Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa
File:                     323830343a6262633a3a2f33322d313238203d3e203532383232.roa (raw, json)
Hash identifier:          M1SzzQ+R0pqjLtAKgraoSnz0wNi08LDySP22vp2vAiw=
Subject key identifier:   12:40:F6:CF:4E:E0:3F:78:6D:75:83:F1:8A:1D:CA:5D:1D:16:1E:2B
Certificate issuer:       /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Certificate serial:       41BD06DFBE1B8073BDCABF4F37522D4A69CC87F9
Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa
Signing time:             Tue 26 May 2026 11:27:45 +0000
ROA not before:           Tue 26 May 2026 11:22:45 +0000
ROA not after:            Tue 25 May 2027 11:27:45 +0000
asID:                     52822
IP address blocks:        2804:bbc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
                          rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bd:06:df:be:1b:80:73:bd:ca:bf:4f:37:52:2d:4a:69:cc:87:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
        Validity
            Not Before: May 26 11:22:45 2026 GMT
            Not After : May 25 11:27:45 2027 GMT
        Subject: CN=1240F6CF4EE03F786D7583F18A1DCA5D1D161E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:a7:69:86:1d:a5:07:3a:5e:fa:af:06:7d:
                    0f:7e:31:d7:61:44:02:88:ff:3a:f8:e1:8e:07:d8:
                    9e:6f:75:e5:48:3f:2a:90:c2:ec:ed:0d:12:03:a0:
                    55:de:65:92:04:43:d3:d5:c3:1b:87:fd:a3:34:61:
                    a8:84:9b:a4:b9:4a:d1:43:c8:cd:b7:ca:74:c7:24:
                    7a:a4:e2:a4:a5:2c:b6:5f:45:68:88:c8:64:20:95:
                    c9:8e:b6:a5:a2:7b:f5:53:a3:2e:8b:21:b2:71:70:
                    a1:d8:bb:40:58:8d:73:dd:03:ec:df:c3:65:2a:84:
                    ed:6c:fe:51:5d:1c:a9:69:6f:5a:12:39:9e:37:89:
                    b3:ba:31:13:07:ea:af:bc:4f:5c:15:81:b4:05:42:
                    3f:3a:48:55:6b:52:39:22:1e:6f:09:82:98:97:96:
                    b0:d3:de:ba:77:bd:2c:a8:56:0a:68:92:92:f8:54:
                    10:3e:af:0e:37:11:65:a7:2f:38:d3:85:88:b4:7a:
                    19:2c:b5:80:28:10:76:f6:63:d2:f1:73:c4:99:33:
                    fd:89:28:d2:a1:11:51:b7:56:e1:4e:70:a8:d3:b7:
                    de:e1:14:32:86:44:d5:ef:17:14:e3:c5:70:01:cd:
                    ed:0f:6c:a0:fc:7c:44:02:38:6e:4d:7f:0b:79:c6:
                    2b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:40:F6:CF:4E:E0:3F:78:6D:75:83:F1:8A:1D:CA:5D:1D:16:1E:2B
            X509v3 Authority Key Identifier:
                keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:81:2d:a3:7d:86:fb:38:c8:31:e4:f2:07:79:07:52:ce:70:
         14:1f:6f:df:8e:ea:be:55:3b:a5:02:00:8c:55:f7:c6:08:a3:
         49:e9:a2:c8:bf:fb:bb:a2:a9:38:03:c4:49:45:28:8d:ba:b0:
         02:26:d7:22:bb:c2:6a:67:57:49:2f:ad:c3:c2:26:5d:98:d4:
         d7:69:85:32:5e:01:8b:de:1b:8a:d6:43:a5:7f:ad:17:44:c9:
         85:4e:cb:d6:e3:37:f3:81:41:07:a6:1d:23:e9:ce:87:5c:ea:
         78:3e:6c:7d:d4:2c:93:b4:ec:2d:ec:32:b8:07:5a:b4:a3:47:
         6a:5a:be:46:cb:58:b2:b2:90:ea:44:32:ba:23:77:d4:7c:ce:
         af:6b:5f:cb:77:da:6b:ad:47:7f:57:2d:51:08:7b:a7:f8:11:
         7a:5f:8d:ba:c9:d8:13:e1:84:e4:dc:44:8e:33:9d:f4:1a:94:
         f9:fd:d6:b3:7b:10:e4:de:fa:e7:11:50:ca:bd:a9:c5:76:b7:
         5e:eb:1e:4c:60:a5:c6:05:3d:6e:e4:68:16:1d:4f:27:96:ef:
         a0:e2:45:c4:ac:a2:46:c1:8e:a9:35:40:be:4e:ae:8e:f9:d8:
         f6:ab:34:9a:8e:1c:db:d1:bc:dd:ea:2d:42:72:89:e5:54:fb:
         cc:95:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:28:26 2026 by rpki-client