Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa
File:                     323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa (raw, json)
Hash identifier:          T+AcJrtRg1VWVZKmk4rV5DX81Mx0tzdGomlRhkCNIK4=
Subject key identifier:   3C:6F:F0:FC:D0:91:8B:14:38:E3:E4:06:55:E8:B9:D3:73:10:7F:B8
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       4C8C526F72E180EF1B1F3E1D330F984326410421
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa
Signing time:             Fri 29 May 2026 18:00:00 +0000
ROA not before:           Fri 29 May 2026 17:55:00 +0000
ROA not after:            Fri 28 May 2027 18:00:00 +0000
asID:                     271726
IP address blocks:        2804:800c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8c:52:6f:72:e1:80:ef:1b:1f:3e:1d:33:0f:98:43:26:41:04:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: May 29 17:55:00 2026 GMT
            Not After : May 28 18:00:00 2027 GMT
        Subject: CN=3C6FF0FCD0918B1438E3E40655E8B9D373107FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:cd:23:5c:49:3d:fd:9b:d0:77:58:a0:7d:
                    f6:0e:bc:b4:d0:87:92:81:c7:f8:3b:27:78:b1:98:
                    b0:ae:83:ae:87:8e:bc:88:a3:ef:58:ee:e5:c3:76:
                    6e:87:6c:2e:8c:7d:4d:dd:46:b6:ec:9e:e1:4b:5a:
                    cb:4a:dc:aa:7a:24:5d:a5:72:c8:24:a2:14:6b:60:
                    15:4e:27:27:ec:98:42:c7:5d:e3:00:84:f0:24:48:
                    b7:f0:68:57:af:5e:17:ac:ee:03:52:80:ad:b9:6f:
                    16:02:f9:1d:2f:dc:0e:e1:9f:ed:16:63:48:b6:9e:
                    28:3e:28:30:30:c2:11:4d:47:7e:79:e1:66:b3:f7:
                    4e:65:13:4e:59:71:aa:87:bf:f2:ea:8c:3b:b1:c7:
                    18:ae:48:81:4e:01:8c:f7:12:23:79:d0:9a:59:d3:
                    62:24:87:46:f0:30:06:d9:f6:a5:8a:8b:cb:96:1c:
                    ea:eb:54:b2:0f:d3:10:d4:f5:a4:cb:76:91:d4:79:
                    9c:97:96:41:90:68:de:de:4b:95:25:1f:b7:b8:fa:
                    76:c3:f8:ff:22:9e:b5:b0:73:bd:8c:68:d0:2d:0b:
                    68:c8:62:61:15:a7:a3:4c:3f:0a:2d:ac:38:cc:df:
                    45:ae:43:45:54:cc:6f:dc:87:cc:96:b1:62:9d:dd:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6F:F0:FC:D0:91:8B:14:38:E3:E4:06:55:E8:B9:D3:73:10:7F:B8
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a383030303a3a2f33332d3333203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:800c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:91:fc:2e:76:9c:93:c4:43:2c:58:54:ea:28:cd:25:2a:f3:
         3d:2e:0b:9a:25:a2:4e:1b:22:cc:82:3f:93:8d:b6:60:7d:b6:
         cd:a3:9c:60:e9:0f:d5:53:e3:8b:3a:74:5c:1f:18:f6:94:62:
         b0:ba:07:07:a4:90:84:28:5c:de:9c:db:cf:4d:d1:b1:37:89:
         72:52:29:6a:2a:19:dd:97:10:2b:2a:b6:a2:71:94:5c:f8:ce:
         16:e2:fc:ac:26:0a:e7:09:c1:1e:46:21:54:29:ef:4d:3c:94:
         59:cd:e6:16:72:c7:21:0d:3d:cc:ec:26:61:be:d4:ac:00:e1:
         b4:1a:7f:42:16:4d:1d:cb:cd:5e:ed:7b:a5:f6:66:ab:9a:70:
         1b:2d:6a:79:05:c6:da:b9:68:f9:50:c0:b1:e0:f2:c0:1c:24:
         1d:5c:67:6c:e6:54:e5:d4:b2:44:17:c4:44:f5:af:de:c9:c5:
         2b:0c:d7:65:4c:a3:d6:bc:db:3b:16:86:28:85:ff:e6:2e:52:
         44:f4:b9:35:ce:87:69:53:79:ab:36:d8:21:8f:d4:72:01:0d:
         d0:83:e7:5f:44:03:ff:9b:c0:12:ca:4f:18:89:48:58:39:70:
         e3:0a:89:ae:c6:1b:15:af:d3:34:bb:2d:6d:83:b9:c4:39:c7:
         a4:c7:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:41:44 2026 by rpki-client