Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/323830343a393432303a3a2f33322d3332203d3e20323734383233.roa
File:                     323830343a393432303a3a2f33322d3332203d3e20323734383233.roa (raw, json)
Hash identifier:          EiYAdUYZLXigSNUCa6+WARX/O71kwBKTDBGA/v82F4E=
Subject key identifier:   24:A0:DD:0A:5A:DB:CA:DD:36:80:B6:D4:C8:58:A4:FA:B3:D1:75:5D
Certificate issuer:       /CN=BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12
Certificate serial:       68360727B945A7116C30E7B321568B659646494C
Authority key identifier: BE:CD:6D:4F:8A:FA:BA:CB:AB:9F:BF:6F:3A:0F:02:B0:0B:33:0F:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/323830343a393432303a3a2f33322d3332203d3e20323734383233.roa
Signing time:             Fri 22 May 2026 18:26:10 +0000
ROA not before:           Fri 22 May 2026 18:21:10 +0000
ROA not after:            Fri 21 May 2027 18:26:10 +0000
asID:                     274823
IP address blocks:        2804:9420::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.crl
                          rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:36:07:27:b9:45:a7:11:6c:30:e7:b3:21:56:8b:65:96:46:49:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12
        Validity
            Not Before: May 22 18:21:10 2026 GMT
            Not After : May 21 18:26:10 2027 GMT
        Subject: CN=24A0DD0A5ADBCADD3680B6D4C858A4FAB3D1755D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:ca:3e:e9:a1:dc:43:7b:6b:42:2a:7d:53:
                    e2:cb:07:7c:e0:41:36:84:dd:d7:9d:28:57:79:7b:
                    42:60:c6:0f:28:a2:cd:68:f1:34:d7:dd:f9:d3:cb:
                    bf:cf:ab:8c:70:62:ff:f7:1d:ec:96:2b:d0:0c:8f:
                    97:01:63:7f:01:ed:f0:21:b3:bc:88:9c:58:1c:db:
                    cb:48:9f:78:53:dc:a0:26:2b:90:18:e5:b2:07:e1:
                    9a:eb:23:e0:f1:7b:73:95:fe:90:bf:37:9c:a3:3e:
                    c8:b0:34:4d:30:a8:fa:fd:30:84:e5:b8:99:1d:f4:
                    17:a9:94:da:b6:88:a3:eb:d7:83:e0:a2:7e:5c:4f:
                    9f:59:87:f5:a1:79:ca:96:05:63:80:1a:cf:40:04:
                    4b:83:42:75:8b:c2:78:34:5f:fe:56:6e:2a:02:db:
                    56:d6:d9:62:11:76:a3:74:a9:04:98:3b:f3:34:c4:
                    af:ce:8b:85:69:a6:3c:d1:c3:30:98:a1:89:13:e4:
                    f5:ab:9a:fb:be:33:d0:ca:10:a8:e9:ee:ad:e6:3b:
                    94:fe:05:d9:51:66:9b:f4:15:d7:57:ef:8d:8f:ce:
                    17:85:a4:10:bf:f4:ed:8d:5a:04:ca:97:81:f1:ee:
                    6c:76:fa:5c:07:f3:dd:7f:b7:e0:66:8f:cf:59:19:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:DD:0A:5A:DB:CA:DD:36:80:B6:D4:C8:58:A4:FA:B3:D1:75:5D
            X509v3 Authority Key Identifier:
                keyid:BE:CD:6D:4F:8A:FA:BA:CB:AB:9F:BF:6F:3A:0F:02:B0:0B:33:0F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/323830343a393432303a3a2f33322d3332203d3e20323734383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9420::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:6f:70:a4:17:e0:c1:3b:1b:f4:12:12:8a:99:85:67:65:f3:
         01:d7:29:a0:bb:fd:31:be:cb:40:c2:e3:94:5f:a2:11:cd:92:
         b9:72:f4:b2:02:33:32:bf:9c:0f:a4:4c:ec:21:46:b7:a7:27:
         6a:99:29:83:c9:9a:b6:a5:a2:9d:49:44:8e:4b:cd:18:ac:eb:
         e1:d9:d5:27:a0:18:80:a7:1d:7a:70:82:e4:e8:4c:c7:5e:d1:
         d8:e9:1e:dd:58:84:06:e0:25:99:42:c2:9e:8a:7d:30:c2:c6:
         47:62:90:ec:8d:17:36:16:d0:ff:96:da:bf:88:54:38:e1:c7:
         62:0d:d1:68:41:ab:b8:07:bc:54:09:65:09:88:cc:64:1e:b2:
         e1:99:9e:f5:58:45:7b:6d:11:f4:98:a3:31:42:12:38:64:25:
         b9:e0:f1:82:d7:67:5b:49:7f:8e:6b:41:ba:ba:2a:8d:b7:fc:
         63:de:62:87:34:97:93:f5:cb:3e:e0:29:9d:dc:e9:79:70:1a:
         0d:6f:84:87:d5:17:46:2f:dd:e9:32:ff:f6:ad:bf:10:f9:ef:
         92:d4:84:70:c7:50:79:b2:63:e6:df:38:d9:53:a9:b1:e4:7b:
         5b:6e:c6:ac:38:9a:4d:17:ea:8c:fb:aa:db:79:67:9a:0a:57:
         38:d1:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:58:07 2026 by rpki-client