Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/323830343a356663633a3a2f33322d313238203d3e20323639313234.roa
File:                     323830343a356663633a3a2f33322d313238203d3e20323639313234.roa (raw, json)
Hash identifier:          UZKe3r5IvBEOKto8vEFjqNa63WFx6W/Hq5QFYnFHM4M=
Subject key identifier:   D4:35:32:F7:EC:65:D5:EB:D3:C9:AD:B8:4C:E4:B8:EC:A1:EF:1A:6C
Certificate issuer:       /CN=4C79F517A1913929AA15B616101CEEEFA57F07B4
Certificate serial:       1D97CD03700C10DF9719307C20032C51C1FA43D8
Authority key identifier: 4C:79:F5:17:A1:91:39:29:AA:15:B6:16:10:1C:EE:EF:A5:7F:07:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79F517A1913929AA15B616101CEEEFA57F07B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/323830343a356663633a3a2f33322d313238203d3e20323639313234.roa
Signing time:             Mon 01 Jun 2026 13:46:58 +0000
ROA not before:           Mon 01 Jun 2026 13:41:58 +0000
ROA not after:            Mon 31 May 2027 13:46:58 +0000
asID:                     269124
IP address blocks:        2804:5fcc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/4C79F517A1913929AA15B616101CEEEFA57F07B4.crl
                          rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/4C79F517A1913929AA15B616101CEEEFA57F07B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79F517A1913929AA15B616101CEEEFA57F07B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:97:cd:03:70:0c:10:df:97:19:30:7c:20:03:2c:51:c1:fa:43:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C79F517A1913929AA15B616101CEEEFA57F07B4
        Validity
            Not Before: Jun  1 13:41:58 2026 GMT
            Not After : May 31 13:46:58 2027 GMT
        Subject: CN=D43532F7EC65D5EBD3C9ADB84CE4B8ECA1EF1A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:97:74:89:9b:32:c3:e4:02:ae:84:d5:6f:
                    84:c4:64:f7:e5:9a:16:e3:3a:b5:92:93:29:c4:84:
                    02:46:65:84:12:e7:c2:92:e7:3d:fe:6c:ae:c3:3c:
                    9d:77:08:b7:e0:fc:18:81:35:62:60:0a:71:5c:08:
                    7f:7b:bd:39:6e:df:60:5b:4c:ad:80:11:c5:89:17:
                    53:9a:70:55:46:56:fc:1c:eb:95:d3:a4:e8:60:84:
                    3a:8e:2a:69:77:f4:76:6d:55:0b:93:af:28:3f:a7:
                    fc:30:e8:00:17:60:fe:0f:98:32:17:60:ce:c0:e0:
                    26:6f:da:f6:9e:7e:c4:23:d8:a3:a0:f2:f8:44:68:
                    d1:b5:4d:98:a1:cd:0b:ec:37:96:d9:4e:75:63:20:
                    d7:53:e4:a7:4a:35:ad:3d:62:fe:80:f4:02:c5:89:
                    74:48:c9:d1:8c:12:c3:c3:d6:28:8a:d1:6a:76:2e:
                    41:61:b2:91:91:24:2b:ba:7b:67:d4:c9:0e:3d:f0:
                    04:e0:c4:f0:60:38:73:fb:c1:a6:92:77:3c:86:3e:
                    db:82:05:82:35:d4:7d:8f:74:14:05:15:e1:25:8e:
                    aa:d5:50:70:b4:ab:a8:34:24:dc:e2:70:77:de:3e:
                    29:21:51:b7:e6:b9:9d:3b:aa:b6:ab:aa:1a:42:d5:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:35:32:F7:EC:65:D5:EB:D3:C9:AD:B8:4C:E4:B8:EC:A1:EF:1A:6C
            X509v3 Authority Key Identifier:
                keyid:4C:79:F5:17:A1:91:39:29:AA:15:B6:16:10:1C:EE:EF:A5:7F:07:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/4C79F517A1913929AA15B616101CEEEFA57F07B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79F517A1913929AA15B616101CEEEFA57F07B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/0/323830343a356663633a3a2f33322d313238203d3e20323639313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:7c:75:65:89:ca:e7:75:bb:60:a6:6e:84:26:a7:6e:93:
         ad:a5:6e:3d:74:b4:8b:04:66:b7:6c:ef:bd:3e:1c:e3:eb:ad:
         52:79:ac:3b:66:a5:56:c2:09:7a:50:20:40:82:3c:34:d2:b5:
         a2:b5:30:1d:0c:68:84:c3:f6:3a:51:85:1f:cd:a9:0c:aa:dd:
         c3:3d:23:a8:07:51:84:ed:13:8e:e5:b7:fb:e6:dc:df:b5:94:
         72:b1:5b:3e:f3:93:ab:af:83:1a:35:7e:b9:86:23:ae:d0:0f:
         04:96:ce:b9:87:a6:7d:24:45:78:61:d6:c4:29:61:cb:fc:10:
         e6:d0:6c:f8:74:45:4a:e0:76:f8:04:8e:0a:55:11:03:1f:56:
         a6:0e:12:d2:ec:0f:1b:f4:b3:b2:d1:bf:b0:d2:e3:e2:c5:ff:
         54:5a:88:66:ef:2c:25:8f:c6:ad:40:d4:4d:66:8b:3a:ff:63:
         f4:e1:da:39:b5:a8:0b:03:cc:37:2f:04:d6:4d:90:c3:d5:fc:
         33:1b:f1:68:7c:d3:c5:d4:24:42:d6:47:0a:3d:84:4f:53:eb:
         e2:f9:5c:8a:d4:f2:e5:e7:eb:ba:f4:9e:72:8a:ea:74:8b:f1:
         68:d3:b3:d9:27:d9:1f:37:5f:73:91:70:f4:5f:5a:61:34:36:
         91:79:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:17:39 2026 by rpki-client