Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          ebdhXrP0nFIA4flfn7dwGYcrfnwocR4NXgzhusV2afc=
Subject key identifier:   44:29:68:92:87:16:1A:CD:00:2D:8E:B8:01:33:B3:14:62:24:5A:81
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       55362F3AE11536FC5C320643B87AC5B72BCC9916
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Wed 10 Jun 2026 02:00:22 +0000
ROA not before:           Wed 10 Jun 2026 01:55:22 +0000
ROA not after:            Wed 09 Jun 2027 02:00:22 +0000
asID:                     270544
IP address blocks:        2804:6d9c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:36:2f:3a:e1:15:36:fc:5c:32:06:43:b8:7a:c5:b7:2b:cc:99:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jun 10 01:55:22 2026 GMT
            Not After : Jun  9 02:00:22 2027 GMT
        Subject: CN=4429689287161ACD002D8EB80133B31462245A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b2:02:6c:2c:93:c4:56:9f:fd:39:19:22:a9:
                    d3:db:ad:95:ba:b4:c6:69:53:80:30:f5:4d:60:5e:
                    1c:67:5e:b7:cc:10:cc:5e:9b:2c:80:5e:ce:c8:56:
                    01:d2:f1:b7:63:97:71:d1:28:2c:bf:eb:a2:2e:17:
                    a8:e4:d4:50:ac:68:78:2d:1a:2c:36:c3:87:3f:37:
                    44:d6:55:94:59:29:9c:ed:1d:72:f6:26:97:69:ed:
                    6e:37:9c:7c:c7:0e:bc:ca:37:78:e8:41:4c:a5:39:
                    ea:86:07:63:65:9a:93:ec:da:b7:5d:2b:c1:03:d2:
                    86:3e:9b:3b:38:1f:f9:28:10:45:00:df:5c:26:67:
                    e7:1e:56:aa:19:e8:e6:dc:b1:7b:f6:59:f9:71:92:
                    c7:c8:34:4f:0b:1e:34:fc:c7:b1:1b:35:3f:5e:ab:
                    d9:31:bf:9f:6e:65:b2:82:a0:59:3b:0b:d9:39:ad:
                    30:e9:9d:24:f4:a0:ca:c1:db:e2:d7:c9:f3:fd:7f:
                    14:3a:1f:5a:d7:73:77:cf:76:23:3c:ab:15:9b:fb:
                    88:71:f8:6a:f8:83:7c:4d:49:bd:0c:09:54:06:91:
                    a6:94:d3:cf:6a:d5:9f:da:81:ff:d0:77:1e:8a:48:
                    2c:05:4c:18:44:6e:ea:de:61:27:15:6f:1d:97:45:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:29:68:92:87:16:1A:CD:00:2D:8E:B8:01:33:B3:14:62:24:5A:81
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c::/34

    Signature Algorithm: sha256WithRSAEncryption
         9f:87:4d:ca:ec:1d:8a:cb:d5:4a:ac:97:24:45:64:da:c2:d1:
         94:d1:04:8a:a3:e9:20:6c:a7:ff:8d:9f:50:5f:a8:ff:82:d8:
         64:69:38:f0:56:35:bc:18:12:86:49:c4:ca:8a:e3:69:77:0d:
         aa:01:a0:47:26:3b:67:cb:da:b1:56:d3:70:13:5c:53:a5:2d:
         52:0c:14:8e:a4:bb:79:36:d2:a6:5a:33:b3:21:65:ed:6a:48:
         43:4f:b5:12:71:d4:48:ca:11:3e:e0:5e:ce:98:27:f2:5a:34:
         a6:c7:dc:cf:fa:c6:91:4e:8e:d0:75:01:e3:ab:cb:82:10:3a:
         12:71:56:75:23:46:ce:d7:d3:1d:cf:74:9c:62:08:54:6d:30:
         4e:ae:cc:a2:54:10:07:a8:07:fe:2c:15:90:af:bc:1f:c1:ac:
         41:10:28:fa:d0:ea:45:25:4d:5b:ba:84:ff:56:12:3b:24:95:
         4e:7e:bc:33:20:5b:fc:55:81:22:13:7f:9c:aa:78:f1:18:fc:
         b7:05:d4:05:2d:11:d0:9a:fb:d9:35:b8:b7:c2:a0:f2:e0:a1:
         1c:54:8b:3d:38:11:73:17:14:e3:b1:05:92:23:05:22:06:35:
         1d:59:49:65:51:fb:83:25:a3:e4:d4:e0:17:1b:83:a5:12:6b:
         cf:a2:99:e0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVTYvOuEVNvxcMgZDuHrFtyvMmRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURENUZDODRCNzRGRDlGOEQ3NUMyODQwNzM3Qjk0MkQ3
QzVERjY1OTAeFw0yNjA2MTAwMTU1MjJaFw0yNzA2MDkwMjAwMjJaMDMxMTAvBgNV
BAMTKDQ0Mjk2ODkyODcxNjFBQ0QwMDJEOEVCODAxMzNCMzE0NjIyNDVBODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDssgJsLJPEVp/9ORkiqdPbrZW6
tMZpU4Aw9U1gXhxnXrfMEMxemyyAXs7IVgHS8bdjl3HRKCy/66IuF6jk1FCsaHgt
Giw2w4c/N0TWVZRZKZztHXL2Jpdp7W43nHzHDrzKN3joQUylOeqGB2NlmpPs2rdd
K8ED0oY+mzs4H/koEEUA31wmZ+ceVqoZ6ObcsXv2WflxksfINE8LHjT8x7EbNT9e
q9kxv59uZbKCoFk7C9k5rTDpnST0oMrB2+LXyfP9fxQ6H1rXc3fPdiM8qxWb+4hx
+Gr4g3xNSb0MCVQGkaaU089q1Z/agf/Qdx6KSCwFTBhEbureYScVbx2XRQGjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURClokocWGs0ALY64ATOzFGIkWoEwHwYDVR0j
BBgwFoAUXdX8hLdP2fjXXChAc3uULXxd9lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWtVOVBRa1JGY0JQTnFFNVY5RzRuSEY0c0V3UWppNnp0RHF4cTVHVjN3
YzgvMC81REQ1RkM4NEI3NEZEOUY4RDc1QzI4NDA3MzdCOTQyRDdDNURGNjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVERDVGQzg0Qjc0RkQ5RjhE
NzVDMjg0MDczN0I5NDJEN0M1REY2NTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VrVTlQUWtSRmNCUE5xRTVWOUc0bkhGNHNFd1FqaTZ6dERxeHE1R1Yzd2M4LzAv
MzIzODMwMzQzYTM2NjQzOTYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMw
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARtnAAwDQYJKoZIhvcNAQELBQADggEBAJ+HTcrs
HYrL1UqslyRFZNrC0ZTRBIqj6SBsp/+Nn1BfqP+C2GRpOPBWNbwYEoZJxMqK42l3
DaoBoEcmO2fL2rFW03ATXFOlLVIMFI6ku3k20qZaM7MhZe1qSENPtRJx1EjKET7g
Xs6YJ/JaNKbH3M/6xpFOjtB1AeOry4IQOhJxVnUjRs7X0x3PdJxiCFRtME6uzKJU
EAeoB/4sFZCvvB/BrEEQKPrQ6kUlTVu6hP9WEjsklU5+vDMgW/xVgSITf5yqePEY
/LcF1AUtEdCa+9k1uLfCoPLgoRxUiz04EXMXFOOxBZIjBSIGNR1ZSWVR+4Mlo+TU
4Bcbg6USa8+imeA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:42:45 2026 by rpki-client