Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a3a2f33332d3634203d3e20323636333139.roa
File:                     323830343a333566633a3a2f33332d3634203d3e20323636333139.roa (raw, json)
Hash identifier:          wc+VgV5h3ryOpPf6UfC+YlmRowXBgAGTQcfdwpFKtMA=
Subject key identifier:   DA:FA:60:1A:79:A3:B9:BC:2B:BB:11:2F:4F:6D:44:A7:C7:E0:C4:D0
Certificate issuer:       /CN=A9DD57812FFB0246BB0A6436547056BD2F4AA3CC
Certificate serial:       3A846DFB655788DE61EE1B203D64CDB54220B415
Authority key identifier: A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a3a2f33332d3634203d3e20323636333139.roa
Signing time:             Thu 11 Jun 2026 19:11:18 +0000
ROA not before:           Thu 11 Jun 2026 19:06:18 +0000
ROA not after:            Thu 10 Jun 2027 19:11:18 +0000
asID:                     266319
IP address blocks:        2804:35fc::/33 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.crl
                          rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:84:6d:fb:65:57:88:de:61:ee:1b:20:3d:64:cd:b5:42:20:b4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DD57812FFB0246BB0A6436547056BD2F4AA3CC
        Validity
            Not Before: Jun 11 19:06:18 2026 GMT
            Not After : Jun 10 19:11:18 2027 GMT
        Subject: CN=DAFA601A79A3B9BC2BBB112F4F6D44A7C7E0C4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:8d:e1:c5:ed:89:b7:42:d1:1b:3f:20:17:
                    98:e9:11:28:3d:97:a4:1d:e6:34:f8:52:ba:de:01:
                    2f:69:3b:b3:26:79:bf:ef:5c:87:e3:59:5a:6a:4a:
                    d9:9a:e7:f4:a1:a4:bb:ae:d2:93:0d:09:cd:11:ea:
                    94:99:cb:86:cf:0b:32:15:81:a7:d8:35:af:56:98:
                    c1:d7:25:98:79:ed:d7:85:73:f8:e9:e7:3a:5c:26:
                    08:c5:53:50:e6:73:69:6f:63:73:4c:db:15:f7:09:
                    5e:e5:c2:9f:fa:97:63:b4:27:57:ba:64:ad:9b:83:
                    06:db:e0:81:88:9f:35:16:99:40:cc:1e:69:7b:02:
                    7d:e5:46:87:46:b5:d6:7d:84:10:f6:bd:11:38:55:
                    cf:ad:4e:a4:cf:56:7b:92:a9:85:b8:7b:c8:0e:a4:
                    1b:f1:ab:87:43:4f:42:ae:e5:2b:f1:e7:cf:db:c3:
                    26:0d:65:66:82:30:bd:d1:e6:2e:e7:5b:5e:18:53:
                    7b:a3:ae:39:34:62:6e:47:37:ee:47:5d:c4:26:37:
                    7c:13:6a:df:55:a4:4b:bf:8a:ea:01:ab:3d:b0:bf:
                    c2:e6:9d:0a:2c:fe:21:bc:47:5a:a3:6c:9e:c5:b5:
                    c8:a0:e5:f9:cb:c3:0f:f7:50:f7:3b:47:fa:98:17:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FA:60:1A:79:A3:B9:BC:2B:BB:11:2F:4F:6D:44:A7:C7:E0:C4:D0
            X509v3 Authority Key Identifier:
                keyid:A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a3a2f33332d3634203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35fc::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:99:48:68:5a:71:0a:40:0f:bd:ee:ca:14:83:d3:b9:c1:2b:
         aa:6d:32:d8:62:74:b0:76:1a:0b:0a:e5:e2:b2:dd:29:11:61:
         13:a4:12:15:7d:7b:f0:ac:37:7d:bf:f9:f4:b6:e5:ec:75:4f:
         fb:65:f8:a8:17:fe:22:e1:46:6c:3e:b1:c6:67:4b:49:df:40:
         80:ba:95:99:37:ec:7b:a2:67:fc:97:d1:65:38:60:6c:79:71:
         db:e7:42:1c:fe:de:d0:7c:2d:d0:3a:09:e3:8c:07:ae:98:37:
         3a:1c:18:68:57:1d:2f:87:e9:bf:b0:07:83:8a:66:6c:4e:1c:
         5a:b9:72:ce:e4:f0:55:18:2c:00:93:70:fe:a8:53:6a:bc:a3:
         ba:a6:9a:11:f6:1f:9b:68:86:b7:32:2f:77:78:c0:9c:ac:0f:
         fd:9d:3b:e9:ef:79:d0:9c:e1:7f:57:c3:9d:54:24:56:dc:8e:
         71:9f:06:0b:0e:fa:d9:52:8b:df:c2:4a:0a:c8:c8:05:ab:d9:
         82:4f:31:91:1a:cb:7a:64:c5:95:df:4f:66:8e:96:6f:5c:1f:
         62:b5:68:d9:8d:51:39:ae:46:2b:3d:5c:bb:ff:29:7a:8c:6d:
         76:56:40:d1:76:31:42:59:48:07:bc:1e:ce:8d:c7:c1:bc:73:
         13:13:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:04 2026 by rpki-client