Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/323830343a353230383a3a2f33322d3332203d3e203238353934.roa
File:                     323830343a353230383a3a2f33322d3332203d3e203238353934.roa (raw, json)
Hash identifier:          /ItJhPJ6qImBVtx69hraL5L7SdcSGyOQ+KdGHdcjkZQ=
Subject key identifier:   B6:BA:12:A1:D6:D4:6C:D0:63:1C:15:1B:39:38:36:72:3E:3C:BF:48
Certificate issuer:       /CN=0ADE98861008384C202CF7E0C8750CB9D0883315
Certificate serial:       560A78522F3DFAE92BB89DDC32D7479469EBA4A1
Authority key identifier: 0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/323830343a353230383a3a2f33322d3332203d3e203238353934.roa
Signing time:             Wed 01 Jul 2026 14:48:23 +0000
ROA not before:           Wed 01 Jul 2026 14:43:23 +0000
ROA not after:            Wed 30 Jun 2027 14:48:23 +0000
asID:                     28594
IP address blocks:        2804:5208::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0a:78:52:2f:3d:fa:e9:2b:b8:9d:dc:32:d7:47:94:69:eb:a4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADE98861008384C202CF7E0C8750CB9D0883315
        Validity
            Not Before: Jul  1 14:43:23 2026 GMT
            Not After : Jun 30 14:48:23 2027 GMT
        Subject: CN=B6BA12A1D6D46CD0631C151B393836723E3CBF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:59:e6:0e:b5:26:10:5f:25:72:22:a2:16:
                    aa:d4:6e:0f:f8:16:2a:69:a1:88:a1:c5:5b:80:55:
                    b5:36:58:2f:d8:f4:74:44:22:8f:48:3a:61:02:25:
                    bc:a3:a9:23:7e:05:21:22:bd:53:77:aa:f3:94:37:
                    c1:b9:48:e5:b9:8f:ae:e8:e0:43:1a:68:eb:4c:ac:
                    92:9f:e6:ff:46:bd:d9:a8:8e:4c:ff:0a:e1:a0:53:
                    66:1d:da:b2:68:96:a1:f4:83:16:f4:bb:4a:54:c2:
                    66:36:81:49:30:c9:b2:d7:7f:cb:09:6d:6b:66:ed:
                    68:58:e6:be:f8:18:ea:70:d3:97:f8:2a:36:d5:6c:
                    92:3d:1c:8f:7e:43:02:c7:02:55:b8:19:90:c3:37:
                    4c:13:37:ef:5a:5b:b9:84:a6:41:80:dd:81:29:d6:
                    e7:33:9f:38:ca:d0:40:60:4f:2c:85:95:6b:b2:0a:
                    2e:9f:38:ed:25:55:f0:51:47:00:ae:ab:d1:51:7d:
                    bc:f7:16:11:ee:16:29:c5:4b:01:7f:70:71:c3:5e:
                    99:0c:2e:32:fa:4d:f4:06:6d:7b:65:93:17:8b:94:
                    66:4f:81:4c:b7:e1:e3:96:d7:73:1e:92:6d:2a:38:
                    c4:c8:72:2b:d1:8e:15:81:4c:95:be:43:a8:04:02:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BA:12:A1:D6:D4:6C:D0:63:1C:15:1B:39:38:36:72:3E:3C:BF:48
            X509v3 Authority Key Identifier:
                keyid:0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/323830343a353230383a3a2f33322d3332203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:d5:f5:e2:f5:0c:9e:38:ff:fd:e1:e9:f3:ca:57:66:5f:13:
         59:17:a3:69:3a:2e:70:fd:be:67:0d:48:dc:ba:6f:6b:ac:60:
         8c:4c:fd:64:b2:f3:06:69:d7:b9:70:34:e3:ca:60:5a:2a:86:
         c4:b2:c7:62:2d:e5:fd:ab:52:c3:b4:6a:35:2d:59:48:05:09:
         97:6e:65:93:5a:d6:b1:39:7a:41:34:c9:e6:54:0b:3d:5e:b0:
         73:5a:a1:70:e3:b5:9d:89:cf:a9:07:f3:da:6c:0b:95:4e:fb:
         11:2b:39:87:20:28:5d:14:5e:b7:e4:8a:06:a5:68:0b:0f:5c:
         c8:3b:94:b5:b7:c0:ff:57:3a:40:f6:c4:2e:55:09:35:65:a2:
         4d:60:10:54:88:5f:53:e8:7f:28:78:25:32:ca:7d:a7:79:fb:
         5c:2e:20:0c:9b:b5:d0:dd:ff:21:8f:f1:21:39:e3:70:2d:44:
         b2:23:04:09:ed:44:3e:a7:d0:16:93:4a:05:3e:a7:72:78:fe:
         47:7d:04:e3:58:5b:40:e1:a7:90:3c:a8:8b:ec:a8:6d:a3:7d:
         b7:d9:ef:f4:c9:7f:ba:a0:a3:44:2f:cf:59:50:ac:7a:ec:24:
         3a:fc:fb:8d:33:3f:4b:a8:d3:ba:95:dc:fd:a6:93:c8:06:bb:
         61:ff:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:19 2026 by rpki-client