Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          xngPUjWCuyn89G5mOatvDg4FwoENmjwED3NSqQY7mqg=
Subject key identifier:   20:0B:F9:53:0F:2E:0E:1D:59:AF:D2:1F:B1:7D:0F:CB:1A:B7:3F:69
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       6311A3681F80526537778148B5385FF2DF65F009
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:45 +0000
ROA not before:           Tue 09 Jun 2026 12:25:45 +0000
ROA not after:            Tue 08 Jun 2027 12:30:45 +0000
asID:                     262687
IP address blocks:        2804:385c:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:11:a3:68:1f:80:52:65:37:77:81:48:b5:38:5f:f2:df:65:f0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:45 2026 GMT
            Not After : Jun  8 12:30:45 2027 GMT
        Subject: CN=200BF9530F2E0E1D59AFD21FB17D0FCB1AB73F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:c4:9b:cc:fe:12:a9:72:bf:68:db:14:c6:
                    47:b8:44:ff:28:46:9b:32:0b:e0:38:1c:bb:8b:cf:
                    f2:38:1a:8d:83:9a:74:3d:f8:7b:bf:e4:27:8b:e1:
                    c7:24:1d:6e:62:15:4a:cc:6d:1a:55:80:34:e0:cc:
                    57:7f:53:7d:a8:17:25:52:4b:8c:67:ce:ad:bf:e8:
                    7f:81:0a:31:93:9c:6f:0b:c2:3d:46:c6:64:64:81:
                    f8:dd:e8:15:b3:09:5d:49:0c:de:d2:7e:57:b5:ff:
                    8d:f3:c0:41:3b:8b:f0:f3:a8:be:6a:a9:f8:d6:c3:
                    3c:37:fc:49:d7:9a:4e:98:57:77:2f:04:ff:65:10:
                    98:fe:88:aa:aa:d4:76:8f:86:d0:e6:e7:94:22:5d:
                    58:08:bd:f5:30:f0:6a:10:d0:e1:2a:92:e2:62:67:
                    03:86:c3:f2:82:58:41:51:7d:80:cc:58:86:38:5d:
                    77:53:21:72:97:53:e2:ef:37:c2:2a:94:83:9e:50:
                    08:30:b5:44:6e:e5:e9:c5:27:97:1b:f2:7c:e6:73:
                    e5:b5:87:6f:e4:f9:3d:f8:a1:39:ac:43:a7:10:26:
                    b8:01:76:44:2e:96:3f:a3:44:8a:d9:27:1e:ac:72:
                    b2:d9:c3:7f:c4:4b:c4:b7:9e:ac:81:c5:a8:46:45:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0B:F9:53:0F:2E:0E:1D:59:AF:D2:1F:B1:7D:0F:CB:1A:B7:3F:69
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:69:73:0e:7a:44:bc:dd:07:34:9c:fc:50:4b:44:af:cf:5b:
         4d:ef:66:64:aa:d6:6a:55:f2:62:9c:ed:01:4c:fe:23:5c:c7:
         6b:1a:bf:03:a2:b2:83:6d:16:e6:c2:02:7f:e0:d3:f5:9e:69:
         9a:12:92:5e:ff:3d:97:d6:58:bd:03:6a:89:39:8c:a9:f2:c8:
         13:f8:e2:61:75:0f:77:9e:a3:a7:04:fd:82:fa:f6:d7:d8:67:
         0a:c6:11:05:28:e6:49:3c:28:c0:ef:a8:fc:6a:5e:13:95:00:
         de:1f:c8:25:82:e0:d5:f9:50:a8:88:7b:d9:ea:2c:8c:bf:fe:
         9c:0c:50:0e:a6:4b:81:39:be:5f:80:0d:f1:b0:45:b5:43:44:
         0c:e3:be:88:37:27:c7:01:0f:b7:98:d0:c5:1a:1c:f8:8e:20:
         76:6a:19:04:19:c4:4b:2c:69:3a:55:1f:14:75:1d:3e:4f:78:
         e5:4d:24:c4:8e:21:d3:e0:39:a8:23:7d:d4:e8:e1:53:39:82:
         a5:27:db:95:3f:95:26:62:e2:66:6c:39:67:f2:d0:3f:b3:a5:
         30:9f:27:15:b8:d8:1c:e2:c9:06:5b:a8:da:63:2e:f1:94:aa:
         87:74:5d:cd:c3:a6:64:48:91:ae:e5:26:08:85:d3:da:69:d1:
         01:bb:ae:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYxGjaB+AUmU3d4FItThf8t9l8AkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVEMjUxMjlDN0Q3NkI4RkQ2Q0ZGMjNDQzNDRjg2QTc5
NDk5NDMyOTAeFw0yNjA2MDkxMjI1NDVaFw0yNzA2MDgxMjMwNDVaMDMxMTAvBgNV
BAMTKDIwMEJGOTUzMEYyRTBFMUQ1OUFGRDIxRkIxN0QwRkNCMUFCNzNGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rsSbzP4SqXK/aNsUxke4RP8o
RpsyC+A4HLuLz/I4Go2DmnQ9+Hu/5CeL4cckHW5iFUrMbRpVgDTgzFd/U32oFyVS
S4xnzq2/6H+BCjGTnG8Lwj1GxmRkgfjd6BWzCV1JDN7Sfle1/43zwEE7i/DzqL5q
qfjWwzw3/EnXmk6YV3cvBP9lEJj+iKqq1HaPhtDm55QiXVgIvfUw8GoQ0OEqkuJi
ZwOGw/KCWEFRfYDMWIY4XXdTIXKXU+LvN8IqlIOeUAgwtURu5enFJ5cb8nzmc+W1
h2/k+T34oTmsQ6cQJrgBdkQulj+jRIrZJx6scrLZw3/ES8S3nqyBxahGRR0bAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIAv5Uw8uDh1Zr9IfsX0Pyxq3P2kwHwYDVR0j
BBgwFoAULtJRKcfXa4/Wz/I8w8+Gp5SZQykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTlmQnZ2dXY0NVAxMWJ4MlZualYzb2d0OWpXQmNyTjMyVjFaU2Z5SG9y
NW8vMC8yRUQyNTEyOUM3RDc2QjhGRDZDRkYyM0NDM0NGODZBNzk0OTk0MzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRDI1MTI5QzdENzZCOEZE
NkNGRjIzQ0MzQ0Y4NkE3OTQ5OTQzMjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5ZkJ2dnV2NDVQMTFieDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzAv
MzIzODMwMzQzYTMzMzgzNTYzM2EzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzIzNjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBDhcCTANBgkqhkiG9w0BAQsFAAOC
AQEATGlzDnpEvN0HNJz8UEtEr89bTe9mZKrWalXyYpztAUz+I1zHaxq/A6Kyg20W
5sICf+DT9Z5pmhKSXv89l9ZYvQNqiTmMqfLIE/jiYXUPd56jpwT9gvr219hnCsYR
BSjmSTwowO+o/GpeE5UA3h/IJYLg1flQqIh72eosjL/+nAxQDqZLgTm+X4AN8bBF
tUNEDOO+iDcnxwEPt5jQxRoc+I4gdmoZBBnESyxpOlUfFHUdPk945U0kxI4h0+A5
qCN91OjhUzmCpSfblT+VJmLiZmw5Z/LQP7OlMJ8nFbjYHOLJBluo2mMu8ZSqh3Rd
zcOmZEiRruUmCIXT2mnRAbuu5g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:43 2026 by rpki-client