Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a383030303a3a2f33332d3634203d3e20323636333139.roa
File:                     323830343a333566633a383030303a3a2f33332d3634203d3e20323636333139.roa (raw, json)
Hash identifier:          6yX8CDn8O3dLBKpW8EWOCB/i6WhldqLFjWMO6Vgxugw=
Subject key identifier:   AA:48:A9:7B:0A:C5:6A:FF:F0:36:19:8A:64:52:D3:9B:17:38:1D:5D
Certificate issuer:       /CN=A9DD57812FFB0246BB0A6436547056BD2F4AA3CC
Certificate serial:       017C9C439A5C98A9D6FE7D8F6BAAA7D7B0166833
Authority key identifier: A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a383030303a3a2f33332d3634203d3e20323636333139.roa
Signing time:             Thu 11 Jun 2026 19:11:28 +0000
ROA not before:           Thu 11 Jun 2026 19:06:28 +0000
ROA not after:            Thu 10 Jun 2027 19:11:28 +0000
asID:                     266319
IP address blocks:        2804:35fc:8000::/33 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.crl
                          rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7c:9c:43:9a:5c:98:a9:d6:fe:7d:8f:6b:aa:a7:d7:b0:16:68:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DD57812FFB0246BB0A6436547056BD2F4AA3CC
        Validity
            Not Before: Jun 11 19:06:28 2026 GMT
            Not After : Jun 10 19:11:28 2027 GMT
        Subject: CN=AA48A97B0AC56AFFF036198A6452D39B17381D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:a5:e6:95:5c:1d:3b:8f:55:c6:2b:12:a9:
                    dc:1c:37:07:1f:d0:e3:80:2e:4c:ed:a8:d8:9f:a9:
                    ce:69:ed:c9:2c:b6:ee:7d:af:bb:dd:58:85:9d:8e:
                    05:8a:22:57:34:b7:25:ea:7d:e4:ec:86:a5:82:f0:
                    6e:dd:fb:74:e3:86:7b:0d:69:a4:2e:e5:24:a5:34:
                    c5:23:1d:6b:47:0b:5a:15:ce:8d:50:76:9b:2c:23:
                    c1:4f:46:80:0b:c2:25:9b:e3:ef:f8:2d:3f:77:68:
                    fd:07:cf:1c:05:51:78:2a:90:c9:49:13:6e:4e:41:
                    b5:8e:d8:56:d1:d7:aa:e1:7a:ae:4d:aa:e2:63:da:
                    88:09:d0:6f:37:e8:94:3c:9b:fc:22:13:4f:62:70:
                    1b:a0:f4:17:c9:96:c7:ec:27:05:c0:0f:b6:ee:89:
                    42:04:43:ff:4d:9a:82:04:c3:d2:ad:07:b2:f1:25:
                    a9:4e:c7:0b:c8:de:99:37:56:90:c5:9b:e5:8f:77:
                    38:3d:0b:c5:f6:07:e3:e2:ff:d4:75:e2:74:2f:23:
                    7c:c8:55:26:d3:bb:5e:8e:1b:ca:73:9d:0d:dc:3c:
                    7c:ef:a9:03:b8:ff:0f:02:3a:f6:6e:1a:0c:c8:93:
                    e0:8e:ce:ef:03:5e:80:1e:10:b5:6b:f4:b6:01:73:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:48:A9:7B:0A:C5:6A:FF:F0:36:19:8A:64:52:D3:9B:17:38:1D:5D
            X509v3 Authority Key Identifier:
                keyid:A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a383030303a3a2f33332d3634203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35fc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:9a:e3:b3:ec:03:a5:0e:7e:9b:3c:31:d8:6e:82:b7:14:6a:
         ca:2b:48:43:72:73:f5:af:c6:80:09:3e:a8:09:68:03:0a:13:
         44:89:b4:6f:8e:bb:a0:ba:58:08:e7:9f:32:d4:f0:0f:4a:48:
         0b:52:38:da:97:da:00:83:f3:9e:a0:2c:43:33:32:03:1b:c7:
         90:84:5a:b2:be:e6:77:ff:55:9f:1b:7c:b9:10:df:99:b8:1f:
         33:22:c5:6e:a7:c0:91:15:74:1b:23:99:0e:0f:8b:bf:80:27:
         bc:f2:63:fb:30:e7:1b:32:7d:e6:23:1e:3a:e5:26:7d:74:42:
         94:62:2a:d8:67:44:60:e4:e4:3a:28:ee:66:47:0b:a8:17:8d:
         9e:7e:98:3c:d6:92:9d:61:e2:18:f7:3f:76:37:30:6b:54:c6:
         0a:1f:66:bc:04:4a:3e:37:3a:ca:7a:ca:5f:5c:f2:1e:cd:c3:
         e4:ce:71:b8:04:89:5e:44:fd:6b:a6:5a:47:fa:58:3e:3e:41:
         d3:fb:2d:5f:a6:71:53:02:f1:29:3d:08:33:94:63:b1:8b:95:
         be:21:03:35:5f:f4:08:12:81:27:0d:da:05:74:b8:c5:1a:34:
         67:39:36:8d:90:63:e3:ba:48:72:b3:e6:82:d8:08:dc:53:70:
         61:14:c6:7f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAXycQ5pcmKnW/n2Pa6qn17AWaDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERDU3ODEyRkZCMDI0NkJCMEE2NDM2NTQ3MDU2QkQy
RjRBQTNDQzAeFw0yNjA2MTExOTA2MjhaFw0yNzA2MTAxOTExMjhaMDMxMTAvBgNV
BAMTKEFBNDhBOTdCMEFDNTZBRkZGMDM2MTk4QTY0NTJEMzlCMTczODFENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEaXmlVwdO49VxisSqdwcNwcf
0OOALkztqNifqc5p7ckstu59r7vdWIWdjgWKIlc0tyXqfeTshqWC8G7d+3TjhnsN
aaQu5SSlNMUjHWtHC1oVzo1QdpssI8FPRoALwiWb4+/4LT93aP0HzxwFUXgqkMlJ
E25OQbWO2FbR16rheq5NquJj2ogJ0G836JQ8m/wiE09icBug9BfJlsfsJwXAD7bu
iUIEQ/9NmoIEw9KtB7LxJalOxwvI3pk3VpDFm+WPdzg9C8X2B+Pi/9R14nQvI3zI
VSbTu16OG8pznQ3cPHzvqQO4/w8COvZuGgzIk+COzu8DXoAeELVr9LYBcxoVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqkipewrFav/wNhmKZFLTmxc4HV0wHwYDVR0j
BBgwFoAUqd1XgS/7Aka7CmQ2VHBWvS9Ko8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGJKRXFWRjVYb2F0VExlUGNzZ3BKMlpSbmRDNE1RS1RiY1ZLS1kyMnI3
aE0vMC9BOURENTc4MTJGRkIwMjQ2QkIwQTY0MzY1NDcwNTZCRDJGNEFBM0NDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5REQ1NzgxMkZGQjAyNDZC
QjBBNjQzNjU0NzA1NkJEMkY0QUEzQ0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhiSkVxVkY1WG9hdFRMZVBjc2dwSjJaUm5kQzRNUUtUYmNWS0tZMjJyN2hNLzAv
MzIzODMwMzQzYTMzMzU2NjYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDM2MzQyMDNk
M2UyMDMyMzYzNjMzMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygENfyAMA0GCSqGSIb3DQEBCwUA
A4IBAQAUmuOz7AOlDn6bPDHYboK3FGrKK0hDcnP1r8aACT6oCWgDChNEibRvjrug
ulgI558y1PAPSkgLUjjal9oAg/OeoCxDMzIDG8eQhFqyvuZ3/1WfG3y5EN+ZuB8z
IsVup8CRFXQbI5kOD4u/gCe88mP7MOcbMn3mIx465SZ9dEKUYirYZ0Rg5OQ6KO5m
RwuoF42efpg81pKdYeIY9z92NzBrVMYKH2a8BEo+NzrKespfXPIezcPkznG4BIle
RP1rplpH+lg+PkHT+y1fpnFTAvEpPQgzlGOxi5W+IQM1X/QIEoEnDdoFdLjFGjRn
OTaNkGPjukhys+aC2AjcU3BhFMZ/
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:28 2026 by rpki-client