Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/323830343a333337383a3a2f33322d3332203d3e20323635333938.roa
File:                     323830343a333337383a3a2f33322d3332203d3e20323635333938.roa (raw, json)
Hash identifier:          PdTE/qLRs5USG7ucmcl5xhDBUG/0EA36yMeMjdkBzAs=
Subject key identifier:   A0:2C:6E:29:DC:58:F7:08:D8:55:76:1D:A0:F8:D6:97:A5:B5:51:DB
Certificate issuer:       /CN=7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3
Certificate serial:       46670F31255FF0E01DC2878F48F48935E679268A
Authority key identifier: 7D:09:D8:EA:8E:91:06:A6:DF:16:47:C9:ED:DA:CE:EC:D4:DA:29:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/323830343a333337383a3a2f33322d3332203d3e20323635333938.roa
Signing time:             Thu 07 May 2026 13:53:11 +0000
ROA not before:           Thu 07 May 2026 13:48:11 +0000
ROA not after:            Thu 06 May 2027 13:53:11 +0000
asID:                     265398
IP address blocks:        2804:3378::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.crl
                          rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:67:0f:31:25:5f:f0:e0:1d:c2:87:8f:48:f4:89:35:e6:79:26:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3
        Validity
            Not Before: May  7 13:48:11 2026 GMT
            Not After : May  6 13:53:11 2027 GMT
        Subject: CN=A02C6E29DC58F708D855761DA0F8D697A5B551DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:95:53:24:65:55:9d:34:be:59:f1:65:d9:
                    d2:69:4f:c1:0d:08:f4:57:34:89:60:fb:97:61:21:
                    70:53:1d:82:cf:4d:3a:9a:a1:84:ed:82:61:ba:f7:
                    cc:c7:c5:2e:af:7c:4d:50:b5:4e:74:54:3c:62:e9:
                    3d:3c:2c:d8:80:c8:18:34:1a:e9:57:24:85:f8:72:
                    65:72:7c:4e:af:ba:70:4f:bd:9e:ae:f9:cd:63:d9:
                    e4:98:e8:2d:30:b8:39:d4:5f:b3:db:d8:a8:8d:8b:
                    55:d3:5a:b7:fc:f4:62:7e:3d:5c:2f:07:ea:16:3a:
                    e5:a0:95:1a:49:58:a0:f5:91:bf:f9:98:5d:b0:62:
                    3d:9a:33:ca:42:5c:27:38:0d:64:c5:a9:24:c0:1a:
                    1e:38:a0:1e:39:b4:5c:4e:fc:94:9f:19:41:4c:fe:
                    8d:04:2c:e0:cf:51:17:44:dc:f0:85:8f:a2:96:af:
                    4a:93:7a:44:3b:df:d9:6c:12:49:06:97:6c:35:67:
                    84:7c:ef:e5:18:fd:07:f8:09:0f:71:e7:94:95:9d:
                    73:24:36:ab:bc:e4:5e:7f:a6:0c:74:38:de:19:94:
                    b7:09:87:34:ad:6e:12:d6:41:0e:38:fe:d3:6b:f0:
                    fb:81:2d:ac:3e:02:ae:35:10:9a:25:bc:ca:b7:8d:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2C:6E:29:DC:58:F7:08:D8:55:76:1D:A0:F8:D6:97:A5:B5:51:DB
            X509v3 Authority Key Identifier:
                keyid:7D:09:D8:EA:8E:91:06:A6:DF:16:47:C9:ED:DA:CE:EC:D4:DA:29:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/323830343a333337383a3a2f33322d3332203d3e20323635333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3378::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:e9:23:4b:3e:c0:42:19:18:9c:56:b7:d3:88:eb:74:f2:
         a3:80:21:e3:da:84:18:a5:14:20:ea:11:91:9e:48:ce:83:02:
         45:48:3e:ed:6a:91:d8:30:da:d0:68:13:f4:a2:e7:01:40:38:
         1a:04:ca:c6:09:a9:40:84:09:8c:13:79:68:ac:86:93:d0:20:
         24:b7:c2:1d:57:ca:30:1d:af:ee:a6:9e:16:b5:5a:de:c9:fb:
         f7:78:0b:39:3f:f3:09:83:bc:f8:ce:a0:4f:23:ad:31:d2:78:
         b4:b0:f8:ef:e1:df:fc:5d:a1:78:ee:8c:f9:d9:db:6f:be:11:
         7b:96:b0:b2:de:77:ee:55:29:93:1f:97:26:91:e5:14:9b:8a:
         08:f9:8a:99:a2:1c:33:42:4d:d9:e3:7c:b1:d5:12:43:bc:f3:
         d8:08:f0:ed:16:e1:fe:ae:5b:e3:6c:86:31:cf:9c:8e:d1:82:
         7e:51:14:8a:49:fd:f8:35:1b:35:66:d4:1e:e9:84:d9:34:a0:
         9c:59:33:28:f3:d5:75:92:7c:71:a4:9e:4e:c7:b3:c5:dc:8b:
         a9:52:08:b6:88:aa:c6:7e:1e:07:18:c8:53:0a:01:bc:01:d7:
         d3:f5:2f:67:19:fa:ca:87:fb:dd:69:09:39:46:26:98:e6:32:
         da:4c:fd:f8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURmcPMSVf8OAdwoePSPSJNeZ5JoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QwOUQ4RUE4RTkxMDZBNkRGMTY0N0M5RUREQUNFRUNE
NERBMjlGMzAeFw0yNjA1MDcxMzQ4MTFaFw0yNzA1MDYxMzUzMTFaMDMxMTAvBgNV
BAMTKEEwMkM2RTI5REM1OEY3MDhEODU1NzYxREEwRjhENjk3QTVCNTUxREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9pVTJGVVnTS+WfFl2dJpT8EN
CPRXNIlg+5dhIXBTHYLPTTqaoYTtgmG698zHxS6vfE1QtU50VDxi6T08LNiAyBg0
GulXJIX4cmVyfE6vunBPvZ6u+c1j2eSY6C0wuDnUX7Pb2KiNi1XTWrf89GJ+PVwv
B+oWOuWglRpJWKD1kb/5mF2wYj2aM8pCXCc4DWTFqSTAGh44oB45tFxO/JSfGUFM
/o0ELODPURdE3PCFj6KWr0qTekQ739lsEkkGl2w1Z4R87+UY/Qf4CQ9x55SVnXMk
Nqu85F5/pgx0ON4ZlLcJhzStbhLWQQ44/tNr8PuBLaw+Aq41EJolvMq3jSJJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUoCxuKdxY9wjYVXYdoPjWl6W1UdswHwYDVR0j
BBgwFoAUfQnY6o6RBqbfFkfJ7drO7NTaKfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmppdW0zNWhIWXk5dnNieWNFb05peGs3OXdUOTRjOGhVZVJWNTk0d2RW
U0wvMC83RDA5RDhFQThFOTEwNkE2REYxNjQ3QzlFRERBQ0VFQ0Q0REEyOUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdEMDlEOEVBOEU5MTA2QTZE
RjE2NDdDOUVEREFDRUVDRDREQTI5RjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJqaXVtMzVoSFl5OXZzYnljRW9OaXhrNzl3VDk0YzhoVWVSVjU5NHdkVlNMLzAv
MzIzODMwMzQzYTMzMzMzNzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQzeDANBgkqhkiG9w0BAQsFAAOCAQEAfwjpI0s+
wEIZGJxWt9OI63Tyo4Ah49qEGKUUIOoRkZ5IzoMCRUg+7WqR2DDa0GgT9KLnAUA4
GgTKxgmpQIQJjBN5aKyGk9AgJLfCHVfKMB2v7qaeFrVa3sn793gLOT/zCYO8+M6g
TyOtMdJ4tLD47+Hf/F2heO6M+dnbb74Re5awst537lUpkx+XJpHlFJuKCPmKmaIc
M0JN2eN8sdUSQ7zz2Ajw7Rbh/q5b42yGMc+cjtGCflEUikn9+DUbNWbUHumE2TSg
nFkzKPPVdZJ8caSeTsezxdyLqVIItoiqxn4eBxjIUwoBvAHX0/UvZxn6yof73WkJ
OUYmmOYy2kz9+A==
-----END CERTIFICATE-----
Generated at Wed May 13 16:21:03 2026 by rpki-client