Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/323830343a343635383a3a2f33322d3333203d3e20323636393834.roa
File:                     323830343a343635383a3a2f33322d3333203d3e20323636393834.roa (raw, json)
Hash identifier:          OmfDGKvCieirBzd9vShz4Qaf59xe1C9BbHZzAMQFD1E=
Subject key identifier:   55:E6:01:6B:99:41:EF:A0:7E:6C:39:4B:80:05:19:E6:35:DE:49:91
Certificate issuer:       /CN=41107F8D71D8B83AE0B9185D5C53CC2EE346B47B
Certificate serial:       6518B15B5B2E309A997D09C14A59D88297AEB079
Authority key identifier: 41:10:7F:8D:71:D8:B8:3A:E0:B9:18:5D:5C:53:CC:2E:E3:46:B4:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/323830343a343635383a3a2f33322d3333203d3e20323636393834.roa
Signing time:             Thu 04 Jun 2026 21:00:24 +0000
ROA not before:           Thu 04 Jun 2026 20:55:24 +0000
ROA not after:            Thu 03 Jun 2027 21:00:24 +0000
asID:                     266984
IP address blocks:        2804:4658::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.crl
                          rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:18:b1:5b:5b:2e:30:9a:99:7d:09:c1:4a:59:d8:82:97:ae:b0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41107F8D71D8B83AE0B9185D5C53CC2EE346B47B
        Validity
            Not Before: Jun  4 20:55:24 2026 GMT
            Not After : Jun  3 21:00:24 2027 GMT
        Subject: CN=55E6016B9941EFA07E6C394B800519E635DE4991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:79:07:2b:89:f2:fb:f1:61:85:7d:52:82:
                    1f:a0:a9:dc:2f:b5:34:f0:b5:7c:b9:6b:0d:f3:d5:
                    60:85:de:50:10:17:25:21:f6:2b:d6:07:13:26:5d:
                    42:1f:f6:2b:1e:93:68:ab:1d:ec:b4:4f:54:78:fb:
                    9e:1b:18:c0:37:4c:d4:64:31:f6:ad:d8:9e:a7:2c:
                    7b:ff:e3:32:ae:7b:af:ce:d3:b2:14:3a:dc:43:dd:
                    d8:f3:d9:5c:b9:ec:0b:2a:96:59:21:ab:c7:c8:c3:
                    10:68:eb:2f:d2:da:cc:e8:de:08:64:6d:d0:3a:50:
                    f6:26:22:c8:17:1d:3d:f4:a1:18:54:4d:b1:47:05:
                    c3:a0:11:3d:2a:1b:3c:6b:f9:4e:fb:2e:6a:98:71:
                    60:25:a2:a1:96:53:16:c0:16:f8:7f:31:f3:b4:d6:
                    2b:62:af:7b:db:36:8a:41:41:77:06:c5:49:db:26:
                    83:cd:ec:2f:b3:61:59:61:bf:3b:29:1e:55:a3:dd:
                    67:fc:6e:43:0f:8c:d5:fd:c0:df:34:14:c0:4f:04:
                    04:c9:9b:ab:f6:d5:53:0b:9a:89:8d:f4:1a:a6:61:
                    7e:7b:53:d4:fc:a8:2a:c9:96:bc:52:91:cf:0c:25:
                    b5:98:87:a9:4d:d2:39:80:1e:f1:17:ea:c9:03:9d:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E6:01:6B:99:41:EF:A0:7E:6C:39:4B:80:05:19:E6:35:DE:49:91
            X509v3 Authority Key Identifier:
                keyid:41:10:7F:8D:71:D8:B8:3A:E0:B9:18:5D:5C:53:CC:2E:E3:46:B4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41107F8D71D8B83AE0B9185D5C53CC2EE346B47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/323830343a343635383a3a2f33322d3333203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4658::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:f2:7c:c8:db:e0:0c:8b:7d:09:16:f1:6f:ff:bf:f1:5d:
         97:bf:1a:f9:93:ec:d0:40:98:f8:4a:08:5e:4e:f9:49:af:5b:
         7d:3d:7c:c1:88:43:b0:e6:64:3c:a0:36:61:c2:45:a7:0e:fb:
         ed:c7:57:fc:ad:30:37:67:58:2c:fc:7f:2a:11:84:7c:ce:73:
         fe:49:59:56:b9:e3:3b:7d:27:cc:22:ab:da:27:cf:9b:40:01:
         a9:37:49:d2:5e:f5:28:bf:8f:a2:4d:97:ef:a5:0b:72:54:75:
         1b:dd:67:f3:0f:7e:ac:ef:03:9a:93:26:f7:cf:00:f5:22:d5:
         5c:b9:3b:21:32:b1:43:f8:47:ae:e9:69:1f:6a:08:e4:be:91:
         99:51:38:7e:02:74:e1:85:f9:0d:4b:66:40:11:09:1b:66:27:
         92:1b:43:fd:af:c0:80:df:4a:ce:9a:5b:a2:85:dd:94:49:aa:
         73:c3:ad:d1:88:56:3c:7a:77:8a:90:c3:23:b4:c9:d1:c6:a3:
         8f:1f:21:4f:02:74:8f:6b:16:1f:5f:1c:c5:eb:dd:39:a5:86:
         19:54:6d:ee:8c:6e:fd:cf:6c:8c:da:90:a1:e7:10:01:06:00:
         1a:7c:7f:6e:45:5b:b8:6f:25:dd:09:5e:19:49:bc:0b:f3:85:
         7e:25:ab:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:46:46 2026 by rpki-client