Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3332203d3e20323633363536.roa
File:                     323830343a313066633a3a2f33322d3332203d3e20323633363536.roa (raw, json)
Hash identifier:          fEpnYQjiJ8d7jCG0UqJoH3k53k3I4gn4CM45jQ1ccug=
Subject key identifier:   90:81:8A:30:1E:18:9B:8A:EE:B2:2E:83:BF:FD:B5:A8:77:D9:0D:23
Certificate issuer:       /CN=9314D53106A385E776432E46329AA22CC6980F59
Certificate serial:       2F891D699D5CBC9D666A0564C92865401F03DD40
Authority key identifier: 93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3332203d3e20323633363536.roa
Signing time:             Wed 20 May 2026 17:47:39 +0000
ROA not before:           Wed 20 May 2026 17:42:39 +0000
ROA not after:            Wed 19 May 2027 17:47:39 +0000
asID:                     263656
IP address blocks:        2804:10fc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:89:1d:69:9d:5c:bc:9d:66:6a:05:64:c9:28:65:40:1f:03:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9314D53106A385E776432E46329AA22CC6980F59
        Validity
            Not Before: May 20 17:42:39 2026 GMT
            Not After : May 19 17:47:39 2027 GMT
        Subject: CN=90818A301E189B8AEEB22E83BFFDB5A877D90D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:4f:5f:f7:2e:18:61:d3:23:f2:b7:26:84:
                    d6:4d:85:0b:40:9a:fe:ab:93:10:cd:70:bd:5a:20:
                    25:82:0d:2d:19:d0:70:69:40:33:e6:d2:4e:4b:2a:
                    f8:fb:9e:ef:96:93:5e:e8:ed:7f:3e:0d:d7:12:c4:
                    4e:46:df:90:4b:b9:89:22:bb:7f:31:e6:b2:47:24:
                    39:b1:66:9c:2f:e7:96:9b:f5:68:a8:76:c1:8c:f4:
                    67:86:3f:b7:1c:75:26:07:00:8a:c2:0b:16:34:9d:
                    83:83:2b:06:9f:f0:f6:18:56:d4:a2:c5:37:3e:01:
                    17:a2:2b:e2:a0:d8:bc:47:d5:fd:12:6a:d4:1d:98:
                    da:81:36:a5:b4:d9:9c:c5:20:78:07:bb:50:17:17:
                    79:be:8e:15:d6:b5:6b:9c:f2:9a:6c:ca:af:e2:53:
                    54:fd:a5:26:21:21:fe:a1:64:4a:19:89:9e:87:d6:
                    3b:74:b9:f2:c4:a7:d4:f3:2a:9d:0d:71:3e:79:63:
                    20:f0:1d:db:a4:c6:7f:55:e5:cf:cc:ea:bc:e3:2a:
                    15:6a:9f:64:d4:c9:f1:c4:a7:ec:49:26:49:86:22:
                    4f:f7:d6:ec:ca:ca:a6:82:e5:45:c0:ed:7d:4d:ae:
                    ce:da:1a:69:62:30:26:a8:42:40:86:c8:cd:74:e2:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:81:8A:30:1E:18:9B:8A:EE:B2:2E:83:BF:FD:B5:A8:77:D9:0D:23
            X509v3 Authority Key Identifier:
                keyid:93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3332203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:6d:1e:c3:77:6e:df:cc:74:f8:9d:b1:5f:78:55:d5:20:20:
         98:52:63:18:26:ae:6d:dd:75:3a:6e:8c:5b:a2:c3:f1:64:55:
         e0:54:98:d8:d7:da:2e:f2:54:c7:84:e3:d0:c4:84:0a:93:de:
         0c:cb:1a:78:54:f0:77:84:74:c8:8f:48:13:3e:c1:fc:9d:7e:
         e4:ce:b0:06:9d:5f:16:6e:ef:fd:e6:85:88:33:0c:20:14:22:
         e0:f6:29:b5:dc:ce:d3:a0:85:c8:6f:c5:7f:eb:5d:73:96:90:
         df:dd:77:6e:10:e8:23:b5:c1:68:fa:b4:d2:b4:ff:f4:46:14:
         b8:1b:8a:5d:c7:5b:2b:3a:e6:63:0d:24:2a:14:29:d7:79:d7:
         04:2a:ca:bf:bf:58:6f:fe:71:ac:7e:71:6a:5a:31:a5:92:a0:
         cc:e6:f9:94:44:1e:73:9b:e0:eb:aa:27:56:94:83:c9:c3:dd:
         35:73:bc:d2:47:35:33:d3:9d:05:2a:b2:ca:4e:a6:8f:f5:24:
         a5:da:ac:df:85:1d:b2:99:e6:e8:24:d3:96:04:a2:5e:ae:83:
         d3:e8:d0:d1:b5:18:cc:ac:82:bc:e3:e4:12:ef:46:ec:eb:49:
         23:60:81:48:13:3f:a3:15:d8:81:e6:f6:32:a5:0f:f5:f6:ac:
         f7:9d:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:42 2026 by rpki-client