Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/323830313a38303a336130303a3a2f34302d313238203d3e20323730343130.roa
File:                     323830313a38303a336130303a3a2f34302d313238203d3e20323730343130.roa (raw, json)
Hash identifier:          6aH9OA487wT82WNOo++lr2Bj9POh1KQUOdRt6ceL0Pc=
Subject key identifier:   19:48:42:DA:0B:D6:8B:07:F8:EF:54:E3:F4:C6:4E:FA:93:DE:B9:86
Certificate issuer:       /CN=2180F348977193EC0F02C27E2F27F245CBC49DB9
Certificate serial:       4D66D25C76EF720B69FB4BF0A99D322793CBAF58
Authority key identifier: 21:80:F3:48:97:71:93:EC:0F:02:C2:7E:2F:27:F2:45:CB:C4:9D:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2180F348977193EC0F02C27E2F27F245CBC49DB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/323830313a38303a336130303a3a2f34302d313238203d3e20323730343130.roa
Signing time:             Mon 18 May 2026 19:16:40 +0000
ROA not before:           Mon 18 May 2026 19:11:40 +0000
ROA not after:            Mon 17 May 2027 19:16:40 +0000
asID:                     270410
IP address blocks:        2801:80:3a00::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/2180F348977193EC0F02C27E2F27F245CBC49DB9.crl
                          rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/2180F348977193EC0F02C27E2F27F245CBC49DB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2180F348977193EC0F02C27E2F27F245CBC49DB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 12:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:66:d2:5c:76:ef:72:0b:69:fb:4b:f0:a9:9d:32:27:93:cb:af:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2180F348977193EC0F02C27E2F27F245CBC49DB9
        Validity
            Not Before: May 18 19:11:40 2026 GMT
            Not After : May 17 19:16:40 2027 GMT
        Subject: CN=194842DA0BD68B07F8EF54E3F4C64EFA93DEB986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:d2:c0:4c:25:29:12:e4:38:76:7a:05:9b:
                    a0:ae:18:34:3f:40:d4:7d:e5:ef:16:95:66:e1:19:
                    c5:73:b6:b8:ae:c0:39:89:0b:7d:5f:29:18:de:c7:
                    68:1e:dd:ee:b5:21:39:c4:d3:84:c7:3d:1f:e1:d4:
                    bc:b8:a2:8a:5e:4d:4b:de:04:cb:4d:84:a4:dc:24:
                    8a:20:32:52:ca:d1:b1:a2:a0:c3:f5:96:20:ff:43:
                    5c:4a:f4:ef:56:ab:96:8b:2a:b0:d8:a7:83:a2:87:
                    01:b2:23:78:25:c5:d1:06:df:d5:28:d5:7d:e4:90:
                    a5:2f:24:fb:4e:68:7e:4f:f9:3c:4e:e9:b0:eb:55:
                    16:3b:66:16:17:41:ce:a8:0f:70:a5:72:b7:5b:34:
                    6b:22:a0:ba:84:15:de:42:c7:f0:84:85:a9:39:80:
                    46:14:ac:20:03:16:b7:1a:15:77:b8:dd:14:19:fa:
                    61:c9:75:23:26:c9:bc:15:4a:76:7b:8a:3b:cc:66:
                    ee:7d:4a:05:42:64:48:8d:69:f4:eb:d1:2e:47:c4:
                    b4:21:72:0d:57:fd:28:e6:4d:92:34:d4:67:3d:7f:
                    44:93:ae:66:58:95:72:4a:78:a2:fd:1a:a6:e4:c4:
                    fc:13:5a:3e:a3:64:0e:ac:40:ca:a8:40:12:40:c7:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:48:42:DA:0B:D6:8B:07:F8:EF:54:E3:F4:C6:4E:FA:93:DE:B9:86
            X509v3 Authority Key Identifier:
                keyid:21:80:F3:48:97:71:93:EC:0F:02:C2:7E:2F:27:F2:45:CB:C4:9D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/2180F348977193EC0F02C27E2F27F245CBC49DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2180F348977193EC0F02C27E2F27F245CBC49DB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/323830313a38303a336130303a3a2f34302d313238203d3e20323730343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:45:ee:87:d6:45:67:e6:77:0f:c6:85:c9:68:c5:62:ac:eb:
         9c:15:20:ca:7d:b2:75:46:92:e9:eb:6a:f3:43:7a:65:8e:63:
         4f:89:3d:4a:2e:19:36:45:11:48:46:07:08:eb:b8:70:a0:47:
         44:e5:ad:1b:15:63:76:d9:d7:a3:48:27:1d:cd:0c:af:e3:4f:
         13:7c:e8:28:f9:17:a6:dc:e5:df:84:ee:94:09:ec:67:15:5a:
         dd:9c:5d:10:ca:4c:66:19:03:f6:74:89:f2:dc:10:3f:18:e0:
         b8:55:21:71:9e:aa:3e:42:e9:7c:4d:15:81:91:7d:a6:29:6e:
         df:82:18:8d:f3:64:21:af:e6:a9:f6:7f:0b:f7:23:3f:45:50:
         89:04:1b:1a:f6:57:f9:ac:73:87:51:f2:f8:69:3a:a9:fd:46:
         6a:02:5c:d1:ab:12:39:b7:4b:d5:ca:a2:2f:0b:ff:00:54:54:
         b8:c1:48:6f:bf:cf:ae:14:34:e1:99:aa:21:22:0f:94:24:8b:
         59:37:4a:83:85:52:b2:93:0b:cb:38:fa:55:11:56:74:c0:54:
         cb:ce:91:85:eb:d6:57:af:86:4a:5e:4c:00:7d:42:e2:24:a5:
         37:a2:6a:2a:53:7b:fd:50:4a:5d:ce:7d:e0:25:27:6e:5c:60:
         01:02:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:14:18 2026 by rpki-client