Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/323830343a333336383a383030303a3a2f33332d3333203d3e20323635333934.roa
File:                     323830343a333336383a383030303a3a2f33332d3333203d3e20323635333934.roa (raw, json)
Hash identifier:          hSRi1keq2RzWwxDWwrG4bv5cuT0dEIZlXjmiOiwFy3E=
Subject key identifier:   3A:06:72:9C:98:F5:E8:9D:4C:A1:26:8B:C7:0F:3C:7B:3F:FC:4B:4C
Certificate issuer:       /CN=58BD557EA74905C1768E8C6151C4F2743E1E68E6
Certificate serial:       4BCE826CADF5BF9EA56B56521B07893575395D4C
Authority key identifier: 58:BD:55:7E:A7:49:05:C1:76:8E:8C:61:51:C4:F2:74:3E:1E:68:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BD557EA74905C1768E8C6151C4F2743E1E68E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/323830343a333336383a383030303a3a2f33332d3333203d3e20323635333934.roa
Signing time:             Fri 05 Jun 2026 14:55:54 +0000
ROA not before:           Fri 05 Jun 2026 14:50:54 +0000
ROA not after:            Fri 04 Jun 2027 14:55:54 +0000
asID:                     265394
IP address blocks:        2804:3368:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/58BD557EA74905C1768E8C6151C4F2743E1E68E6.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/58BD557EA74905C1768E8C6151C4F2743E1E68E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BD557EA74905C1768E8C6151C4F2743E1E68E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ce:82:6c:ad:f5:bf:9e:a5:6b:56:52:1b:07:89:35:75:39:5d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BD557EA74905C1768E8C6151C4F2743E1E68E6
        Validity
            Not Before: Jun  5 14:50:54 2026 GMT
            Not After : Jun  4 14:55:54 2027 GMT
        Subject: CN=3A06729C98F5E89D4CA1268BC70F3C7B3FFC4B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:22:d9:44:28:d2:89:0d:e0:99:68:a4:54:
                    47:21:41:a7:0a:9c:16:ee:f8:28:1e:b1:8d:33:df:
                    57:5d:50:ae:41:7b:c3:ac:e7:8b:b1:10:06:9d:92:
                    2e:52:be:10:a8:46:29:96:e7:d4:83:f8:fc:2b:47:
                    a9:02:53:25:60:36:5c:ca:8f:a9:77:50:ca:7c:ea:
                    ad:6b:ac:3c:20:9e:25:07:0d:51:a5:4f:f5:fa:90:
                    19:20:08:8d:a4:7f:a2:85:a7:6d:9d:99:03:1e:76:
                    0d:ae:4e:08:c5:45:a8:b7:51:57:b0:ca:62:1c:b0:
                    c9:a2:7c:bb:af:6f:53:9c:f8:de:6c:45:bd:62:92:
                    43:ed:7d:8c:56:c9:09:c5:e9:65:5e:94:d6:9e:05:
                    78:49:7b:79:93:70:09:5d:4b:61:c2:35:ee:5e:42:
                    f8:52:30:00:80:11:e6:b6:4c:ac:24:fd:63:d0:46:
                    6e:5d:26:b2:cb:5b:fc:3d:83:53:68:84:0f:3a:bd:
                    fa:75:b4:08:98:f5:01:a7:9f:5d:85:ae:0f:16:2d:
                    46:cb:b6:d2:04:63:f5:a5:13:0e:f0:21:97:5a:7e:
                    71:56:61:12:aa:5c:fa:4f:eb:72:b6:bb:5b:3f:18:
                    fe:4e:2f:46:85:d4:de:94:eb:8c:13:f1:0f:be:f3:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:06:72:9C:98:F5:E8:9D:4C:A1:26:8B:C7:0F:3C:7B:3F:FC:4B:4C
            X509v3 Authority Key Identifier:
                keyid:58:BD:55:7E:A7:49:05:C1:76:8E:8C:61:51:C4:F2:74:3E:1E:68:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/58BD557EA74905C1768E8C6151C4F2743E1E68E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BD557EA74905C1768E8C6151C4F2743E1E68E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/323830343a333336383a383030303a3a2f33332d3333203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3368:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:97:21:60:c2:f6:4b:6b:5d:5c:6e:85:b8:84:d9:7c:a7:d4:
         72:40:b9:b0:2e:ac:a3:8f:d6:fd:f1:50:48:2b:01:11:55:81:
         32:c3:9a:9c:3f:39:a7:50:3c:c2:05:d5:5c:b4:80:ff:e7:cf:
         2b:b7:b5:10:a5:17:1e:b2:09:e2:8d:a5:4c:68:ce:ab:70:9d:
         18:80:32:e0:33:9e:b5:93:c1:9e:3d:96:20:71:8d:21:ee:2f:
         74:f1:f4:38:15:52:39:c2:e8:89:21:ad:c4:75:d4:43:e8:ae:
         f7:2b:ae:18:e1:e6:f9:c4:18:29:2a:6d:4f:86:b1:12:26:fb:
         e9:8b:44:17:9f:5b:6c:d2:48:3d:97:ee:c7:19:68:c5:5b:26:
         d3:39:48:33:2b:ec:f9:e6:09:af:23:17:77:44:7f:27:64:92:
         d2:d4:21:81:cc:6c:be:c0:8c:82:91:2d:b5:9f:96:a3:a2:64:
         fb:73:bf:4f:dc:21:99:0e:e9:a5:32:7f:25:12:b4:e0:f3:4e:
         4d:89:b5:c1:57:92:b1:47:48:41:7e:a3:e8:a2:a8:6a:bf:9e:
         85:83:c2:c3:b0:04:8b:c2:7b:9d:a9:b5:d0:7d:74:76:5a:5a:
         c2:ff:3b:ca:01:5d:c6:0d:b7:b5:a7:6c:6f:88:b8:8c:b0:f4:
         20:3f:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:16:41 2026 by rpki-client