Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/323830343a343933633a3a2f33322d3332203d3e20323637313732.roa
File:                     323830343a343933633a3a2f33322d3332203d3e20323637313732.roa (raw, json)
Hash identifier:          zJJgYjeHNnr0/KD1BRhgPfeQfj+nnZ8dh//wgPLRlrw=
Subject key identifier:   70:7E:75:8D:7F:D9:6A:F9:28:53:8E:4F:EF:78:B2:50:CE:36:EB:6B
Certificate issuer:       /CN=AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD
Certificate serial:       636509219FE62253E717F4F47045E683A4E38842
Authority key identifier: AE:BB:CB:B7:EF:CC:7F:ED:03:3C:BF:3F:33:3F:E9:C8:0B:28:FF:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/323830343a343933633a3a2f33322d3332203d3e20323637313732.roa
Signing time:             Mon 25 May 2026 16:26:04 +0000
ROA not before:           Mon 25 May 2026 16:21:04 +0000
ROA not after:            Mon 24 May 2027 16:26:04 +0000
asID:                     267172
IP address blocks:        2804:493c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.crl
                          rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:65:09:21:9f:e6:22:53:e7:17:f4:f4:70:45:e6:83:a4:e3:88:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD
        Validity
            Not Before: May 25 16:21:04 2026 GMT
            Not After : May 24 16:26:04 2027 GMT
        Subject: CN=707E758D7FD96AF928538E4FEF78B250CE36EB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:7b:30:63:3e:1e:64:25:92:16:93:20:16:
                    8f:8e:b4:4c:0f:6c:00:6d:e3:b5:c0:dc:48:8b:65:
                    d4:d7:68:40:27:f3:f2:3c:2a:a7:57:bb:e7:e5:c9:
                    08:02:44:4d:82:2f:82:71:3b:81:39:a5:0d:4b:79:
                    eb:1f:30:e1:0a:cf:fb:c8:e0:b0:26:09:b9:36:41:
                    1d:fa:c3:d0:25:4d:9b:76:90:30:a3:ff:ae:e2:b9:
                    e3:6a:0a:73:76:1d:6c:15:cc:67:66:1b:f5:66:29:
                    ec:9c:bb:81:47:9a:94:66:82:17:85:8c:45:dc:dc:
                    8f:d1:2c:a4:65:d0:88:ef:22:b7:5c:a1:67:5c:39:
                    c4:8a:fb:cd:bd:9b:fb:83:1b:5f:07:44:99:45:98:
                    c3:e3:70:b5:2b:7d:50:b4:0c:78:c6:8f:a7:85:ad:
                    85:80:28:e2:1c:6a:c8:ae:b3:c4:59:bc:5a:6c:40:
                    e5:72:bd:43:6a:9d:9c:32:96:ee:17:cf:2e:6c:95:
                    e1:ee:f1:39:fa:cd:ee:92:20:b5:42:aa:3e:61:1b:
                    32:25:ad:74:45:85:93:ea:2e:3f:de:13:07:f5:5e:
                    1d:ea:7b:ad:6d:28:e5:20:cc:90:70:6a:fa:8a:62:
                    31:a5:36:3e:2e:ce:45:51:36:56:51:d6:fa:22:22:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:75:8D:7F:D9:6A:F9:28:53:8E:4F:EF:78:B2:50:CE:36:EB:6B
            X509v3 Authority Key Identifier:
                keyid:AE:BB:CB:B7:EF:CC:7F:ED:03:3C:BF:3F:33:3F:E9:C8:0B:28:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEBBCBB7EFCC7FED033CBF3F333FE9C80B28FFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5k682DNcUvUojGoMbzejBjUcKg4EJ4aA1yaXXvDADbcB/0/323830343a343933633a3a2f33322d3332203d3e20323637313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:493c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:8e:85:85:0f:73:9e:e2:fc:bb:ad:fa:00:a8:c2:9a:8d:
         95:05:81:af:38:61:d9:64:c9:88:64:a2:56:51:e8:6f:c9:fe:
         ba:ae:4a:f3:7e:84:c0:78:30:eb:1f:92:53:cb:f3:7c:a4:21:
         f3:b9:66:67:0d:cf:a7:41:b1:75:74:fb:49:f7:1d:86:46:46:
         37:be:03:1b:45:a9:4e:2a:85:d3:c2:5b:84:f4:58:1b:bf:99:
         50:f0:27:14:03:24:ec:69:fc:d5:84:ad:a2:b5:58:d6:b0:a1:
         55:49:30:43:9a:70:94:cf:6e:8c:6b:34:a9:16:72:75:81:6a:
         0b:e0:2f:cc:b6:f0:9c:6a:3b:77:86:86:00:2f:9a:c7:be:90:
         50:3a:05:52:f8:3c:16:36:0d:32:6b:56:7f:7a:c5:83:56:91:
         29:76:45:de:69:40:eb:48:04:ed:61:df:f1:c6:b4:21:6b:ca:
         22:7f:04:d1:07:59:35:68:ef:78:29:a5:e4:8f:e6:ac:23:0c:
         38:5d:a9:f6:d1:e5:99:91:29:ca:52:08:19:42:89:94:e3:f1:
         fc:65:11:1e:e9:b4:53:3e:c4:6a:be:8d:39:2e:0d:2d:48:f6:
         12:e1:fe:08:98:59:f2:ca:ee:64:68:59:dc:4e:9b:16:71:d8:
         74:7d:44:c0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUY2UJIZ/mIlPnF/T0cEXmg6TjiEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCQkNCQjdFRkNDN0ZFRDAzM0NCRjNGMzMzRkU5Qzgw
QjI4RkZERDAeFw0yNjA1MjUxNjIxMDRaFw0yNzA1MjQxNjI2MDRaMDMxMTAvBgNV
BAMTKDcwN0U3NThEN0ZEOTZBRjkyODUzOEU0RkVGNzhCMjUwQ0UzNkVCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdL3swYz4eZCWSFpMgFo+OtEwP
bABt47XA3EiLZdTXaEAn8/I8KqdXu+flyQgCRE2CL4JxO4E5pQ1LeesfMOEKz/vI
4LAmCbk2QR36w9AlTZt2kDCj/67iueNqCnN2HWwVzGdmG/VmKeycu4FHmpRmgheF
jEXc3I/RLKRl0IjvIrdcoWdcOcSK+829m/uDG18HRJlFmMPjcLUrfVC0DHjGj6eF
rYWAKOIcasius8RZvFpsQOVyvUNqnZwylu4Xzy5sleHu8Tn6ze6SILVCqj5hGzIl
rXRFhZPqLj/eEwf1Xh3qe61tKOUgzJBwavqKYjGlNj4uzkVRNlZR1voiIo/fAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcH51jX/ZavkoU45P73iyUM4262swHwYDVR0j
BBgwFoAUrrvLt+/Mf+0DPL8/Mz/pyAso/90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWs2ODJETmNVdlVvakdvTWJ6ZWpCalVjS2c0RUo0YUExeWFYWHZEQURi
Y0IvMC9BRUJCQ0JCN0VGQ0M3RkVEMDMzQ0JGM0YzMzNGRTlDODBCMjhGRkRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFQkJDQkI3RUZDQzdGRUQw
MzNDQkYzRjMzM0ZFOUM4MEIyOEZGREQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVrNjgyRE5jVXZVb2pHb01iemVqQmpVY0tnNEVKNGFBMXlhWFh2REFEYmNCLzAv
MzIzODMwMzQzYTM0MzkzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzEzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARJPDANBgkqhkiG9w0BAQsFAAOCAQEAbuyOhYUP
c57i/Lut+gCowpqNlQWBrzhh2WTJiGSiVlHob8n+uq5K836EwHgw6x+SU8vzfKQh
87lmZw3Pp0GxdXT7SfcdhkZGN74DG0WpTiqF08JbhPRYG7+ZUPAnFAMk7Gn81YSt
orVY1rChVUkwQ5pwlM9ujGs0qRZydYFqC+AvzLbwnGo7d4aGAC+ax76QUDoFUvg8
FjYNMmtWf3rFg1aRKXZF3mlA60gE7WHf8ca0IWvKIn8E0QdZNWjveCml5I/mrCMM
OF2p9tHlmZEpylIIGUKJlOPx/GURHum0Uz7Ear6NOS4NLUj2EuH+CJhZ8sruZGhZ
3E6bFnHYdH1EwA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:38:36 2026 by rpki-client