Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/323830343a353661383a3a2f33322d313238203d3e20323638303136.roa
File:                     323830343a353661383a3a2f33322d313238203d3e20323638303136.roa (raw, json)
Hash identifier:          Ws9aeKMMuABNC50+arbnqHJFetxR7tqG85+6hZwndM4=
Subject key identifier:   97:44:8F:B8:A4:32:CF:CF:4F:73:C9:C4:83:DD:AA:A3:81:87:0C:48
Certificate issuer:       /CN=F4095F95FAF6F079544365F6A4CAFBED9052C8ED
Certificate serial:       588D5ABB3F479FA40FAE95BA3FE3B5F2DC086BE3
Authority key identifier: F4:09:5F:95:FA:F6:F0:79:54:43:65:F6:A4:CA:FB:ED:90:52:C8:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/323830343a353661383a3a2f33322d313238203d3e20323638303136.roa
Signing time:             Wed 10 Jun 2026 17:28:38 +0000
ROA not before:           Wed 10 Jun 2026 17:23:38 +0000
ROA not after:            Wed 09 Jun 2027 17:28:38 +0000
asID:                     268016
IP address blocks:        2804:56a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.crl
                          rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8d:5a:bb:3f:47:9f:a4:0f:ae:95:ba:3f:e3:b5:f2:dc:08:6b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4095F95FAF6F079544365F6A4CAFBED9052C8ED
        Validity
            Not Before: Jun 10 17:23:38 2026 GMT
            Not After : Jun  9 17:28:38 2027 GMT
        Subject: CN=97448FB8A432CFCF4F73C9C483DDAAA381870C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:44:bc:60:2e:90:4c:4d:56:af:96:ff:1c:
                    39:a6:c2:06:e3:8f:4c:5b:cc:84:a0:5c:78:6c:45:
                    02:d1:0c:11:22:d4:63:2a:95:a4:f2:15:ef:4b:ce:
                    32:9b:dd:10:46:e8:37:b4:0b:8f:60:2e:33:31:40:
                    00:41:38:e0:bc:38:fd:01:e5:c7:9b:98:24:d8:98:
                    e6:e3:c0:ec:e6:c7:5e:87:70:49:ea:71:e2:d6:c6:
                    21:3a:19:d4:e4:bc:41:87:af:b3:ac:6c:48:eb:25:
                    aa:3a:3a:c8:c1:c3:cd:8f:ec:36:11:5b:62:ed:a0:
                    b7:2e:8c:5a:84:a1:11:f3:af:d9:82:55:4a:87:d3:
                    ee:4f:8d:a6:d0:86:3e:d0:87:42:c8:35:fc:df:bb:
                    f4:6e:b4:f6:e2:cf:4a:e4:6c:fe:20:30:ca:01:a8:
                    e9:26:c3:83:41:e3:e6:2e:81:3f:30:10:de:13:34:
                    98:bc:96:99:47:92:36:93:1e:40:7d:5e:a2:98:1b:
                    bc:98:ff:63:9f:df:dd:3e:14:d3:f5:51:18:24:f7:
                    94:7d:29:34:32:cb:2e:a6:c6:75:00:06:50:ca:98:
                    36:57:ce:4e:1e:ac:7c:f3:ce:d2:ee:76:40:36:21:
                    e7:88:43:31:82:45:eb:7f:b6:76:0b:42:df:d1:c0:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:44:8F:B8:A4:32:CF:CF:4F:73:C9:C4:83:DD:AA:A3:81:87:0C:48
            X509v3 Authority Key Identifier:
                keyid:F4:09:5F:95:FA:F6:F0:79:54:43:65:F6:A4:CA:FB:ED:90:52:C8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4095F95FAF6F079544365F6A4CAFBED9052C8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/323830343a353661383a3a2f33322d313238203d3e20323638303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:a5:2f:63:d6:f4:06:b6:76:08:83:0d:f1:b0:6c:ea:41:2c:
         5a:07:2e:3f:7d:38:ae:5e:6d:d0:e8:5f:e1:f4:36:f6:bd:27:
         58:72:f8:e9:f2:4b:4c:31:4e:3f:2c:8c:3c:a1:8c:b4:d9:ac:
         9f:3a:97:47:f0:a3:fe:c6:41:cb:11:33:68:d1:fd:52:d4:f5:
         e4:84:c9:fb:2e:83:4c:d1:af:7e:b3:b5:8f:0b:fb:65:45:e9:
         a0:9b:91:bf:04:7b:b5:1c:42:69:8c:3d:08:ce:ce:bc:08:61:
         c3:ec:b0:da:ed:ff:a4:60:09:98:e4:e3:2b:8e:75:03:9b:bc:
         f3:32:73:ad:35:1d:9b:07:75:9c:7e:79:99:7c:ff:33:fe:86:
         59:a7:27:46:2b:1e:8e:4f:e5:99:97:ef:a0:fe:57:41:ca:09:
         44:4d:76:e3:14:e6:4b:13:4e:8c:fc:87:51:4a:76:0f:50:d7:
         41:89:ec:c9:16:6b:b4:1d:3a:8c:f7:fc:d6:cd:c8:2d:5d:ac:
         0b:94:ce:ca:25:e6:4b:ff:24:0a:4a:bc:47:49:eb:7c:d0:98:
         37:3b:62:67:51:ab:17:7a:88:d1:2e:40:ee:86:89:7d:cd:bd:
         6a:6e:47:04:b3:8c:62:27:1b:5a:92:77:cb:46:91:37:f8:23:
         fe:b3:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:48:29 2026 by rpki-client