Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/323830343a353434303a3a2f33322d3334203d3e20323638363337.roa
File:                     323830343a353434303a3a2f33322d3334203d3e20323638363337.roa (raw, json)
Hash identifier:          TXvy1mDXek4LY4kAcAxDoBlRS67zE0c71UwH4JxZttw=
Subject key identifier:   F9:EE:73:91:7A:A6:A5:78:FC:BA:49:20:EE:89:65:19:B6:5D:DD:B7
Certificate issuer:       /CN=2377DF7A371509E2CBD9F6DEC7CE28154D9C4550
Certificate serial:       3353989CA27D6DE4687CC68455EF363A3C5E6090
Authority key identifier: 23:77:DF:7A:37:15:09:E2:CB:D9:F6:DE:C7:CE:28:15:4D:9C:45:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/323830343a353434303a3a2f33322d3334203d3e20323638363337.roa
Signing time:             Fri 08 May 2026 15:41:09 +0000
ROA not before:           Fri 08 May 2026 15:36:09 +0000
ROA not after:            Fri 07 May 2027 15:41:09 +0000
asID:                     268637
IP address blocks:        2804:5440::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.crl
                          rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:53:98:9c:a2:7d:6d:e4:68:7c:c6:84:55:ef:36:3a:3c:5e:60:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2377DF7A371509E2CBD9F6DEC7CE28154D9C4550
        Validity
            Not Before: May  8 15:36:09 2026 GMT
            Not After : May  7 15:41:09 2027 GMT
        Subject: CN=F9EE73917AA6A578FCBA4920EE896519B65DDDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:97:f7:94:02:02:f4:c7:7a:1e:0f:b7:34:
                    b2:a3:26:ae:d4:3d:e9:90:fc:cb:ba:fe:f6:41:23:
                    3c:2c:d0:b2:e6:fc:ba:b7:93:5b:03:f4:00:3d:ac:
                    11:67:ba:78:1d:8c:a5:0f:cb:dd:a1:30:5e:b3:8a:
                    c1:1f:ff:92:6c:28:76:a9:f4:48:ca:3c:9f:94:44:
                    df:6b:0c:87:27:4c:87:36:60:d8:5c:bb:d5:08:a1:
                    15:c7:2e:40:09:be:87:bc:31:6e:e4:e7:88:05:0e:
                    ab:9f:87:e8:33:7d:97:69:6d:22:fa:0c:9a:9f:54:
                    c2:6b:00:0f:a6:0d:84:22:bc:34:b8:46:5b:b2:54:
                    52:4f:36:71:37:34:92:94:f8:06:8f:0a:e9:7c:c2:
                    5a:6f:ec:2f:d0:9e:91:7f:f4:ea:2b:74:ef:c7:9a:
                    f5:7b:ea:a3:96:15:49:8a:e7:0c:f4:2c:d9:50:0a:
                    1b:45:2f:65:9f:fc:2d:2f:b2:a3:a0:f1:c4:50:7a:
                    2f:64:1a:b3:2f:b8:38:0a:b0:56:07:aa:07:2c:a5:
                    63:7b:6f:f0:7e:5a:da:8c:75:65:1f:eb:a7:bf:78:
                    8c:93:ca:37:92:56:0c:e7:d3:04:60:65:16:de:64:
                    9e:b3:64:7d:25:2a:e2:04:22:98:fa:36:b2:9a:6e:
                    10:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EE:73:91:7A:A6:A5:78:FC:BA:49:20:EE:89:65:19:B6:5D:DD:B7
            X509v3 Authority Key Identifier:
                keyid:23:77:DF:7A:37:15:09:E2:CB:D9:F6:DE:C7:CE:28:15:4D:9C:45:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2377DF7A371509E2CBD9F6DEC7CE28154D9C4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/323830343a353434303a3a2f33322d3334203d3e20323638363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5440::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:b2:36:9c:9f:7e:5e:d5:33:6d:04:f3:27:df:64:b7:7d:48:
         67:ec:a0:a1:1c:79:8a:90:d4:38:f0:67:43:fa:8b:79:95:56:
         e1:e1:14:e8:6b:82:44:29:6a:24:3b:c5:30:03:51:b4:80:c5:
         96:34:86:72:45:07:a8:5a:21:71:eb:b1:76:2a:f5:37:da:17:
         ea:c9:9c:ab:dd:39:23:d8:d6:22:c6:23:22:6c:70:44:9f:62:
         e0:2f:6b:7d:6d:98:53:a0:87:3c:d7:71:9f:61:30:f2:d4:9c:
         1a:cf:29:78:bf:78:fa:c3:b5:5f:4e:37:4d:1a:f2:e0:ac:ee:
         0a:49:d0:bb:25:4c:bd:67:4b:39:47:3f:f1:af:bb:a4:ec:7d:
         ce:2e:d9:05:9b:a3:7a:b4:5c:3c:47:b4:b7:c6:7b:53:54:04:
         e1:f6:23:e8:00:fc:96:ec:d5:f6:a4:40:72:0a:67:21:08:b1:
         2c:53:5c:25:1b:d2:5b:ef:1b:9b:a9:94:a3:e2:0b:ec:a9:d5:
         53:2d:8e:1a:bf:6d:b6:96:d3:f8:ee:74:18:d0:8c:08:b2:68:
         46:bc:dc:f9:d2:32:0b:95:88:e7:49:7c:85:bc:de:c8:de:8a:
         30:85:72:8c:21:aa:ec:6f:12:14:cb:a6:60:28:ae:49:5c:5f:
         88:28:66:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:42:37 2026 by rpki-client