Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a323030303a3a2f33352d3335203d3e20323638333937.roa
File:                     323830343a353039343a323030303a3a2f33352d3335203d3e20323638333937.roa (raw, json)
Hash identifier:          xn27h+Db+7EZN7EXxzq0GN/hg7UsGrfPPjn4QuTA+kY=
Subject key identifier:   02:56:86:25:6D:92:C0:C6:54:EB:2E:14:94:04:BE:DC:C0:93:BB:B7
Certificate issuer:       /CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
Certificate serial:       3660A7220D751B944B2676B07538E62A586D1073
Authority key identifier: 4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a323030303a3a2f33352d3335203d3e20323638333937.roa
Signing time:             Wed 24 Jun 2026 01:42:27 +0000
ROA not before:           Wed 24 Jun 2026 01:37:27 +0000
ROA not after:            Wed 23 Jun 2027 01:42:27 +0000
asID:                     268397
IP address blocks:        2804:5094:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:60:a7:22:0d:75:1b:94:4b:26:76:b0:75:38:e6:2a:58:6d:10:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
        Validity
            Not Before: Jun 24 01:37:27 2026 GMT
            Not After : Jun 23 01:42:27 2027 GMT
        Subject: CN=025686256D92C0C654EB2E149404BEDCC093BBB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:34:f3:1a:c4:c1:39:40:67:dc:a3:50:c6:
                    01:ee:0c:4e:a1:fb:68:2f:c7:f7:04:d0:3f:4f:6f:
                    0a:5a:8f:07:71:9c:99:81:c6:1e:37:2b:35:cd:03:
                    1c:08:9e:37:db:33:70:6a:18:68:e2:9a:fa:6d:5e:
                    c8:0c:26:1b:c5:01:e8:a1:d3:20:70:f3:68:e3:9d:
                    68:81:64:46:12:05:73:f1:a7:b4:22:a1:3a:8f:8d:
                    d9:3e:5f:5f:03:ac:78:69:f1:93:8e:06:46:73:78:
                    d9:84:2a:ad:eb:b9:2b:7b:af:a5:5e:62:bd:17:aa:
                    7f:87:9d:1c:3f:c9:c7:47:bc:fb:11:53:97:58:16:
                    a9:b9:c6:b9:ed:9b:a1:4e:5d:e6:8e:33:9d:db:9c:
                    b2:bc:d3:10:d5:46:02:42:ca:30:8e:6a:1d:50:73:
                    43:cd:76:c8:af:6c:2e:4a:0d:51:44:ee:75:b3:56:
                    d6:11:8e:c8:d3:8c:e7:1f:a3:91:75:96:0b:b1:79:
                    a7:01:47:69:65:3d:81:60:33:97:d5:55:74:77:61:
                    0b:a5:84:46:4e:d6:4a:0c:a5:af:8b:4c:22:0e:e8:
                    08:94:10:67:83:ba:50:52:9f:f2:fe:d1:01:a9:30:
                    10:01:5b:e9:8f:7f:7a:04:cb:10:e8:b0:6f:5b:9b:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:86:25:6D:92:C0:C6:54:EB:2E:14:94:04:BE:DC:C0:93:BB:B7
            X509v3 Authority Key Identifier:
                keyid:4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a323030303a3a2f33352d3335203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:88:d7:06:95:ab:12:bd:ef:72:15:7d:10:36:99:90:28:
         f6:fc:96:9e:4c:64:3c:d6:44:84:57:ab:aa:18:5c:e1:61:4e:
         f9:ae:21:65:48:5f:41:03:a1:5d:69:7e:a7:db:47:1b:87:2e:
         bc:97:ef:7a:2f:db:95:d5:40:0b:69:53:75:49:55:dd:72:ce:
         3a:23:e9:63:33:9a:27:d5:1b:f9:6c:83:0a:6a:30:c0:57:2f:
         2f:b7:6c:50:ab:4c:3f:3a:62:df:17:70:ad:02:be:c4:3b:95:
         05:a4:bb:8e:15:48:c9:96:15:e4:c2:46:be:e4:9e:c3:40:88:
         f9:8b:b1:1f:d2:c4:06:cc:4e:1d:8a:6f:7e:a1:2e:61:ed:05:
         8c:3b:fb:ca:f6:fa:77:7c:08:57:9b:6c:6e:16:8a:81:a9:15:
         2e:98:d7:3f:dc:72:0b:8d:48:43:de:1b:9a:d3:c6:ec:4b:4f:
         c7:9b:bb:a8:ab:29:e7:51:d5:60:fc:da:52:0b:05:be:a1:69:
         16:aa:c7:0f:60:63:cd:b7:fa:f4:2e:b9:5e:cf:66:32:f9:ed:
         97:5a:1a:06:d4:57:38:36:a7:45:6c:87:dc:81:66:21:f2:b7:
         1b:8a:38:88:1f:62:46:f9:e1:ca:40:84:69:9d:7d:99:2a:4d:
         2c:3a:f9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:57 2026 by rpki-client