Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383730303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a383730303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          6Rd28zBFKngnRKmZ54wmjBUxaI3xyJuvNI6IyZ9OEPE=
Subject key identifier:   AC:3E:9A:93:CD:DF:4F:A7:F4:1D:50:68:3C:D6:02:F8:98:DC:44:19
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       59EDF9CEF745BCB8DDC5E82DF59D0730E559972C
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383730303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:47 +0000
ROA not before:           Tue 09 Jun 2026 12:25:47 +0000
ROA not after:            Tue 08 Jun 2027 12:30:47 +0000
asID:                     262687
IP address blocks:        2804:385c:8700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ed:f9:ce:f7:45:bc:b8:dd:c5:e8:2d:f5:9d:07:30:e5:59:97:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:47 2026 GMT
            Not After : Jun  8 12:30:47 2027 GMT
        Subject: CN=AC3E9A93CDDF4FA7F41D50683CD602F898DC4419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:5d:e5:58:31:64:8d:1e:e6:6b:27:96:ad:
                    bd:ae:3d:b8:a1:24:9f:22:ae:1f:16:bf:d4:ea:d0:
                    cf:1c:b9:95:8b:71:aa:d3:ba:bb:26:5b:d4:c1:46:
                    4c:86:7d:49:09:27:9a:84:e7:9c:7a:6c:b3:e4:28:
                    14:ef:76:e5:d3:b9:18:6d:4d:63:1e:09:ab:ea:54:
                    a7:e4:4b:78:e0:c8:19:6f:88:c2:82:a0:2a:c9:fb:
                    77:23:b8:12:c7:b3:33:c5:8e:b2:5a:62:79:bd:ae:
                    95:e6:a2:80:f9:5d:f4:46:cf:30:58:a9:be:bc:4b:
                    c4:68:e1:e0:1d:64:e8:06:10:db:4c:ea:40:fa:6f:
                    be:49:6b:04:df:06:af:b7:7e:c5:b6:26:ea:f5:ff:
                    de:8d:a3:fb:ed:cc:e2:e8:3c:63:d2:7f:bd:04:04:
                    cc:f6:a4:b0:70:57:51:27:5b:28:72:21:8e:04:4e:
                    f1:da:59:4e:32:4b:f6:92:4a:c9:3c:87:50:e2:af:
                    56:cc:cf:5d:3c:f5:2e:63:22:d4:a2:15:79:55:b3:
                    20:f6:c7:fe:44:28:4b:72:ad:79:29:e9:90:6a:8f:
                    32:62:9a:9b:5f:ee:49:39:7e:32:bb:5f:68:6d:64:
                    ab:25:70:4d:20:31:5d:38:df:b9:ad:6f:75:d0:c7:
                    55:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3E:9A:93:CD:DF:4F:A7:F4:1D:50:68:3C:D6:02:F8:98:DC:44:19
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383730303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:c0:9f:c3:ce:33:5e:37:73:a3:28:ca:24:9a:ac:40:38:
         a1:76:bc:ba:b1:0d:2d:5c:ff:e4:dd:ad:1d:df:bc:e2:45:cd:
         bb:f7:a8:b6:e3:a9:f4:7a:5d:99:31:4c:88:e8:6f:30:86:c7:
         93:34:dc:2d:e6:d6:2f:a2:5b:ce:30:30:33:76:ab:46:ec:83:
         d5:1a:81:de:2f:6f:76:d0:23:bc:99:f2:df:22:6e:72:11:ca:
         f6:9a:ec:82:45:9d:da:a5:72:f0:a3:28:c1:2b:bd:30:1d:51:
         33:b6:22:d7:7e:19:ea:6e:cb:0e:39:9e:fa:3b:88:32:44:ee:
         d8:42:b5:c6:26:eb:a3:5b:c2:4c:65:4b:e0:98:70:58:7f:a5:
         7c:b5:a1:97:a6:75:48:44:f2:ad:45:02:9b:79:c3:f3:a0:c1:
         65:3a:55:55:48:ba:71:f6:2a:8a:30:27:67:e8:2e:ca:cc:fb:
         02:ee:50:c2:5c:91:ff:fe:80:08:a4:75:23:e2:55:8f:3a:cf:
         83:bd:aa:a4:95:db:b3:76:a2:1b:c9:44:6a:70:6f:f8:7d:d9:
         12:ee:a0:45:c4:c7:a9:1d:55:74:a9:84:9a:75:9c:e8:87:8c:
         52:f5:d2:02:36:42:8e:48:50:d4:81:6c:2c:66:6e:eb:ae:73:
         51:93:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:42 2026 by rpki-client