Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jMMZXyAWGCsWqNyPjUoJ6v66VRZiGPJUodGodiK2Mic/0/323830343a393932343a3a2f33322d3332203d3e20323735373539.roa
File:                     323830343a393932343a3a2f33322d3332203d3e20323735373539.roa (raw, json)
Hash identifier:          bujPC2jpBmG1SXABs+c3l0xXa5cZOsaBGd439aPB/xc=
Subject key identifier:   9A:0D:0C:D9:43:50:B8:E0:3E:71:A5:46:B4:72:F5:C7:A3:F7:33:40
Certificate issuer:       /CN=A3183CB1B5A03C62FD0AEBB0D0BEF6C14CA5D819
Certificate serial:       46556A4E8E5160314E9C73EB257DC3AAC00FD48E
Authority key identifier: A3:18:3C:B1:B5:A0:3C:62:FD:0A:EB:B0:D0:BE:F6:C1:4C:A5:D8:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3183CB1B5A03C62FD0AEBB0D0BEF6C14CA5D819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jMMZXyAWGCsWqNyPjUoJ6v66VRZiGPJUodGodiK2Mic/0/323830343a393932343a3a2f33322d3332203d3e20323735373539.roa
Signing time:             Mon 15 Jun 2026 21:56:00 +0000
ROA not before:           Mon 15 Jun 2026 21:51:00 +0000
ROA not after:            Mon 14 Jun 2027 21:56:00 +0000
asID:                     275759
IP address blocks:        2804:9924::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jMMZXyAWGCsWqNyPjUoJ6v66VRZiGPJUodGodiK2Mic/0/A3183CB1B5A03C62FD0AEBB0D0BEF6C14CA5D819.crl
                          rsync://rpki-repo.registro.br/repo/jMMZXyAWGCsWqNyPjUoJ6v66VRZiGPJUodGodiK2Mic/0/A3183CB1B5A03C62FD0AEBB0D0BEF6C14CA5D819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3183CB1B5A03C62FD0AEBB0D0BEF6C14CA5D819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 11:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:55:6a:4e:8e:51:60:31:4e:9c:73:eb:25:7d:c3:aa:c0:0f:d4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3183CB1B5A03C62FD0AEBB0D0BEF6C14CA5D819
        Validity
            Not Before: Jun 15 21:51:00 2026 GMT
            Not After : Jun 14 21:56:00 2027 GMT
        Subject: CN=9A0D0CD94350B8E03E71A546B472F5C7A3F73340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:ff:61:9c:90:01:60:99:b3:78:f2:03:1d:
                    ab:c1:9e:89:b3:53:59:f3:d2:84:48:d5:3b:a2:11:
                    ff:dc:84:e7:a2:d5:3e:98:5e:1e:bb:3d:0d:ea:2a:
                    78:62:9a:f0:a8:57:b5:61:ae:96:a4:1f:ba:e6:09:
                    d7:a2:8f:8f:dd:2e:ff:31:56:0d:12:5d:35:87:d3:
                    a2:e4:67:b9:5d:ef:6c:dc:db:63:4f:79:2e:13:b7:
                    1a:80:c7:2f:50:b2:ab:98:c4:92:db:ba:cd:98:19:
                    f8:f2:47:86:e5:7a:c8:84:3f:21:c4:a4:9a:20:3e:
                    e2:62:48:b3:a6:25:88:eb:88:9e:89:e7:2a:8e:7d:
                    84:65:e9:3d:53:42:59:51:61:8f:0b:15:6e:52:3d:
                    f2:65:f7:96:8f:88:0e:a8:c7:b5:8c:5a:d8:da:ec:
                    30:7b:74:15:64:47:24:10:70:70:04:79:c3:6b:96:
                    72:f0:fb:ed:52:7f:45:80:18:f7:72:8a:49:6f:00:
                    c6:77:44:67:06:c0:b3:c9:68:02:a0:bf:b2:1e:0f:
                    58:84:e0:ea:5e:d4:27:0a:90:10:47:4a:fd:ee:a3:
                    f6:b9:66:88:e8:af:de:4b:0e:3a:46:75:d9:58:bf:
                    03:ad:b2:42:f6:f2:32:f6:c3:b6:b0:04:3e:69:f2:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0D:0C:D9:43:50:B8:E0:3E:71:A5:46:B4:72:F5:C7:A3:F7:33:40
            X509v3 Authority Key Identifier:
                keyid:A3:18:3C:B1:B5:A0:3C:62:FD:0A:EB:B0:D0:BE:F6:C1:4C:A5:D8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jMMZXyAWGCsWqNyPjUoJ6v66VRZiGPJUodGodiK2Mic/0/A3183CB1B5A03C62FD0AEBB0D0BEF6C14CA5D819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3183CB1B5A03C62FD0AEBB0D0BEF6C14CA5D819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jMMZXyAWGCsWqNyPjUoJ6v66VRZiGPJUodGodiK2Mic/0/323830343a393932343a3a2f33322d3332203d3e20323735373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9924::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:a7:04:ca:02:2a:34:2e:0d:7e:14:f1:56:d3:08:32:13:48:
         10:3c:65:63:90:31:01:26:d2:23:0a:cf:8f:73:42:45:ae:27:
         f6:be:c9:60:27:d1:a9:61:b7:44:6d:41:bb:77:63:97:b8:47:
         bd:73:fa:ad:26:1a:92:79:cf:b4:06:c8:51:dc:f3:05:78:46:
         8d:71:4b:1e:dd:34:5a:16:81:d3:58:6f:7e:50:f0:05:29:95:
         c2:b5:6f:8a:99:25:5b:61:49:91:93:a3:1c:5b:04:6d:3b:ec:
         f3:69:da:bc:de:db:51:ca:0f:29:75:b6:db:d1:26:bb:0a:5f:
         ec:1a:83:a2:f4:ae:fc:30:7e:29:ef:63:e9:58:57:c2:02:38:
         37:0a:95:53:91:cc:0c:fd:7f:fb:fb:73:5d:2c:28:05:2a:e6:
         db:d3:78:f8:db:bc:1b:50:30:3f:d9:5c:a0:4f:6f:5f:11:61:
         0c:7e:45:35:6b:c5:f9:ae:e5:dc:35:d8:a4:24:22:34:62:6c:
         0c:bd:37:6d:5b:c3:81:08:d4:dd:70:07:51:aa:91:e5:14:20:
         20:74:f9:19:6a:d6:06:6a:2e:dd:5a:64:47:8c:13:7d:b8:a6:
         42:fc:80:bd:cd:70:13:46:b8:6a:33:14:df:00:ea:b2:77:ff:
         4a:18:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:25 2026 by rpki-client