Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a3a2f33332d3333203d3e20323634303034.roa
File:                     323830343a323933383a3a2f33332d3333203d3e20323634303034.roa (raw, json)
Hash identifier:          5f/oyNot7N6nsDRK0xjHKwhq/mwGgTjJRIGNZR559Qg=
Subject key identifier:   24:73:FA:11:95:74:1B:9F:4E:FF:9F:2C:42:F3:C7:2D:C1:CE:02:06
Certificate issuer:       /CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
Certificate serial:       2A72A9B73C237DA94D11DE835A82F84E428CBDE5
Authority key identifier: 9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a3a2f33332d3333203d3e20323634303034.roa
Signing time:             Thu 28 May 2026 18:02:38 +0000
ROA not before:           Thu 28 May 2026 17:57:38 +0000
ROA not after:            Thu 27 May 2027 18:02:38 +0000
asID:                     264004
IP address blocks:        2804:2938::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl
                          rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:72:a9:b7:3c:23:7d:a9:4d:11:de:83:5a:82:f8:4e:42:8c:bd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
        Validity
            Not Before: May 28 17:57:38 2026 GMT
            Not After : May 27 18:02:38 2027 GMT
        Subject: CN=2473FA1195741B9F4EFF9F2C42F3C72DC1CE0206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:e8:35:78:a0:ac:17:7b:8d:fc:47:77:d3:
                    c2:11:a8:1b:f6:35:e9:ec:eb:ef:90:49:d3:92:41:
                    74:ba:b4:bf:0e:68:51:bf:8e:08:00:68:0a:64:fd:
                    8e:1e:d3:19:d4:68:d1:da:b3:0f:01:5f:76:fa:fe:
                    8d:d7:3a:0a:37:71:c0:1a:cf:50:c5:33:75:20:ea:
                    c4:2f:b5:8c:9e:3b:ea:11:b8:25:05:fb:30:27:6d:
                    47:d6:bb:62:a9:2b:d0:6b:d6:c2:8b:ee:0a:15:9a:
                    fa:92:fa:7e:62:cb:0d:24:4d:e1:f4:02:d5:85:ac:
                    77:35:49:a9:57:4e:a3:1b:a0:e3:aa:32:51:9e:b0:
                    4a:27:34:d2:37:e2:3e:7b:d0:61:39:df:ba:da:ac:
                    70:09:e0:9b:64:6d:ff:de:74:ea:ed:55:f6:7a:0a:
                    d4:e2:9e:17:7e:f2:bf:de:ca:a2:c1:a6:39:be:d4:
                    d2:2a:e3:07:a8:69:77:e5:e2:33:9e:e8:0d:12:09:
                    f6:f3:84:51:35:7f:65:5d:cf:63:cd:37:ea:d3:15:
                    13:6c:40:1d:d1:45:e6:ff:00:36:93:e5:2a:44:71:
                    ac:ca:14:41:d2:03:2c:e6:ae:95:c4:59:df:16:6a:
                    8a:5a:15:a9:bc:3e:db:fd:13:49:3d:12:ac:96:64:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:73:FA:11:95:74:1B:9F:4E:FF:9F:2C:42:F3:C7:2D:C1:CE:02:06
            X509v3 Authority Key Identifier:
                keyid:9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a3a2f33332d3333203d3e20323634303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2938::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:e8:26:70:97:16:72:1e:26:ad:4b:43:78:ed:8f:0f:82:ea:
         5f:47:c7:cf:11:67:33:34:ee:b1:7d:47:ee:c0:fc:32:e2:f1:
         cc:a3:62:be:19:81:55:c3:8c:c8:a3:c1:22:36:dc:fc:d4:29:
         3a:31:ca:18:f4:57:aa:52:8e:fc:bd:4a:5f:73:1a:aa:ca:a5:
         30:60:82:72:ea:5f:27:3f:f6:dd:df:8d:8b:f1:53:79:22:40:
         95:92:4e:b9:5a:5e:30:d8:f1:fc:cf:6f:1e:4b:e8:af:a6:2e:
         a2:32:7e:2b:0f:a1:79:f4:32:17:6c:a3:b3:82:68:ac:e1:a9:
         db:82:8d:12:5b:c0:a2:64:92:35:e7:fc:fe:57:84:9d:ef:15:
         47:93:1c:4d:42:4e:4d:0a:c9:a0:0b:d9:3b:09:92:e2:c3:24:
         3f:d5:ce:98:f4:10:31:f1:b9:fe:a4:8c:a9:6c:9b:c2:50:f4:
         77:70:95:ef:96:69:ca:f2:48:43:62:27:fd:8a:f7:62:e2:d6:
         3c:ba:c2:37:cb:04:e3:89:57:9a:28:bd:92:d4:fc:9f:a2:b3:
         90:f2:1f:20:71:44:fb:72:8c:72:55:2f:9b:42:84:1f:74:99:
         b2:de:67:79:c3:e1:3a:3c:87:8f:cb:e8:4d:56:a2:94:e2:fe:
         23:21:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:29:11 2026 by rpki-client