Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a663030303a3a2f33362d3336203d3e20323638333937.roa
File:                     323830343a353039343a663030303a3a2f33362d3336203d3e20323638333937.roa (raw, json)
Hash identifier:          U1fjgu1ZOvWcEy2nXEa7hdO8aZpp8zSB0Q2y/Njmgvs=
Subject key identifier:   44:AB:4F:08:AD:82:E3:FC:40:8A:A1:A3:34:0D:58:43:1E:E6:DB:12
Certificate issuer:       /CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
Certificate serial:       167CA79015463191AB1E97C49AE2482B504EF608
Authority key identifier: 4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a663030303a3a2f33362d3336203d3e20323638333937.roa
Signing time:             Wed 24 Jun 2026 01:42:28 +0000
ROA not before:           Wed 24 Jun 2026 01:37:28 +0000
ROA not after:            Wed 23 Jun 2027 01:42:28 +0000
asID:                     268397
IP address blocks:        2804:5094:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7c:a7:90:15:46:31:91:ab:1e:97:c4:9a:e2:48:2b:50:4e:f6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
        Validity
            Not Before: Jun 24 01:37:28 2026 GMT
            Not After : Jun 23 01:42:28 2027 GMT
        Subject: CN=44AB4F08AD82E3FC408AA1A3340D58431EE6DB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:c5:9b:32:56:d0:5f:4c:8e:af:d2:bd:28:
                    10:7d:79:dc:35:40:8d:cd:b5:24:d7:1f:11:bd:7f:
                    bc:77:de:f3:3f:b0:6e:73:f6:d6:48:4b:3a:b8:b5:
                    87:59:c3:ba:8c:fa:78:47:16:be:65:d0:58:92:40:
                    50:ee:06:97:91:18:48:d8:52:b9:ca:9c:2c:12:f7:
                    80:2e:0b:65:cb:1c:3e:40:42:79:5e:b7:d6:1a:8e:
                    d3:57:f7:99:eb:5d:10:52:6f:e5:e4:44:6b:a8:f7:
                    72:d5:9d:2c:cc:f1:32:50:2b:60:76:ba:d4:2e:95:
                    43:98:9a:2a:7b:30:f0:4c:1b:27:c1:46:61:08:49:
                    33:26:91:0d:5e:fb:e0:0a:56:73:4c:b7:7c:30:e9:
                    ef:e0:6a:1e:f9:8c:62:97:0b:35:b7:dc:c4:57:a1:
                    93:c1:9e:b4:27:42:1d:25:81:2a:da:26:3d:f5:53:
                    33:68:b1:29:fc:af:8e:28:ed:06:16:dd:14:a2:b8:
                    55:b5:96:2a:26:ec:b9:f8:fc:73:4a:82:5c:3a:88:
                    3a:39:f7:c2:dc:53:25:ca:d3:16:34:22:e4:cf:ab:
                    80:7d:84:72:2b:57:53:0a:9e:12:22:3e:30:5b:57:
                    9c:0b:f2:3d:ea:ed:fe:28:a6:16:d8:d7:c7:48:7e:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AB:4F:08:AD:82:E3:FC:40:8A:A1:A3:34:0D:58:43:1E:E6:DB:12
            X509v3 Authority Key Identifier:
                keyid:4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a663030303a3a2f33362d3336203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:13:73:da:03:1e:c6:80:b3:81:5e:36:70:cd:02:fc:9d:2e:
         c2:dc:3e:29:4a:03:33:61:a9:f8:6b:ab:b8:ca:4d:03:94:b2:
         d5:ba:88:a7:ba:92:22:df:e0:28:8d:5d:22:44:09:07:b4:cb:
         78:14:a3:e4:3e:c1:f0:1a:1a:cc:2e:f5:9c:82:3e:e2:82:72:
         74:35:20:be:7d:07:28:d2:dd:27:b2:c2:ae:08:ec:de:77:95:
         8f:1b:82:b8:fd:a6:21:bb:e7:21:d1:97:d5:bc:32:42:c6:65:
         b6:34:ce:2d:8d:55:6e:58:3e:79:97:d5:a5:a1:32:dc:d2:ca:
         e2:22:91:0f:91:f5:72:08:63:59:53:ec:7f:1a:db:f7:25:61:
         d2:8c:e2:a0:b9:05:8a:27:23:bb:b5:83:13:06:ca:2a:60:7c:
         fa:96:bf:5a:d7:fc:a6:dc:0d:a1:23:f3:2f:88:01:af:88:3f:
         85:39:95:8d:cf:87:19:2c:31:1b:d0:1c:5f:81:d9:79:65:99:
         82:bb:9c:69:39:e6:97:11:52:ef:e0:e2:7c:39:2c:59:3f:03:
         5b:36:d9:8c:6e:82:ca:d7:4e:7b:a8:a4:82:4c:c9:49:49:d7:
         46:c0:4c:d0:eb:fc:f1:a9:d0:94:66:58:4f:3e:0f:f4:af:cf:
         12:51:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:53 2026 by rpki-client