Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33322d3438203d3e20323633343231.roa
File:                     323830343a313630303a3a2f33322d3438203d3e20323633343231.roa (raw, json)
Hash identifier:          JI8N5lSR4duyNHw3b8BUPkoPO5VFsPJeeWBJY9iKCtA=
Subject key identifier:   EC:54:3A:CB:C2:8E:87:22:91:A2:00:8A:B6:1B:5A:36:85:BE:22:D7
Certificate issuer:       /CN=BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE
Certificate serial:       6E3E83469EAA701C43BA5F2808832B9679A02362
Authority key identifier: BF:2C:B7:4E:51:C0:E4:35:FB:37:90:8E:AA:03:27:F9:D8:AE:A7:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33322d3438203d3e20323633343231.roa
Signing time:             Mon 08 Jun 2026 21:13:27 +0000
ROA not before:           Mon 08 Jun 2026 21:08:27 +0000
ROA not after:            Mon 07 Jun 2027 21:13:27 +0000
asID:                     263421
IP address blocks:        2804:1600::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.crl
                          rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3e:83:46:9e:aa:70:1c:43:ba:5f:28:08:83:2b:96:79:a0:23:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE
        Validity
            Not Before: Jun  8 21:08:27 2026 GMT
            Not After : Jun  7 21:13:27 2027 GMT
        Subject: CN=EC543ACBC28E872291A2008AB61B5A3685BE22D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:86:d9:47:1d:a9:c6:c8:27:9f:f1:a6:c8:
                    49:88:fe:19:a6:89:a6:26:b5:a2:5e:f5:92:a8:0b:
                    a0:3f:14:29:12:23:50:ab:45:af:25:0c:4b:b1:fc:
                    95:5d:2b:b9:6a:0c:45:d4:3b:83:6e:ae:c7:25:c6:
                    db:45:07:83:54:8f:a2:b9:e3:01:b8:ae:cc:8e:8d:
                    67:62:99:e6:46:c6:a2:83:55:dd:5f:a1:49:dd:23:
                    ac:eb:fe:55:91:96:95:f1:6d:4a:ee:e9:45:51:81:
                    d4:f9:c4:01:4f:8e:a0:4a:a6:6f:06:36:c1:7c:f3:
                    a8:99:86:2a:d6:50:b5:bc:1d:29:84:8e:96:ba:0f:
                    34:b5:b8:44:f0:ea:48:08:60:db:09:5a:50:1f:e1:
                    04:8b:3f:72:f0:4c:60:4c:ad:c1:3f:85:57:46:36:
                    a3:54:32:48:f3:d2:64:34:cb:95:bc:10:a5:2d:fe:
                    54:f9:7f:52:31:78:d1:b5:9c:6f:db:00:3f:31:94:
                    28:24:5e:61:2f:08:17:cc:a2:bd:c5:82:c2:17:1e:
                    09:0b:74:53:7e:22:13:6e:f4:c1:62:fd:8f:a9:6f:
                    99:88:19:6f:bb:ef:f0:59:dc:48:e5:c6:1d:89:52:
                    10:b9:ea:89:20:5b:5b:8e:aa:a8:53:53:60:77:58:
                    27:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:54:3A:CB:C2:8E:87:22:91:A2:00:8A:B6:1B:5A:36:85:BE:22:D7
            X509v3 Authority Key Identifier:
                keyid:BF:2C:B7:4E:51:C0:E4:35:FB:37:90:8E:AA:03:27:F9:D8:AE:A7:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF2CB74E51C0E435FB37908EAA0327F9D8AEA7FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a3a2f33322d3438203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:d0:ae:98:71:24:af:c3:1d:f6:1d:6e:fd:cf:9e:a7:52:74:
         3d:f5:bd:bb:b5:66:7c:18:39:cd:2c:f1:6a:69:ed:79:2b:37:
         15:a0:3a:46:c4:77:cb:7f:90:f3:88:03:a3:0d:1c:43:d7:5d:
         1e:94:67:4d:a7:2b:9b:38:09:c2:5e:e8:d0:eb:1c:b6:82:1f:
         f9:1f:76:81:8f:b4:72:c8:49:67:6d:8f:f5:c7:76:6e:a6:70:
         ef:53:f0:c4:86:bc:81:f0:35:2c:0d:f1:72:d4:06:0d:b8:dc:
         28:90:3d:e2:cf:8b:75:ef:b0:73:bd:55:a8:12:6c:89:03:60:
         e1:b8:80:3f:a4:d7:ff:c5:aa:53:0f:83:a2:2e:53:f5:f3:76:
         19:17:8e:be:a2:fd:aa:ed:d4:e4:45:95:c9:11:c9:10:a1:1e:
         11:11:c6:f2:00:c4:e5:d1:8a:27:0e:07:21:46:7d:55:86:52:
         bd:fe:b6:eb:60:69:9d:13:4b:25:3c:4c:eb:09:18:4f:45:e7:
         c5:c8:cb:ca:e6:de:38:8e:91:0f:7b:9f:73:99:94:97:75:0e:
         5b:9b:36:bf:48:eb:20:5b:29:0d:64:b3:1a:9c:77:fe:04:56:
         bc:3a:2e:b1:df:6a:11:b0:4a:66:42:74:58:96:d7:b9:b7:cc:
         b3:ec:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:26:34 2026 by rpki-client