Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/323830343a386663343a3a2f33322d3438203d3e20323733353130.roa
File:                     323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (raw, json)
Hash identifier:          9HXA2TO7KrtLw9faLPvq2DV38ABr9u+zoIvQEQzrtmo=
Subject key identifier:   8D:F2:29:22:83:7D:5D:02:A9:5A:0E:D0:0F:0B:5D:00:F4:C5:CA:2E
Certificate issuer:       /CN=A7D4BF015051B34871E20BD6183D395CC8171955
Certificate serial:       2C165FA8E5C26521D8979A72AD96845A3153B986
Authority key identifier: A7:D4:BF:01:50:51:B3:48:71:E2:0B:D6:18:3D:39:5C:C8:17:19:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7D4BF015051B34871E20BD6183D395CC8171955.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/323830343a386663343a3a2f33322d3438203d3e20323733353130.roa
Signing time:             Tue 09 Jun 2026 12:38:14 +0000
ROA not before:           Tue 09 Jun 2026 12:33:14 +0000
ROA not after:            Tue 08 Jun 2027 12:38:14 +0000
asID:                     273510
IP address blocks:        2804:8fc4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/A7D4BF015051B34871E20BD6183D395CC8171955.crl
                          rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/A7D4BF015051B34871E20BD6183D395CC8171955.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7D4BF015051B34871E20BD6183D395CC8171955.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:16:5f:a8:e5:c2:65:21:d8:97:9a:72:ad:96:84:5a:31:53:b9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D4BF015051B34871E20BD6183D395CC8171955
        Validity
            Not Before: Jun  9 12:33:14 2026 GMT
            Not After : Jun  8 12:38:14 2027 GMT
        Subject: CN=8DF22922837D5D02A95A0ED00F0B5D00F4C5CA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:39:25:75:89:f6:73:a3:b3:9b:0a:b2:46:
                    e1:e9:c4:b0:e2:b0:e8:c8:d2:ad:66:94:e0:97:94:
                    b4:44:fc:16:23:88:c6:97:39:7e:01:25:23:db:a8:
                    39:d5:0b:28:eb:fe:17:64:ad:86:b6:0b:76:83:66:
                    4e:df:d9:ca:fa:16:9c:08:61:4b:8e:79:d5:45:0b:
                    1d:b7:1e:1d:bc:91:ef:ac:55:43:b7:cc:77:51:9d:
                    bb:a8:2c:07:4d:c4:fc:1c:cd:b5:03:c1:72:1a:5a:
                    7e:65:b1:fa:99:88:6d:14:78:f2:5e:a3:21:a9:be:
                    17:fe:42:65:89:84:5a:44:9f:0c:d2:20:72:95:a3:
                    8a:3a:02:9e:ef:3d:65:10:48:f0:8e:93:e3:5b:83:
                    44:43:2a:bc:33:08:8a:30:1a:f0:0b:29:f7:aa:ca:
                    1f:6b:f9:f1:2f:02:7b:37:c4:7a:de:85:80:91:1c:
                    b9:f3:3f:ef:47:6e:9b:16:74:4c:0e:43:45:87:ee:
                    b5:e4:9d:82:78:6e:dc:8c:71:df:e4:06:b6:0b:47:
                    b3:07:0d:52:4b:a9:4e:47:c5:0c:0f:08:2e:8b:bc:
                    4e:7c:ee:e1:8c:1b:96:e4:14:0e:46:74:de:bb:bc:
                    3c:8d:b5:ca:e4:2e:3c:56:e9:e6:da:88:cd:79:7e:
                    8f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F2:29:22:83:7D:5D:02:A9:5A:0E:D0:0F:0B:5D:00:F4:C5:CA:2E
            X509v3 Authority Key Identifier:
                keyid:A7:D4:BF:01:50:51:B3:48:71:E2:0B:D6:18:3D:39:5C:C8:17:19:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/A7D4BF015051B34871E20BD6183D395CC8171955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7D4BF015051B34871E20BD6183D395CC8171955.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/323830343a386663343a3a2f33322d3438203d3e20323733353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:6b:6f:35:d0:20:32:57:66:de:14:b5:c5:54:fd:7a:dd:67:
         26:f3:36:64:d7:02:48:5a:47:9d:58:b3:73:fa:67:97:8b:fd:
         cd:b1:18:af:8f:77:c9:9f:2a:22:a9:02:fa:cf:9d:62:af:b7:
         48:54:57:5d:39:cb:85:c1:e9:1f:0f:24:d7:d5:63:85:c1:4e:
         33:a3:9c:d3:32:37:ba:6d:ae:80:c5:55:43:c9:2f:1d:0f:e4:
         ec:36:1b:29:0b:2d:85:20:40:46:00:94:d3:a6:66:59:6e:67:
         c8:bb:3c:8b:df:3e:b4:08:45:a4:5b:64:dd:46:d0:a9:79:93:
         df:93:f8:0d:de:97:9d:b5:11:89:7a:3c:ad:80:b9:14:1f:98:
         13:47:77:05:1e:7d:35:12:60:71:7d:4f:96:ca:15:00:63:25:
         f0:10:1d:98:e1:1e:de:be:2e:4e:40:8a:14:eb:17:78:0a:99:
         74:a4:d3:a0:c7:38:a1:ed:ac:bc:f6:3a:e5:d3:1f:ff:2e:39:
         24:29:f5:c9:62:70:87:d2:c2:62:b8:3a:9e:fc:d4:f7:9d:8f:
         cf:c7:a5:56:c2:e0:0a:88:32:e4:b8:34:42:8b:cb:f1:03:e5:
         0c:53:a2:d3:72:af:11:a4:f0:de:3b:21:46:8e:82:98:e5:ea:
         24:c0:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:30:49 2026 by rpki-client