Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/323830343a363332383a3a2f33322d3332203d3e20323639333432.roa
File:                     323830343a363332383a3a2f33322d3332203d3e20323639333432.roa (raw, json)
Hash identifier:          09qP9Hajm2vW2nMTCw8ZhNfZ+psPRfmt/9Qq5EsLTeg=
Subject key identifier:   C2:C3:2C:4D:2B:30:B3:62:EA:3F:E1:D1:0A:1D:5F:84:32:40:CB:E2
Certificate issuer:       /CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
Certificate serial:       096F86FF8258D840BCBEDDF97F11BCE71CCF0D77
Authority key identifier: DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/323830343a363332383a3a2f33322d3332203d3e20323639333432.roa
Signing time:             Fri 05 Jun 2026 11:03:48 +0000
ROA not before:           Fri 05 Jun 2026 10:58:48 +0000
ROA not after:            Fri 04 Jun 2027 11:03:48 +0000
asID:                     269342
IP address blocks:        2804:6328::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl
                          rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6f:86:ff:82:58:d8:40:bc:be:dd:f9:7f:11:bc:e7:1c:cf:0d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDEDE0E3E533477AAAB19E2CB811C826B145F53E
        Validity
            Not Before: Jun  5 10:58:48 2026 GMT
            Not After : Jun  4 11:03:48 2027 GMT
        Subject: CN=C2C32C4D2B30B362EA3FE1D10A1D5F843240CBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:8a:f7:87:7a:d0:d1:9b:0f:09:70:fb:76:
                    3b:cf:5d:94:d0:13:02:73:da:b4:f9:9e:48:79:15:
                    85:99:45:8c:b7:40:6a:2b:51:2d:52:ef:2f:d3:b7:
                    0f:a2:56:0e:72:7b:49:61:8e:d5:ee:fb:48:c4:7d:
                    41:c4:63:bb:a3:43:83:5e:92:7b:b5:c7:81:85:86:
                    5c:6a:bd:51:a0:55:af:f6:45:1c:e4:53:4f:05:44:
                    88:14:2d:5b:da:95:ba:bf:aa:00:82:d4:99:41:88:
                    e6:8a:31:0d:1b:1f:e6:e7:4e:22:5e:f2:4c:24:07:
                    1f:66:7e:a2:a2:28:38:b0:58:ae:b6:10:fb:ae:5a:
                    32:74:b3:a8:15:60:fa:37:9c:b1:f2:4a:38:8c:e1:
                    30:de:63:03:d4:54:93:f1:21:92:9c:51:0a:86:7f:
                    6d:ca:5c:c0:e6:ee:b1:5c:ea:78:5d:63:e5:bb:93:
                    c5:60:ea:ee:f6:06:b1:98:c5:97:74:31:fd:66:1d:
                    79:e9:95:15:76:18:ea:59:07:15:f5:3a:39:8d:2e:
                    68:0b:6e:51:66:c6:8a:b7:8e:0e:8d:ca:7c:2a:a7:
                    3a:ba:a2:a6:bf:ee:9c:88:86:62:47:d0:13:ac:12:
                    4a:a5:3b:9b:b6:e9:ea:d9:04:2d:a8:b8:82:fd:d1:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C3:2C:4D:2B:30:B3:62:EA:3F:E1:D1:0A:1D:5F:84:32:40:CB:E2
            X509v3 Authority Key Identifier:
                keyid:DD:ED:E0:E3:E5:33:47:7A:AA:B1:9E:2C:B8:11:C8:26:B1:45:F5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDEDE0E3E533477AAAB19E2CB811C826B145F53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/323830343a363332383a3a2f33322d3332203d3e20323639333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6328::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:b2:59:81:ef:ad:7d:ed:b8:7a:1a:6d:b7:25:c0:03:ad:e3:
         4b:d5:70:17:2a:ab:39:29:18:31:3b:5e:06:cc:d3:55:3c:80:
         d9:d5:d4:48:dc:61:b7:19:eb:3d:dd:d7:95:c6:ed:b8:9a:ee:
         0f:35:03:97:93:ee:69:1b:d5:c9:b4:69:82:25:0f:3d:8e:93:
         5e:2d:a6:10:fa:d7:f9:27:05:1f:1e:fa:68:6e:12:6d:20:66:
         da:06:fe:44:21:38:b2:ba:ab:03:6c:43:c4:47:d3:90:16:e8:
         89:7b:94:0f:64:78:a3:37:37:67:82:49:12:45:fb:ac:f8:77:
         95:de:b8:de:34:1c:2c:aa:cc:dd:3c:e3:97:fa:59:03:af:16:
         d1:a4:11:12:c3:79:82:78:62:0c:a0:cb:27:3b:80:4e:2e:06:
         f5:a4:1c:af:a2:e2:a1:c9:38:83:eb:8c:ad:eb:68:6a:32:34:
         b7:1b:9f:ed:97:de:ca:d5:47:ab:ba:99:f1:ca:b2:2d:32:d6:
         11:5f:e7:29:2c:24:15:11:81:b3:78:b8:de:50:70:80:9f:a9:
         c4:82:21:be:72:6e:d7:57:80:58:42:18:29:06:5c:f2:bd:a7:
         ac:4e:91:04:42:86:21:9a:8f:db:53:30:be:47:80:ca:3b:65:
         40:03:e4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:11:49 2026 by rpki-client