Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/323830343a363332383a383030303a3a2f33332d3333203d3e20323639333432.roa
File:                     323830343a363332383a383030303a3a2f33332d3333203d3e20323639333432.roa (raw, json)
Hash identifier:          YomC+qgXBimexfQHNEzirnsHsW7PUDCYrCpeu4N8p+M=
Subject key identifier:   38:CB:7A:DE:52:8E:86:FE:16:10:2E:82:E3:E9:7E:C5:E2:0A:87:67
Certificate issuer:       /CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
Certificate serial:       5D32B5C08F7A55CD245BDEB5085E84ECE0A8A6E4
Authority key identifier: DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/323830343a363332383a383030303a3a2f33332d3333203d3e20323639333432.roa
Signing time:             Fri 05 Jun 2026 11:03:48 +0000
ROA not before:           Fri 05 Jun 2026 10:58:48 +0000
ROA not after:            Fri 04 Jun 2027 11:03:48 +0000
asID:                     269342
IP address blocks:        2804:6328:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl
                          rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:32:b5:c0:8f:7a:55:cd:24:5b:de:b5:08:5e:84:ec:e0:a8:a6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
        Validity
            Not Before: Jun  5 10:58:48 2026 GMT
            Not After : Jun  4 11:03:48 2027 GMT
        Subject: CN=38CB7ADE528E86FE16102E82E3E97EC5E20A8767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3f:3e:d4:29:68:e4:e2:6a:ea:bb:a7:9b:d8:
                    20:d5:c1:cc:ea:d3:80:90:d2:73:02:dd:70:a8:3c:
                    a3:2f:50:8a:33:2b:4e:bf:17:76:48:ad:c6:3e:af:
                    f5:66:a8:c4:24:e8:ac:ac:5f:4f:e7:66:b0:24:6a:
                    f6:a1:6e:6e:5d:5b:bc:c7:23:41:a7:37:a6:0f:03:
                    84:1f:48:1f:ef:20:1c:28:85:8c:2b:44:90:32:d7:
                    a8:c4:94:cd:0b:8f:f5:0c:42:7b:73:9b:ee:b7:a5:
                    f2:8f:6c:2c:b6:67:54:50:a4:9d:4d:48:6d:b5:ff:
                    50:4c:9f:2f:3f:48:3c:d5:c9:5e:4a:09:16:65:da:
                    d3:17:31:b5:2a:dd:a7:c5:ab:a6:7d:4c:24:92:cf:
                    30:0f:e8:1f:41:fd:9f:5c:e5:19:2e:f3:01:b7:80:
                    25:62:32:14:f6:62:87:a2:0b:e1:7e:5f:d9:c1:ef:
                    f7:a9:2d:e2:74:b2:85:ba:c6:4c:9d:af:12:a1:1c:
                    5d:e6:df:9e:cd:58:3e:18:8a:8d:0c:90:0d:2c:22:
                    e3:20:bf:22:b0:dc:5d:5a:8a:27:85:f9:1b:82:83:
                    35:5b:82:01:47:74:50:3a:82:73:0e:2c:f9:43:91:
                    b3:1e:1c:be:0d:77:7a:90:cc:24:a5:c0:81:07:78:
                    22:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:7A:DE:52:8E:86:FE:16:10:2E:82:E3:E9:7E:C5:E2:0A:87:67
            X509v3 Authority Key Identifier:
                keyid:DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/323830343a363332383a383030303a3a2f33332d3333203d3e20323639333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6328:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:f2:7b:01:ab:83:9c:6d:5b:18:e0:0c:a8:d9:a1:8e:e8:2d:
         19:d4:6e:17:89:c3:4d:89:ad:93:fe:e3:4a:31:0a:d5:fe:70:
         42:5e:75:2c:2f:19:08:90:5a:a6:06:a2:a5:86:3d:e8:68:68:
         f1:cb:9e:1e:74:13:97:fa:b2:8e:4a:81:61:4e:23:42:b1:ce:
         8a:d6:9b:45:c5:c5:6a:1a:0a:7a:c6:ff:f7:2a:55:1c:69:2a:
         a1:e5:09:e0:48:68:8e:b4:c2:f1:d4:ed:0a:9d:e0:ab:84:1b:
         37:10:2b:b4:94:07:1f:7d:92:14:15:b8:11:c5:9c:03:8b:a7:
         8b:0a:83:35:e3:3c:30:e1:18:d5:3f:31:67:37:69:c5:f7:27:
         aa:8f:7a:3e:dd:1d:71:99:cc:06:ca:52:02:67:d2:58:22:69:
         79:e5:b5:f4:d3:34:cd:de:78:a9:70:a5:2e:4e:4e:44:e3:8c:
         73:32:2e:f6:57:c2:57:ed:31:a2:11:f3:3b:18:1f:10:43:a4:
         3d:b9:36:9b:aa:74:29:df:e2:84:4b:10:86:a2:14:b9:7b:72:
         95:6f:50:87:65:e5:58:67:8a:3e:08:87:21:a2:a5:15:ae:ad:
         19:41:ae:4a:17:89:11:82:90:f3:e2:e0:f9:7b:82:a5:a0:41:
         61:ea:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:11:47 2026 by rpki-client