Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/323830343a353639383a3a2f33322d313238203d3e20323638303131.roa
File:                     323830343a353639383a3a2f33322d313238203d3e20323638303131.roa (raw, json)
Hash identifier:          pezc9fg0vYQEZ2H630m4F9F6z9Kq6CuSVfyUPyPjWgw=
Subject key identifier:   49:5C:5A:1D:E9:4D:32:5E:C1:8E:09:91:BF:B6:01:8E:6C:B9:B9:83
Certificate issuer:       /CN=2081D89A925F20F493474A05E4D58F5CF2AD805B
Certificate serial:       5E291F4374D4E35BE7F3DAFD76BC0110416AC5E6
Authority key identifier: 20:81:D8:9A:92:5F:20:F4:93:47:4A:05:E4:D5:8F:5C:F2:AD:80:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2081D89A925F20F493474A05E4D58F5CF2AD805B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/323830343a353639383a3a2f33322d313238203d3e20323638303131.roa
Signing time:             Mon 08 Jun 2026 12:47:04 +0000
ROA not before:           Mon 08 Jun 2026 12:42:04 +0000
ROA not after:            Mon 07 Jun 2027 12:47:04 +0000
asID:                     268011
IP address blocks:        2804:5698::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/2081D89A925F20F493474A05E4D58F5CF2AD805B.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/2081D89A925F20F493474A05E4D58F5CF2AD805B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2081D89A925F20F493474A05E4D58F5CF2AD805B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:29:1f:43:74:d4:e3:5b:e7:f3:da:fd:76:bc:01:10:41:6a:c5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2081D89A925F20F493474A05E4D58F5CF2AD805B
        Validity
            Not Before: Jun  8 12:42:04 2026 GMT
            Not After : Jun  7 12:47:04 2027 GMT
        Subject: CN=495C5A1DE94D325EC18E0991BFB6018E6CB9B983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:07:97:5f:42:d4:75:a3:ab:29:12:7c:a5:
                    7b:ad:12:d7:1a:64:8b:a6:9a:15:8f:95:1a:b0:8a:
                    a0:dd:82:8b:d0:76:11:2c:20:47:e0:9d:7f:f0:05:
                    a6:53:ad:79:d0:ad:80:c5:5b:0f:da:a9:8c:a9:3c:
                    ec:66:3c:21:83:0a:17:17:93:13:bf:05:63:c6:e3:
                    56:b6:49:12:df:e5:a0:d9:04:1d:65:97:f4:04:06:
                    e9:c4:13:34:2a:80:d4:47:0c:a7:69:a9:81:0e:79:
                    76:27:de:97:f6:4e:f1:a0:74:b2:55:1b:d9:62:8f:
                    75:c4:35:e8:34:86:33:e4:1a:67:7c:80:8d:a2:dd:
                    2c:0c:2b:47:8b:6d:2a:a4:08:19:9e:95:0c:c2:83:
                    1a:f1:c6:0b:ee:21:bd:0e:08:76:ae:3f:f4:e5:df:
                    60:83:5a:f4:0a:22:d0:52:76:58:c1:7d:4e:50:91:
                    ee:71:01:12:8e:0f:21:02:f6:30:38:24:90:a1:8a:
                    89:2f:74:69:17:25:23:62:9f:7e:c3:65:7c:4b:3d:
                    b9:c4:55:a3:60:83:de:3c:c0:ec:7b:b0:a1:de:8d:
                    5a:ef:2e:0a:46:3f:e5:96:82:22:66:66:7e:23:5e:
                    d2:08:8a:5a:9e:b0:97:09:59:94:46:59:cf:d0:15:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5C:5A:1D:E9:4D:32:5E:C1:8E:09:91:BF:B6:01:8E:6C:B9:B9:83
            X509v3 Authority Key Identifier:
                keyid:20:81:D8:9A:92:5F:20:F4:93:47:4A:05:E4:D5:8F:5C:F2:AD:80:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/2081D89A925F20F493474A05E4D58F5CF2AD805B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2081D89A925F20F493474A05E4D58F5CF2AD805B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/323830343a353639383a3a2f33322d313238203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5698::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:6c:82:38:be:2a:07:1d:16:a6:af:6c:82:39:86:79:f0:ff:
         52:6a:8a:1b:d7:84:06:d7:57:e6:78:cf:4d:77:c0:92:86:55:
         06:a6:5d:56:17:4e:13:0b:e1:f1:d0:a2:26:0f:e1:ce:e3:90:
         11:87:6c:a3:d9:0a:79:16:37:6b:09:41:62:a0:1b:d6:1a:fa:
         f1:e5:12:32:25:95:49:20:4f:12:57:76:a0:01:c6:77:04:55:
         85:68:a6:bf:46:b3:9b:0f:2e:78:15:2d:ed:38:11:09:86:51:
         ed:ef:41:59:6f:57:72:5a:2d:bb:ab:92:4f:34:55:ed:ec:b5:
         2b:dd:a0:d9:d8:49:48:c2:2c:20:14:7c:0b:43:a9:4f:9e:0f:
         03:f8:d4:93:3e:b2:6b:74:cb:09:f8:71:1f:15:49:00:e0:de:
         cf:0a:c0:1c:1c:37:36:60:e0:ee:30:3a:24:84:b1:88:50:1d:
         33:d7:61:74:30:8d:91:0d:95:a7:ea:5f:46:89:5e:c0:1f:f5:
         50:3d:24:e2:4d:e9:3d:e7:fd:06:bc:6c:7f:e7:51:d0:fb:f1:
         df:8e:6c:1f:8c:28:dd:94:a9:2d:95:66:d9:e6:75:69:5a:af:
         78:db:12:5f:71:1d:be:b7:17:4c:dd:81:98:61:d7:73:b4:d4:
         36:34:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:44:24 2026 by rpki-client