Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa
File:                     323830343a333835633a3a2f33332d3333203d3e20323632363837.roa (raw, json)
Hash identifier:          gTZ8uEsFDVIa27JcIAhbQbWhtQdaY1WxsZXDBMYtQLI=
Subject key identifier:   29:61:F7:E1:03:9F:46:3F:02:F6:70:B7:26:A9:6E:B5:95:E7:96:0A
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       029AE5E576522750E285056C4A23E5BBA85A7462
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:47 +0000
ROA not before:           Tue 09 Jun 2026 12:25:47 +0000
ROA not after:            Tue 08 Jun 2027 12:30:47 +0000
asID:                     262687
IP address blocks:        2804:385c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9a:e5:e5:76:52:27:50:e2:85:05:6c:4a:23:e5:bb:a8:5a:74:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:47 2026 GMT
            Not After : Jun  8 12:30:47 2027 GMT
        Subject: CN=2961F7E1039F463F02F670B726A96EB595E7960A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:7c:73:8d:ed:b0:24:eb:36:44:0e:12:3c:
                    f6:f9:43:d6:63:e9:81:ba:56:ed:48:8c:5e:24:c9:
                    5f:8c:67:42:cb:9c:63:44:03:72:fe:9c:bf:38:29:
                    2b:87:43:18:15:06:ec:2d:62:2a:fb:f2:62:43:cb:
                    79:bf:d6:66:4c:ec:69:a9:3b:e2:ad:5b:eb:e2:28:
                    11:2e:9b:35:ee:6e:b2:7b:75:82:b8:1b:b5:0e:dc:
                    b2:0e:6e:f9:9f:86:d1:85:d2:45:b6:bc:15:d3:82:
                    f0:4f:a2:cf:7e:0c:ef:36:a2:04:9e:14:f9:cd:65:
                    9c:dd:5b:8a:d7:a1:59:61:fa:77:c8:2c:60:4a:16:
                    b4:6f:96:ad:87:27:62:ac:bd:66:ff:76:2f:53:0b:
                    5c:c0:8e:92:e9:40:8f:c9:bc:53:fa:e8:46:17:45:
                    98:e3:8d:82:8b:1d:1a:a2:b3:4f:a4:de:69:1a:88:
                    06:b2:24:47:b8:b1:de:88:97:6e:f7:ed:b3:9f:2e:
                    73:23:ac:14:9d:da:23:cd:e4:bf:f4:7c:b7:61:35:
                    7d:76:a6:8b:1e:fc:c3:d0:d4:e0:1a:bf:1e:2e:66:
                    fc:4b:a3:4b:3a:b6:89:3b:3e:e9:47:56:a6:f1:65:
                    7a:94:c5:2e:7a:a5:d5:ea:d7:74:8d:f0:3e:aa:61:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:61:F7:E1:03:9F:46:3F:02:F6:70:B7:26:A9:6E:B5:95:E7:96:0A
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:80:9d:89:ac:25:3d:be:70:06:70:ed:9b:b1:32:b6:f7:42:
         1a:a0:c3:04:86:b9:22:4d:cd:0d:8c:34:30:ea:fd:be:be:a6:
         3b:56:2c:dc:c3:78:c8:14:10:c5:87:6b:03:54:e0:ce:97:dd:
         45:32:84:db:d1:af:97:8a:9f:da:6f:77:70:29:e8:e4:06:7e:
         54:57:29:b7:bd:3d:42:03:d7:14:7f:1d:55:c4:61:e6:e6:23:
         bd:78:0b:28:83:ed:8d:08:fc:a8:a6:d7:62:65:00:29:e3:81:
         21:bf:c9:61:af:8f:64:ac:e9:91:0e:35:9a:77:8d:23:19:45:
         19:3f:3f:68:a1:ea:87:4d:c8:1f:ad:1a:33:71:63:c3:42:eb:
         52:71:17:37:bb:9a:86:1c:36:6d:e5:c6:c7:85:8e:5f:71:89:
         7e:5d:09:71:65:8f:6e:b5:ab:04:0b:c5:3a:ea:6f:f2:41:cd:
         d3:09:95:8d:56:80:e9:09:55:21:6d:6b:f7:c8:6f:be:d8:b0:
         f8:67:a3:a3:97:e6:1b:ec:ad:36:87:5d:63:46:8b:37:8c:bd:
         35:cc:2c:83:7d:cb:39:6c:0b:c3:9e:9e:98:4a:f2:e1:7b:d0:
         dd:bd:dd:2a:1a:ab:70:f1:e3:eb:36:2e:1e:25:3d:e9:01:c5:
         43:ab:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:44 2026 by rpki-client