Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa
File:                     323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa (raw, json)
Hash identifier:          nwQgqxjDPDDQLZqXveqZaffwOmw0ygHNG2s9sQiOO+g=
Subject key identifier:   C1:0A:1A:A1:EB:51:12:D2:66:13:F3:E2:78:1B:D1:C9:79:9B:19:42
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       6A89DB55BA9780916C1289A1FC1CDBF7F395EA49
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:48 +0000
ROA not before:           Tue 09 Jun 2026 12:25:48 +0000
ROA not after:            Tue 08 Jun 2027 12:30:48 +0000
asID:                     262687
IP address blocks:        2804:385c:ff00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:89:db:55:ba:97:80:91:6c:12:89:a1:fc:1c:db:f7:f3:95:ea:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:48 2026 GMT
            Not After : Jun  8 12:30:48 2027 GMT
        Subject: CN=C10A1AA1EB5112D26613F3E2781BD1C9799B1942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:f5:b0:0a:39:a5:1e:e7:d6:c1:f0:55:f3:
                    da:42:09:f3:f8:ca:92:90:3d:fe:da:b2:0a:46:36:
                    6f:4a:2d:e9:e6:82:df:99:35:5e:35:86:00:80:3e:
                    46:43:41:78:a7:e6:ec:d0:05:93:1f:59:60:f5:1c:
                    45:12:d0:50:a4:1c:20:39:c6:6b:dc:87:cf:bf:34:
                    44:13:6e:c7:76:81:4c:cf:10:86:d2:7f:ee:f3:fc:
                    79:9f:a4:dd:a0:cc:01:dd:d4:29:95:34:c7:03:cf:
                    6c:a6:50:67:15:f9:6f:76:03:d0:0f:cf:56:ae:49:
                    36:ed:ab:1d:dc:51:a9:89:4e:2f:29:9c:18:8b:0a:
                    79:eb:1c:e6:7c:d6:44:6a:6f:44:e0:de:f1:31:a9:
                    a2:8a:1f:13:bc:fa:0b:6c:f0:c5:af:f6:60:74:40:
                    e8:1c:fe:c1:e6:57:7b:d5:66:d4:f4:6b:fa:90:d4:
                    a2:e3:d3:22:87:ac:71:6e:5e:64:92:b8:b7:0a:42:
                    f1:79:1a:09:0f:7c:be:09:94:be:81:9f:30:c4:69:
                    80:2a:31:e2:a4:1e:43:d1:a1:76:f1:55:b4:01:7f:
                    7f:2d:6b:1c:2b:65:a2:a6:74:28:17:20:40:6b:af:
                    2c:e8:8a:6a:37:a5:21:51:42:8d:f2:59:09:42:6c:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0A:1A:A1:EB:51:12:D2:66:13:F3:E2:78:1B:D1:C9:79:9B:19:42
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:ff00::/41

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:ae:9c:b4:13:75:1e:50:9c:28:84:bd:00:c5:27:e5:39:
         82:f0:06:af:0c:14:72:fc:48:7e:e8:7b:23:6e:cb:14:20:60:
         a7:57:7a:f8:52:70:53:97:4f:2e:50:c3:09:84:d9:8b:da:b8:
         00:5b:08:28:72:b2:cd:07:4e:5d:a1:ea:d7:59:28:34:b9:20:
         29:ea:78:92:28:e3:3a:87:10:0f:f8:f9:55:20:cb:8c:f7:52:
         ba:30:30:16:2e:4d:9f:75:6d:82:fa:5f:97:c4:0b:58:84:7b:
         1a:4e:e1:61:43:a9:ee:17:ae:b3:e1:0b:a5:49:bc:4e:2e:a3:
         f8:94:9b:72:25:cb:60:c8:f5:fb:d2:d9:dd:60:1f:b2:b1:68:
         55:17:94:9e:e7:96:79:3e:e7:27:12:c3:8f:38:86:fc:71:68:
         e3:ab:bf:2f:7e:0b:16:57:db:a5:a2:5e:6b:6f:62:2a:6b:d2:
         39:32:33:cc:97:db:fe:63:f6:8b:61:ad:43:07:6c:0f:e2:9f:
         b2:e9:bf:f2:1e:8b:e7:be:90:a8:4f:ba:93:55:a6:fc:e4:04:
         ba:01:79:2f:90:56:27:6a:64:89:29:af:43:ec:c5:0f:03:0a:
         43:26:72:ae:8e:a2:63:20:6f:4e:80:ec:6e:a6:fb:31:27:82:
         0e:b0:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:42 2026 by rpki-client