Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/323830343a363435303a363530303a3a2f34302d3430203d3e20323639343230.roa
File:                     323830343a363435303a363530303a3a2f34302d3430203d3e20323639343230.roa (raw, json)
Hash identifier:          QXMJGQ0roZFFGuXWWp7GlGdlVNZzeXSAfCcgTP7oiM0=
Subject key identifier:   F1:B8:0A:EF:B3:4E:EC:A7:2E:1E:4A:DC:C6:B2:4C:19:7C:E0:F0:34
Certificate issuer:       /CN=C3839D882A452B7AB8567F58286919DB7C73545F
Certificate serial:       2EE3680ED1C59007848C67DDFE7548A245160EED
Authority key identifier: C3:83:9D:88:2A:45:2B:7A:B8:56:7F:58:28:69:19:DB:7C:73:54:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/323830343a363435303a363530303a3a2f34302d3430203d3e20323639343230.roa
Signing time:             Mon 01 Jun 2026 19:09:25 +0000
ROA not before:           Mon 01 Jun 2026 19:04:25 +0000
ROA not after:            Mon 31 May 2027 19:09:25 +0000
asID:                     269420
IP address blocks:        2804:6450:6500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.crl
                          rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e3:68:0e:d1:c5:90:07:84:8c:67:dd:fe:75:48:a2:45:16:0e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3839D882A452B7AB8567F58286919DB7C73545F
        Validity
            Not Before: Jun  1 19:04:25 2026 GMT
            Not After : May 31 19:09:25 2027 GMT
        Subject: CN=F1B80AEFB34EECA72E1E4ADCC6B24C197CE0F034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:b4:1d:dc:e7:1d:20:dd:8d:0f:21:1a:82:
                    a7:37:0b:5c:07:40:94:37:f9:2e:b0:a7:f3:f4:00:
                    81:87:aa:5c:22:42:45:fb:1e:e0:ad:d4:7b:c6:1f:
                    25:55:d1:c5:e3:8a:79:89:38:a7:06:9f:df:12:7f:
                    d0:8b:0f:0b:a9:91:a8:e3:f6:92:bd:c0:2d:d2:ec:
                    f6:46:fd:8a:17:d8:1b:15:5a:41:82:e7:0b:7d:f3:
                    5c:e5:4c:67:87:ff:9f:06:c6:56:6f:eb:ae:d6:7e:
                    00:e3:35:84:66:f8:6e:06:7c:a0:56:fb:0f:f8:8b:
                    7a:4d:93:72:7d:ad:a8:64:7e:80:1a:90:e6:b1:c9:
                    de:e4:cf:0c:03:2f:0c:cb:d1:cb:99:9f:20:6b:99:
                    17:74:9f:71:86:b0:79:aa:e3:e6:87:07:24:ae:09:
                    c2:80:16:ac:40:89:7a:2d:b1:0f:66:95:1f:67:ea:
                    41:c4:d2:0e:5c:9c:ea:44:13:3b:27:84:e2:9e:3f:
                    2d:4d:12:d6:6b:27:b3:a5:4c:7f:4d:a3:90:87:5c:
                    32:31:0b:d3:ce:18:64:5b:c5:88:ce:ae:3c:7e:94:
                    9e:10:7d:fb:81:75:e9:b2:c5:ce:fa:d1:0a:0d:d4:
                    d4:64:41:de:3b:88:9d:b0:ca:7f:3e:32:04:f2:47:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B8:0A:EF:B3:4E:EC:A7:2E:1E:4A:DC:C6:B2:4C:19:7C:E0:F0:34
            X509v3 Authority Key Identifier:
                keyid:C3:83:9D:88:2A:45:2B:7A:B8:56:7F:58:28:69:19:DB:7C:73:54:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/323830343a363435303a363530303a3a2f34302d3430203d3e20323639343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6450:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:75:27:8b:04:e0:df:1d:16:27:eb:e6:96:ec:c2:2a:18:4d:
         96:7e:1f:ed:42:63:10:ca:5b:c3:6b:23:92:67:9f:30:07:9c:
         41:4a:e2:e9:60:c5:94:60:26:4a:60:a3:62:be:8e:a2:30:1c:
         f8:4e:e5:da:fd:e8:b4:e9:c6:53:87:ee:03:09:5e:81:74:60:
         f5:e2:dc:ea:75:bd:a3:69:11:eb:d1:a9:5f:28:92:af:0b:40:
         2a:5d:26:d3:77:7a:de:44:b7:6f:cb:45:c8:02:65:fa:fb:ec:
         ff:8f:46:1d:96:7c:d5:50:64:55:41:26:e6:8c:97:cb:0d:a4:
         d0:7b:4a:fc:9d:cd:dc:75:de:14:ef:6f:00:1e:ec:90:66:3d:
         38:81:05:97:28:2c:df:9e:29:e7:29:82:18:8f:fc:9c:16:a4:
         56:3f:48:c8:e5:9e:cd:74:30:3b:81:28:2f:19:3c:c5:6c:85:
         c2:9d:8e:25:85:a3:7c:5d:d4:6c:a7:72:d6:fb:e6:9c:c2:0a:
         1d:55:ad:2e:35:ef:67:2e:7c:77:fa:7d:ea:2e:40:4d:dd:67:
         43:f2:8c:7b:0a:fc:70:e8:6b:26:e4:71:16:99:00:f5:7a:24:
         2d:46:ea:17:7f:b9:89:53:4f:60:ca:13:fe:d0:0c:98:1d:9a:
         ef:6c:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:42 2026 by rpki-client