Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/323830343a393862303a3230303a3a2f34302d3430203d3e20323735373330.roa
File:                     323830343a393862303a3230303a3a2f34302d3430203d3e20323735373330.roa (raw, json)
Hash identifier:          06LckuJP3OOj2ou5SL6sh60ITDJx9JuiST5b01z0k9E=
Subject key identifier:   8A:FC:88:C5:DB:E4:D5:45:2B:1D:1F:94:19:4D:4C:C3:4E:38:DA:BC
Certificate issuer:       /CN=4C0DA6C0727D350B5C7553F51479AB514AFAE91E
Certificate serial:       025E3763F450A07E9F1E8C9386B49FFE0D8533E8
Authority key identifier: 4C:0D:A6:C0:72:7D:35:0B:5C:75:53:F5:14:79:AB:51:4A:FA:E9:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/323830343a393862303a3230303a3a2f34302d3430203d3e20323735373330.roa
Signing time:             Tue 02 Jun 2026 17:18:53 +0000
ROA not before:           Tue 02 Jun 2026 17:13:53 +0000
ROA not after:            Tue 01 Jun 2027 17:18:53 +0000
asID:                     275730
IP address blocks:        2804:98b0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.crl
                          rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5e:37:63:f4:50:a0:7e:9f:1e:8c:93:86:b4:9f:fe:0d:85:33:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0DA6C0727D350B5C7553F51479AB514AFAE91E
        Validity
            Not Before: Jun  2 17:13:53 2026 GMT
            Not After : Jun  1 17:18:53 2027 GMT
        Subject: CN=8AFC88C5DBE4D5452B1D1F94194D4CC34E38DABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:ca:eb:e1:4e:ad:b4:07:c4:08:e5:24:d3:
                    74:2a:2e:c8:20:51:5f:f0:6d:ae:95:91:3a:42:31:
                    71:4e:f3:b1:cf:d7:91:28:3c:6f:1f:9c:4a:a3:6f:
                    80:df:79:eb:60:06:94:b2:e4:30:b9:af:71:be:6b:
                    2b:5b:60:4b:4b:73:88:ba:28:7e:a2:ba:4a:62:d3:
                    74:fe:23:07:7a:6b:f2:57:5f:37:14:cd:96:ac:54:
                    77:90:74:56:17:34:b4:d3:00:8b:c5:b4:91:d6:5d:
                    ab:63:52:a3:b4:66:bd:da:1d:3d:7c:18:a0:f1:2f:
                    f3:bd:db:77:ef:49:9e:c6:4b:6d:9d:47:7e:f4:1f:
                    2f:bc:0a:bd:88:8b:e0:d6:d0:50:2b:c8:34:37:cb:
                    3c:1c:99:70:6c:50:2c:46:d8:df:fd:d9:bb:ab:0d:
                    07:0e:f1:d7:15:67:bb:de:49:c3:a2:cf:2c:eb:30:
                    0b:10:eb:d3:32:1a:a8:75:7a:9e:85:81:1e:39:54:
                    ed:5b:ce:d5:8c:e3:b4:00:5f:21:d8:1e:b4:16:f5:
                    43:48:b7:d0:f0:09:2a:7f:2b:41:5e:d8:52:cf:bb:
                    ef:e5:d9:ee:d3:3c:85:7b:e1:e3:6c:67:ed:71:1b:
                    68:3b:1c:97:13:b7:f0:92:64:ef:cb:1c:9b:67:3d:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FC:88:C5:DB:E4:D5:45:2B:1D:1F:94:19:4D:4C:C3:4E:38:DA:BC
            X509v3 Authority Key Identifier:
                keyid:4C:0D:A6:C0:72:7D:35:0B:5C:75:53:F5:14:79:AB:51:4A:FA:E9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/323830343a393862303a3230303a3a2f34302d3430203d3e20323735373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:98b0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:9a:30:10:82:48:d0:a7:b3:ba:22:7c:b3:d5:cf:a4:a1:ab:
         60:e0:f5:a4:ae:03:4c:4a:94:1a:59:49:22:e6:db:d8:2e:4a:
         ef:f2:44:30:22:b2:f5:bb:c1:2a:18:b9:c1:a1:4f:0b:30:b8:
         4d:cc:32:39:8d:ed:0e:aa:ec:30:2e:2d:15:b3:fe:72:ef:ea:
         9d:dd:f4:37:7c:84:62:16:05:b8:92:78:80:e6:79:dd:9f:da:
         4a:4d:c5:e6:09:24:0c:bb:56:e1:08:87:fe:91:2a:e5:76:ce:
         fe:94:96:89:87:0f:a7:5a:e9:7b:37:23:da:6f:f5:11:02:10:
         f8:3b:a0:f1:36:16:5b:35:c9:4f:e0:37:98:39:90:01:ae:d0:
         cf:72:b4:2e:36:03:f6:b1:62:d7:14:47:33:15:6d:ce:dc:90:
         8a:70:d2:4a:af:e5:b2:15:c8:db:78:93:cc:b7:a4:ba:9a:2e:
         d9:7c:ab:b6:08:8d:58:8e:86:00:d1:d5:10:25:62:80:03:02:
         88:4e:4d:4d:91:a2:29:36:97:41:8c:fe:6a:d5:39:29:f5:22:
         91:90:fd:7a:d5:26:e2:cb:a4:e0:37:e7:d7:e6:22:6a:e6:68:
         f5:2c:97:13:57:47:4f:19:7e:ab:c8:2b:42:5f:f7:97:fd:36:
         1b:5c:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:43:49 2026 by rpki-client