Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa
File:                     323830343a336537633a3a2f33322d3438203d3e20323636353939.roa (raw, json)
Hash identifier:          413Wr9zPMONsyC0eoLYAp0/lNKEIQVQfi+AK3aDPp8M=
Subject key identifier:   73:7F:32:FD:34:2F:7F:16:BE:CE:B1:76:A4:AE:7C:F6:BC:0E:60:0E
Certificate issuer:       /CN=69273B2D38B98BD4DE8EB1058365DB5EAB13F506
Certificate serial:       32830AAF4F8DB48A1EB12D8EFF146EAC820AC9DA
Authority key identifier: 69:27:3B:2D:38:B9:8B:D4:DE:8E:B1:05:83:65:DB:5E:AB:13:F5:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa
Signing time:             Fri 12 Jun 2026 15:23:38 +0000
ROA not before:           Fri 12 Jun 2026 15:18:38 +0000
ROA not after:            Fri 11 Jun 2027 15:23:38 +0000
asID:                     266599
IP address blocks:        2804:3e7c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.crl
                          rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 08:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:83:0a:af:4f:8d:b4:8a:1e:b1:2d:8e:ff:14:6e:ac:82:0a:c9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69273B2D38B98BD4DE8EB1058365DB5EAB13F506
        Validity
            Not Before: Jun 12 15:18:38 2026 GMT
            Not After : Jun 11 15:23:38 2027 GMT
        Subject: CN=737F32FD342F7F16BECEB176A4AE7CF6BC0E600E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:24:f7:dd:6e:d9:21:bc:a1:a1:c1:ce:7d:
                    d3:ad:f6:86:e5:b4:f8:6f:f4:9c:fa:b7:16:6e:97:
                    99:9e:6c:c8:6b:5d:d5:70:e9:fe:d0:96:fe:97:2a:
                    f1:62:e2:d9:7e:e0:ba:76:5a:b4:c2:7e:87:0b:1a:
                    5f:d4:47:e1:3b:13:ad:d0:5b:b3:58:96:c8:d9:8b:
                    55:10:96:46:ac:fb:46:85:38:f5:ca:0e:22:57:f9:
                    0e:56:62:ad:2d:22:23:16:49:a2:ee:96:91:87:03:
                    7e:0f:0d:6b:90:dd:d3:7b:eb:54:af:cf:9a:83:bd:
                    ff:c2:41:67:2c:57:51:1a:4a:87:12:c1:8a:70:8f:
                    6d:e0:0a:cb:67:ea:2a:d1:92:bd:44:64:fc:55:10:
                    48:fe:78:ff:51:be:bf:b6:b8:a6:cc:77:1d:af:46:
                    fb:fa:71:0c:89:c3:3d:38:c0:a1:49:90:91:9f:2f:
                    4a:fa:02:19:87:8f:66:93:99:32:6e:b9:2e:9d:b6:
                    a0:38:db:5c:8f:4e:15:30:6c:9b:65:95:c7:7c:b0:
                    bd:5f:4b:e1:cb:9f:1b:d6:0f:1f:08:44:11:88:3f:
                    67:0a:fd:14:87:6b:18:c8:1d:e4:38:d6:e7:53:f5:
                    ea:4a:1a:88:36:ad:56:91:7f:0c:90:e5:65:19:ad:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7F:32:FD:34:2F:7F:16:BE:CE:B1:76:A4:AE:7C:F6:BC:0E:60:0E
            X509v3 Authority Key Identifier:
                keyid:69:27:3B:2D:38:B9:8B:D4:DE:8E:B1:05:83:65:DB:5E:AB:13:F5:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69273B2D38B98BD4DE8EB1058365DB5EAB13F506.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/0/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:67:63:65:6e:8e:61:ff:99:2f:62:ec:7e:43:fc:3b:e0:76:
         d4:4d:29:9b:8d:07:2b:80:85:fc:cc:b2:5f:5a:ac:75:dc:38:
         3a:a3:08:c9:e7:1c:c7:12:98:b5:01:da:52:b7:0a:f4:56:c6:
         10:08:59:52:f1:19:f6:d7:3f:3f:97:30:81:b3:2e:4a:1b:a5:
         58:7b:f2:e3:1c:3a:9b:f5:a4:b3:1b:03:88:59:b4:1f:f8:f4:
         93:bd:cd:72:ed:38:28:46:38:77:33:34:c9:e6:53:e6:ca:7d:
         d1:75:e5:d5:a8:5a:4a:c9:c5:5d:a1:da:99:1e:39:fe:66:86:
         d0:e4:c1:5f:65:2e:52:ab:84:06:a9:46:bd:17:eb:db:52:c2:
         cf:b7:93:14:6a:4b:8b:a4:f6:a8:50:f9:c8:53:89:6b:d6:e9:
         4b:bf:16:e6:65:83:cc:bf:22:85:70:23:e8:b0:5c:35:ed:6a:
         86:a4:2d:72:fc:02:0b:90:5c:a5:50:46:e9:91:6d:1f:9b:b5:
         7a:52:1a:31:33:3a:08:0e:a8:8e:c9:1f:07:62:55:f0:1c:43:
         b6:a4:9a:3e:ea:2e:9b:16:34:85:3c:c8:65:1e:ac:21:96:47:
         7b:5d:44:2c:f9:84:88:1c:2d:ba:9e:d9:63:47:d1:a6:d4:2b:
         01:ab:3f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:15:29 2026 by rpki-client