Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa
File:                     323830343a386365303a3a2f33322d3438203d3e20323733333230.roa (raw, json)
Hash identifier:          d9GHThPH3DwslMYrIIAp2w+VVew9m8h5P3j/FeMouRQ=
Subject key identifier:   8F:64:3D:22:74:6F:69:0C:D3:58:EB:C6:35:82:C6:B9:F3:34:B8:35
Certificate issuer:       /CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
Certificate serial:       41191B24365832959270983C2CE1CF2179D9B61E
Authority key identifier: AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa
Signing time:             Mon 08 Jun 2026 21:09:25 +0000
ROA not before:           Mon 08 Jun 2026 21:04:25 +0000
ROA not after:            Mon 07 Jun 2027 21:09:25 +0000
asID:                     273320
IP address blocks:        2804:8ce0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl
                          rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:19:1b:24:36:58:32:95:92:70:98:3c:2c:e1:cf:21:79:d9:b6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
        Validity
            Not Before: Jun  8 21:04:25 2026 GMT
            Not After : Jun  7 21:09:25 2027 GMT
        Subject: CN=8F643D22746F690CD358EBC63582C6B9F334B835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:29:de:83:c6:74:24:1c:20:b7:51:58:87:ec:
                    8f:a7:3a:4b:3d:27:f3:38:88:a6:1c:6e:a7:6a:da:
                    0f:e5:bf:bb:51:81:66:9d:6e:50:f8:4c:ad:e6:cc:
                    6c:cd:c3:28:dd:3e:df:40:56:7d:c4:d6:7c:88:8d:
                    17:50:3c:f4:72:11:5a:f0:82:bb:14:ce:fc:46:f2:
                    06:28:db:aa:ae:8f:5d:7e:ac:5e:62:be:7a:49:97:
                    cd:ff:bd:6d:84:bf:af:6c:4f:6a:45:89:2d:d1:7b:
                    6d:f2:81:f9:6d:0d:04:8f:81:8f:b5:a4:5c:f7:63:
                    52:6c:37:22:ca:08:02:48:2c:96:71:da:08:5c:23:
                    b5:65:8c:f8:95:8f:0b:4a:99:5f:a3:12:e0:c7:a3:
                    0c:7f:ad:58:fd:a2:e9:65:d5:7d:2e:8f:dd:fc:e2:
                    32:60:dd:4b:86:ed:76:48:81:2a:ac:00:cc:37:71:
                    30:69:0b:61:37:07:99:d6:7f:93:0c:ee:2e:15:e3:
                    fe:d4:66:a7:7b:f6:7d:cf:73:ff:15:72:b7:b0:fb:
                    2e:5e:ee:ac:46:1f:f5:6a:2f:05:c5:6d:0a:7b:3a:
                    30:84:3f:a2:a5:98:93:2d:1e:e6:f8:c9:b1:d4:5b:
                    49:07:04:aa:e0:01:6f:42:03:56:71:04:33:0b:a4:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:64:3D:22:74:6F:69:0C:D3:58:EB:C6:35:82:C6:B9:F3:34:B8:35
            X509v3 Authority Key Identifier:
                keyid:AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/323830343a386365303a3a2f33322d3438203d3e20323733333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:d0:fa:e1:4c:49:f1:a8:30:0e:af:e7:5f:aa:1c:50:cb:
         60:e0:66:b9:90:aa:2f:91:10:43:38:29:26:ed:c8:6d:d2:57:
         06:fe:45:41:de:92:98:7e:3f:a5:6a:ff:cb:15:84:4c:0f:73:
         d0:67:3f:cf:7c:af:27:64:5b:4b:07:5d:99:c5:c1:90:3b:b7:
         5d:57:6b:c2:a0:0d:65:5b:18:d0:69:28:c9:89:a6:2c:8a:d0:
         32:46:0c:4f:72:f8:24:45:ab:59:b9:17:ac:b4:ef:85:91:a9:
         7c:3c:49:cd:bb:8b:5e:28:c2:f5:73:d1:eb:a3:98:9e:88:ce:
         f0:64:08:ef:12:c2:77:57:06:f4:24:5c:cf:fe:66:82:5a:79:
         de:08:0e:9a:ce:9e:b5:fb:89:4e:62:1b:25:db:07:40:0d:2b:
         c4:6a:f7:20:7d:10:fd:05:fa:05:3f:26:4e:e2:f3:f0:ca:9d:
         f3:96:15:c8:44:a3:93:c5:12:35:e5:61:8b:88:17:41:81:c4:
         e7:5c:a4:d3:84:f5:d7:fa:5b:bc:42:81:f4:d3:cc:1d:99:b7:
         bb:dc:9b:ed:7b:55:61:1d:58:0d:47:28:dd:c5:52:68:bf:f9:
         5c:e6:69:71:ad:6b:56:cc:4f:2d:c8:55:ab:4b:c9:c6:ce:c3:
         f6:9d:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:39:26 2026 by rpki-client