Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a383030303a3a2f33332d3333203d3e20323636393137.roa
File:                     323830343a343534633a383030303a3a2f33332d3333203d3e20323636393137.roa (raw, json)
Hash identifier:          MPoiATH7hdWJE8E2dqNwcVYOZoKOqGLAoeFkG1665Eg=
Subject key identifier:   54:6A:38:CE:A7:18:57:87:1F:28:04:00:1A:2C:E2:42:9E:56:AB:82
Certificate issuer:       /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
Certificate serial:       73299C90218C114734FF8659E52C6A70A2DC0ECA
Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a383030303a3a2f33332d3333203d3e20323636393137.roa
Signing time:             Tue 09 Jun 2026 16:12:09 +0000
ROA not before:           Tue 09 Jun 2026 16:07:09 +0000
ROA not after:            Tue 08 Jun 2027 16:12:09 +0000
asID:                     266917
IP address blocks:        2804:454c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:29:9c:90:21:8c:11:47:34:ff:86:59:e5:2c:6a:70:a2:dc:0e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
        Validity
            Not Before: Jun  9 16:07:09 2026 GMT
            Not After : Jun  8 16:12:09 2027 GMT
        Subject: CN=546A38CEA71857871F2804001A2CE2429E56AB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:8d:41:c6:61:12:da:8b:04:1a:d9:5b:9e:
                    33:46:27:d0:cd:f7:45:5e:9f:f0:af:e8:e9:5f:38:
                    1e:c6:85:3b:c5:ed:99:45:72:23:ca:e0:f6:67:65:
                    55:58:ea:67:86:cc:00:c3:61:09:b9:0b:53:90:69:
                    cc:93:b1:fd:59:12:2e:62:c8:d4:2e:d9:f9:48:b4:
                    14:26:f2:66:b9:14:5e:5a:ca:bf:a2:62:e0:34:15:
                    89:c3:13:1b:0a:d2:9c:7f:40:7d:ac:d2:b9:69:8e:
                    d8:d2:f8:89:25:2f:85:59:58:7d:02:47:03:c0:03:
                    97:20:97:0f:18:c7:be:39:29:47:b1:35:d1:b6:24:
                    19:f1:17:fb:2c:5e:4e:3b:e4:32:e2:50:02:ec:37:
                    2e:8f:de:0b:c7:21:d3:3d:c5:28:11:91:39:b5:97:
                    f0:06:c8:89:0c:fa:8a:fc:04:55:ac:ec:84:6e:06:
                    e3:c0:c7:78:f2:d7:68:d1:2d:6e:86:ab:09:1e:1f:
                    a1:b3:76:1c:46:33:32:43:db:68:31:b7:e3:63:10:
                    64:43:b7:eb:5a:63:c5:b7:10:fc:5b:a2:6e:29:bc:
                    f2:03:85:4f:6b:ce:93:90:5a:9e:1e:20:22:ed:f4:
                    23:b3:bb:a9:fe:b9:a5:5e:f0:37:88:4b:b9:0b:63:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6A:38:CE:A7:18:57:87:1F:28:04:00:1A:2C:E2:42:9E:56:AB:82
            X509v3 Authority Key Identifier:
                keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a383030303a3a2f33332d3333203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:454c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:c5:ff:50:f9:8f:9a:09:7b:6b:3c:8c:dd:5f:80:9d:c4:28:
         41:89:87:f7:79:4d:0e:62:7f:24:fd:72:7f:ef:74:3e:27:fd:
         c4:c9:d1:0a:d6:8f:45:8d:5a:b7:93:b3:d3:46:65:aa:b2:32:
         b9:14:a7:2c:3f:c7:1d:64:fb:c0:49:aa:ba:38:df:ce:b7:31:
         8e:05:37:78:1f:fb:3a:a0:53:86:34:e1:05:70:40:f2:dc:b9:
         e6:60:9b:80:c9:8d:2f:5c:b6:85:7b:cc:84:cc:6d:bc:c9:36:
         68:b1:f7:5b:db:12:ac:63:23:06:7b:51:e3:59:74:1c:d0:3a:
         d3:57:0e:68:a8:46:3c:eb:16:aa:62:e5:21:ff:96:6f:4f:69:
         00:2d:51:ee:e0:e3:ab:b4:43:eb:ab:81:cd:d5:c2:65:fa:1f:
         38:fc:bb:fc:fa:05:a5:a2:7e:c2:9c:12:3d:fc:ea:bd:8f:36:
         8c:1c:78:ef:cc:2a:ac:29:0b:a9:18:65:29:33:4e:9e:d9:37:
         42:2a:07:cd:18:18:27:67:b9:c9:40:17:6f:72:55:bc:54:4b:
         81:79:92:72:d4:3f:5a:61:c0:86:23:67:73:9d:d9:64:34:a9:
         82:a1:d4:bd:87:2f:e4:5d:db:54:88:80:68:1f:1b:91:4b:34:
         02:88:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:53:15 2026 by rpki-client