Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a643030303a3a2f33362d3336203d3e20323638333937.roa
File:                     323830343a353039343a643030303a3a2f33362d3336203d3e20323638333937.roa (raw, json)
Hash identifier:          RBnA94zLnd5G9cpnBIE5dlvt0iqseZnjGHIzcoxw0TQ=
Subject key identifier:   03:29:2C:FA:9A:31:3B:44:F7:09:A0:3F:6A:19:B2:B2:5E:EA:37:3E
Certificate issuer:       /CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
Certificate serial:       6EF83CBF28EA091A40B5C34C31D0AC1127E8514A
Authority key identifier: 4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a643030303a3a2f33362d3336203d3e20323638333937.roa
Signing time:             Wed 24 Jun 2026 01:42:26 +0000
ROA not before:           Wed 24 Jun 2026 01:37:26 +0000
ROA not after:            Wed 23 Jun 2027 01:42:26 +0000
asID:                     268397
IP address blocks:        2804:5094:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f8:3c:bf:28:ea:09:1a:40:b5:c3:4c:31:d0:ac:11:27:e8:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
        Validity
            Not Before: Jun 24 01:37:26 2026 GMT
            Not After : Jun 23 01:42:26 2027 GMT
        Subject: CN=03292CFA9A313B44F709A03F6A19B2B25EEA373E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:ba:c7:1d:be:0c:92:e0:18:aa:d1:b6:41:
                    18:1e:0b:92:14:21:67:3a:52:42:16:09:35:0c:e1:
                    5d:75:d9:0a:47:3e:e6:03:6e:14:5f:c5:cf:ff:3e:
                    67:42:fe:0c:96:f3:a7:b0:e8:1d:df:ff:b1:fe:af:
                    39:27:45:2d:a5:12:41:09:59:be:89:30:35:76:e4:
                    d5:2f:c5:14:02:34:5d:70:6b:0e:17:54:7f:1f:df:
                    8a:80:26:bf:a3:50:03:7e:c4:55:e4:75:5d:83:f4:
                    46:ff:bc:16:9e:8a:94:dd:dc:30:1b:8a:61:3d:00:
                    24:03:15:20:38:43:7c:9b:68:33:de:d6:86:1d:ab:
                    fd:e3:72:53:8b:9d:aa:7d:20:96:9f:8b:c9:e2:84:
                    14:75:2f:38:a0:94:0e:f1:a8:5e:c3:07:17:a1:35:
                    ec:5b:5d:49:8b:cb:8e:0b:ec:6c:e3:86:bb:96:c6:
                    a2:b3:49:91:34:f7:be:03:08:37:80:91:de:7b:d1:
                    c9:e1:22:dd:bd:2c:b1:66:4e:b5:87:6c:19:79:69:
                    5f:92:a6:26:73:6e:43:42:33:e3:e0:0b:1d:fe:77:
                    7e:d1:d3:1f:e4:34:84:e2:2e:f1:0a:16:14:5f:00:
                    81:2e:0e:29:4d:8a:34:54:a6:6a:9e:38:e5:e0:2a:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:29:2C:FA:9A:31:3B:44:F7:09:A0:3F:6A:19:B2:B2:5E:EA:37:3E
            X509v3 Authority Key Identifier:
                keyid:4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a643030303a3a2f33362d3336203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:f6:8b:13:e6:9d:9f:7c:9e:7d:64:b1:ca:07:2d:c9:16:
         a8:f4:00:bf:c9:89:e1:39:eb:08:60:5e:0f:06:73:e1:70:ea:
         7d:b3:53:8c:6c:17:f5:71:eb:ad:6c:6e:56:e1:fa:55:ad:25:
         f4:6f:39:6c:fa:18:11:29:67:29:ad:e7:d8:89:e7:2c:cd:93:
         e4:d6:76:9e:6d:a4:70:8f:4a:32:a8:2f:cb:46:94:31:3a:57:
         10:15:e7:00:b0:b6:be:70:f5:12:71:ff:ce:3b:18:a9:a1:69:
         f0:92:32:6a:52:41:f4:42:75:ba:1e:fd:b6:a2:20:f8:62:c8:
         f3:de:21:6b:db:42:eb:26:92:11:57:6c:1a:ab:6d:84:03:a2:
         09:0d:1d:f5:f6:02:75:b1:7f:73:56:32:5b:18:3f:17:8f:b6:
         e5:1a:89:ba:04:d1:0c:a4:36:57:94:93:9b:7f:82:0c:69:0a:
         c9:bb:65:16:ea:8a:05:5a:c9:47:14:ee:02:58:d9:90:76:3d:
         11:a9:d9:62:c2:83:2e:ee:df:69:fc:b5:0f:20:fe:84:47:11:
         e3:c9:bf:cc:41:4f:0b:30:ce:ae:40:9e:74:08:76:17:60:ee:
         35:02:94:cd:fa:74:68:93:4a:c2:56:01:ee:e5:1d:5e:7d:43:
         c9:b7:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:55 2026 by rpki-client