Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/323830343a393137303a383030303a3a2f33332d3333203d3e20323734363431.roa
File:                     323830343a393137303a383030303a3a2f33332d3333203d3e20323734363431.roa (raw, json)
Hash identifier:          2WemNMvBm8IjSY0IoWEj9RHWl+wUdv8vfx7BHIhUUdQ=
Subject key identifier:   C9:9D:B8:B3:CE:B1:69:68:F1:95:76:0D:AA:8E:32:9F:94:9D:77:9D
Certificate issuer:       /CN=F3AB27BA263D3671CDF55E55E8D271166F03ED5B
Certificate serial:       7E4C2D548557BDF279E462269EA30B716719D33E
Authority key identifier: F3:AB:27:BA:26:3D:36:71:CD:F5:5E:55:E8:D2:71:16:6F:03:ED:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/323830343a393137303a383030303a3a2f33332d3333203d3e20323734363431.roa
Signing time:             Tue 23 Jun 2026 11:17:10 +0000
ROA not before:           Tue 23 Jun 2026 11:12:10 +0000
ROA not after:            Tue 22 Jun 2027 11:17:10 +0000
asID:                     274641
IP address blocks:        2804:9170:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.crl
                          rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4c:2d:54:85:57:bd:f2:79:e4:62:26:9e:a3:0b:71:67:19:d3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AB27BA263D3671CDF55E55E8D271166F03ED5B
        Validity
            Not Before: Jun 23 11:12:10 2026 GMT
            Not After : Jun 22 11:17:10 2027 GMT
        Subject: CN=C99DB8B3CEB16968F195760DAA8E329F949D779D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:71:a1:cf:fc:fa:39:d0:72:f4:7d:07:21:
                    4b:84:0f:55:c0:52:4b:03:be:d6:94:6b:35:f8:af:
                    89:99:49:76:46:1d:2e:a4:cd:5f:4e:7a:9c:f7:58:
                    f4:78:8c:4e:aa:7b:fd:8e:97:a0:8e:19:ae:91:1d:
                    31:1f:f8:6e:e9:c9:31:3d:0c:98:cc:d1:00:8c:eb:
                    a5:82:d3:83:91:6d:7d:e8:3f:f8:09:a5:d9:ad:e3:
                    14:28:23:77:02:ca:b0:10:7c:f2:7f:a7:20:84:b2:
                    13:e4:21:6b:3c:13:ac:78:c6:bf:35:76:17:3e:fe:
                    cd:cd:b3:fc:45:c0:03:2e:dc:99:2d:70:4c:80:d4:
                    2e:b4:d3:15:e3:47:64:5a:a4:fd:6d:89:2a:76:ae:
                    f4:ce:a5:cd:bd:c9:71:bf:a4:4e:b1:56:32:4a:cd:
                    fc:5d:49:1b:0a:64:6f:6c:d6:35:f9:50:c8:7d:70:
                    e2:66:06:11:9b:99:97:56:52:d1:90:4f:19:6e:b2:
                    7f:b0:41:25:4f:50:66:25:19:56:fc:23:65:e9:44:
                    af:8b:e7:73:74:86:75:d7:13:3f:63:c4:20:0b:f1:
                    f0:12:9f:08:57:cf:d2:34:11:3b:59:2e:21:9a:44:
                    62:55:cc:ec:e4:a8:39:05:47:1a:ba:34:c2:74:1b:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9D:B8:B3:CE:B1:69:68:F1:95:76:0D:AA:8E:32:9F:94:9D:77:9D
            X509v3 Authority Key Identifier:
                keyid:F3:AB:27:BA:26:3D:36:71:CD:F5:5E:55:E8:D2:71:16:6F:03:ED:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/323830343a393137303a383030303a3a2f33332d3333203d3e20323734363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9170:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         45:7c:a8:e2:0e:c4:e5:34:99:fa:dc:03:3e:a1:b1:81:ea:f9:
         90:53:de:1d:0b:e8:8d:19:30:ab:be:2a:d9:f1:3d:e2:17:74:
         7d:1a:18:e4:1a:45:89:13:57:1e:37:92:3f:17:06:6c:e1:df:
         f9:16:5c:51:b5:1e:37:9a:20:d3:ac:ae:33:2a:87:f3:fc:4e:
         a7:bd:55:f6:cb:dc:40:55:89:9c:2b:7d:32:b0:5e:4c:ce:a9:
         96:cc:b1:01:56:b8:c1:03:a2:4e:64:3e:6a:3d:ef:0d:47:72:
         4d:d5:9b:77:39:45:7c:a7:c0:22:83:c2:a8:1c:de:b4:40:61:
         56:ca:3c:6a:9b:a4:cd:99:3a:ed:44:79:0d:7c:d0:eb:09:db:
         df:e6:96:ca:e6:3f:66:94:2d:56:a0:27:e9:bb:2a:be:ab:c3:
         a8:a0:64:c3:a7:ef:a8:76:e4:1c:f9:6b:05:b8:d3:36:49:e0:
         6b:bd:ba:cd:c6:f7:f6:62:9a:75:a2:83:8d:ae:a4:ab:21:c9:
         73:16:c1:a0:93:5c:96:49:f3:ea:d4:dd:89:e5:20:51:3c:84:
         ad:ff:e9:a9:06:79:fd:4d:71:bf:7a:dd:fa:51:59:96:78:5e:
         02:48:73:54:39:83:fb:ef:de:5e:a2:83:b6:41:b8:03:7e:6d:
         60:b0:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:37 2026 by rpki-client