf:a1:5c:89:5a:92:
                    91:a7:db:95:ed:a9:ca:89:1b:f6:bc:48:a4:cf:f6:
                    e1:ad:08:b2:47:1e:73:ea:ed:a4:d0:91:df:59:a3:
                    96:dc:0c:76:9a:3e:f6:c4:9d:07:d7:0f:e6:f3:12:
                    e2:7e:a4:ab:de:f4:1a:e8:fa:95:33:ce:67:ce:f3:
                    74:52:c8:50:b9:43:9e:a5:35:0c:00:50:01:de:3a:
                    c6:6a:67:a0:e5:7b:5f:06:25:1b:f4:89:f8:e2:2c:
                    02:56:43:c0:1a:f2:4a:68:1b:4d:ca:02:44:23:eb:
                    db:12:15:bd:b4:cd:50:a8:c0:cc:21:f1:92:b5:7f:
                    7c:01:30:a1:c7:0d:39:35:00:bd:e2:ab:a9:2e:4e:
                    39:4e:5a:49:f5:a6:fe:0d:b5:8e:a0:07:63:25:4c:
                    a6:81:4b:fb:f3:c1:bb:2b:c9:d7:73:a7:f2:38:b7:
                    0c:d0:49:e8:1e:fd:1f:86:a4:59:15:ad:d1:c2:e4:
                    fb:0e:85:8c:04:0f:02:09:a1:02:82:e8:6e:2c:74:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:17:13:26:36:37:5E:0D:61:9E:68:C9:E6:39:90:73:48:24:9A:AC
            X509v3 Authority Key Identifier:
                keyid:93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a343030303a3a2f33342d3334203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10fc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:6a:a1:20:0f:ae:a0:3b:fe:b5:8a:90:2c:3f:6f:57:f8:
         20:96:35:8f:80:b9:05:f1:e7:4d:dc:13:b7:19:70:8b:14:34:
         d1:17:15:ec:cb:49:cf:3a:c8:8d:5f:94:b3:5d:f1:1b:77:4a:
         b0:83:cc:fb:96:1f:ed:3f:ec:10:6e:0e:cf:4b:56:f9:2d:db:
         58:6c:f2:34:fc:d5:c9:18:3a:5a:f7:64:b8:e8:31:71:0f:1b:
         fd:70:d6:95:70:7a:6e:ea:27:9a:c0:4c:66:0f:c0:f0:3d:17:
         52:a7:5d:d7:ec:29:a0:91:ab:86:66:32:cc:ed:5a:24:4f:b3:
         68:c1:80:28:ef:16:44:cf:8c:94:15:47:44:1b:d4:33:4e:b6:
         93:5b:38:1c:09:f9:0d:ac:f5:e6:68:35:60:b5:73:41:9c:53:
         d0:37:07:c9:cd:68:5c:01:09:c4:8b:fd:72:b8:6c:fc:f1:51:
         53:52:9d:cf:73:96:09:32:c3:3a:74:39:7c:73:45:fb:82:b6:
         cc:61:bb:d7:ec:a3:13:c5:7c:0b:4a:e0:64:4e:2f:7e:26:f8:
         9f:29:6a:4f:77:8b:4a:ac:4b:f2:77:85:f4:89:98:1e:de:4f:
         95:39:d5:e8:3e:3c:d2:c5:b3:cb:13:2b:4b:46:24:35:1b:85:
         0f:cf:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:46 2026 by rpki-client