Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          EzAbUorzjfM7LieJeOM97MlIL2vO1tjXUEZu5ROdtf8=
Subject key identifier:   92:5F:46:B0:A8:01:E1:82:2C:3B:EF:A6:A3:24:E5:04:8B:A6:69:AC
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       7F223C14C2C346AF96044C2A4B01A49848CA84BC
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Wed 10 Jun 2026 02:00:27 +0000
ROA not before:           Wed 10 Jun 2026 01:55:27 +0000
ROA not after:            Wed 09 Jun 2027 02:00:27 +0000
asID:                     270544
IP address blocks:        2804:6d9c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:22:3c:14:c2:c3:46:af:96:04:4c:2a:4b:01:a4:98:48:ca:84:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jun 10 01:55:27 2026 GMT
            Not After : Jun  9 02:00:27 2027 GMT
        Subject: CN=925F46B0A801E1822C3BEFA6A324E5048BA669AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:05:1b:6e:ea:c3:f8:4a:e2:5f:02:46:34:
                    64:88:61:41:01:2f:f0:af:ff:36:11:16:29:69:b7:
                    15:d2:4d:34:21:73:0b:a7:d8:ba:3a:58:60:b4:6e:
                    d3:7b:5d:d0:01:34:ce:8f:3b:a3:ae:9c:3a:19:66:
                    61:bb:8f:93:b6:4d:50:71:70:b5:6c:b9:ba:55:12:
                    89:03:19:c2:6b:e0:be:db:9f:fb:5f:1e:4c:ca:0e:
                    0b:b9:73:9a:6b:eb:d6:45:ac:4c:5b:41:20:fa:24:
                    8b:9e:98:dc:c7:25:95:70:22:a1:6d:a8:87:74:7d:
                    9d:0f:e4:1c:af:e5:9b:92:32:8c:d1:02:dd:4b:ea:
                    34:f5:26:62:24:a4:4c:da:93:0c:50:13:4c:1b:d5:
                    2a:a4:86:a8:50:33:4c:b4:d8:fe:42:ae:0b:e7:fb:
                    d7:d8:14:d9:2a:46:41:ed:6d:9a:a5:f2:e4:54:c6:
                    89:39:e4:81:e8:3e:c9:96:49:f6:26:6d:b5:c0:69:
                    7b:81:e4:de:bc:27:15:09:e0:23:58:b9:36:81:86:
                    4c:2a:86:5b:50:de:4a:0a:b2:c6:64:e5:73:0a:b9:
                    98:db:4b:47:17:ff:ab:a9:70:f9:1c:f3:18:d1:2a:
                    52:21:5d:f2:48:c4:27:33:33:f8:65:a3:7b:53:8d:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5F:46:B0:A8:01:E1:82:2C:3B:EF:A6:A3:24:E5:04:8B:A6:69:AC
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:c8:74:05:8b:69:4b:9f:25:e2:86:c4:2c:f6:ed:06:12:
         e6:2e:5b:d3:ab:34:0f:04:7d:e9:e2:e5:06:aa:f1:d0:00:ab:
         08:8d:35:28:99:ec:c3:d4:be:50:0c:31:b3:3b:53:c2:21:f4:
         b9:5d:d7:73:e4:ad:22:d2:6f:cd:ce:8e:18:71:ac:54:0c:e7:
         d2:dd:da:38:77:72:2f:a2:a0:ec:ed:a1:e9:36:ad:57:26:30:
         17:78:40:05:e5:b4:87:ea:db:a7:05:35:1c:c5:3e:4c:27:31:
         8e:39:b4:8a:e7:ec:a7:ac:1e:3f:af:39:32:5d:1e:b9:11:95:
         f0:94:61:d9:54:87:01:ed:29:5f:41:8a:ca:df:eb:28:5a:51:
         ec:2f:c9:a4:25:6f:17:47:4b:2a:ac:80:f3:aa:2f:8e:43:8d:
         10:69:07:de:89:f8:67:65:ee:81:2e:9a:82:30:90:e0:1e:b6:
         8c:f5:c7:3b:0c:e2:72:da:a2:58:03:2b:9b:e0:90:24:e1:a4:
         6e:2b:3e:ce:0f:b4:a9:0b:37:2e:39:cd:c0:e2:b3:4e:64:f5:
         63:75:36:62:98:24:cd:2e:bc:8b:03:d4:e6:c3:36:cc:88:7f:
         ce:f5:36:ce:9c:2e:00:7a:ae:2c:bb:8a:49:3a:13:e0:a5:08:
         64:3d:1b:d0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfyI8FMLDRq+WBEwqSwGkmEjKhLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURENUZDODRCNzRGRDlGOEQ3NUMyODQwNzM3Qjk0MkQ3
QzVERjY1OTAeFw0yNjA2MTAwMTU1MjdaFw0yNzA2MDkwMjAwMjdaMDMxMTAvBgNV
BAMTKDkyNUY0NkIwQTgwMUUxODIyQzNCRUZBNkEzMjRFNTA0OEJBNjY5QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lwUbburD+EriXwJGNGSIYUEB
L/Cv/zYRFilptxXSTTQhcwun2Lo6WGC0btN7XdABNM6PO6OunDoZZmG7j5O2TVBx
cLVsubpVEokDGcJr4L7bn/tfHkzKDgu5c5pr69ZFrExbQSD6JIuemNzHJZVwIqFt
qId0fZ0P5Byv5ZuSMozRAt1L6jT1JmIkpEzakwxQE0wb1SqkhqhQM0y02P5Crgvn
+9fYFNkqRkHtbZql8uRUxok55IHoPsmWSfYmbbXAaXuB5N68JxUJ4CNYuTaBhkwq
hltQ3koKssZk5XMKuZjbS0cX/6upcPkc8xjRKlIhXfJIxCczM/hlo3tTjVpfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkl9GsKgB4YIsO++moyTlBIumaawwHwYDVR0j
BBgwFoAUXdX8hLdP2fjXXChAc3uULXxd9lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWtVOVBRa1JGY0JQTnFFNVY5RzRuSEY0c0V3UWppNnp0RHF4cTVHVjN3
YzgvMC81REQ1RkM4NEI3NEZEOUY4RDc1QzI4NDA3MzdCOTQyRDdDNURGNjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVERDVGQzg0Qjc0RkQ5RjhE
NzVDMjg0MDczN0I5NDJEN0M1REY2NTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VrVTlQUWtSRmNCUE5xRTVWOUc0bkhGNHNFd1FqaTZ6dERxeHE1R1Yzd2M4LzAv
MzIzODMwMzQzYTM2NjQzOTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM1MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEbZzAMA0GCSqGSIb3DQEBCwUA
A4IBAQAS78h0BYtpS58l4obELPbtBhLmLlvTqzQPBH3p4uUGqvHQAKsIjTUomezD
1L5QDDGzO1PCIfS5Xddz5K0i0m/Nzo4YcaxUDOfS3do4d3IvoqDs7aHpNq1XJjAX
eEAF5bSH6tunBTUcxT5MJzGOObSK5+ynrB4/rzkyXR65EZXwlGHZVIcB7SlfQYrK
3+soWlHsL8mkJW8XR0sqrIDzqi+OQ40QaQfeifhnZe6BLpqCMJDgHraM9cc7DOJy
2qJYAyub4JAk4aRuKz7OD7SpCzcuOc3A4rNOZPVjdTZimCTNLryLA9TmwzbMiH/O
9TbOnC4Aeq4su4pJOhPgpQhkPRvQ
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:18:04 2026 by rpki-client