Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a3a2f33322d3332203d3e20323639343039.roa
File:                     323830343a363432343a3a2f33322d3332203d3e20323639343039.roa (raw, json)
Hash identifier:          ZO6/23bqjocA9sSLap8Xp+x9XiQi7HCvwyuhk/UoVm4=
Subject key identifier:   E6:23:31:F2:3C:83:7B:05:2E:40:FF:FD:FD:0D:33:E5:68:60:2D:7A
Certificate issuer:       /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial:       1C87227A5CE32A9C5B53E33D1FB94E5FB290E998
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a3a2f33322d3332203d3e20323639343039.roa
Signing time:             Sun 03 May 2026 20:04:33 +0000
ROA not before:           Sun 03 May 2026 19:59:33 +0000
ROA not after:            Sun 02 May 2027 20:04:33 +0000
asID:                     269409
IP address blocks:        2804:6424::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
                          rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:87:22:7a:5c:e3:2a:9c:5b:53:e3:3d:1f:b9:4e:5f:b2:90:e9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
        Validity
            Not Before: May  3 19:59:33 2026 GMT
            Not After : May  2 20:04:33 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:f3:6d:ba:76:b5:55:5f:05:e3:51:22:36:
                    eb:9b:4a:12:2d:c2:e4:29:ab:4e:ca:6e:0a:8e:d7:
                    2e:cf:13:0b:7a:7c:10:c7:52:f6:07:0d:7e:94:f9:
                    51:f9:be:c9:3d:5c:07:20:b7:e5:6b:1a:93:d5:3b:
                    7c:83:40:f9:80:73:26:ee:88:4d:91:e1:55:ff:60:
                    96:b7:91:52:5b:93:7b:32:1e:5a:14:f9:93:90:76:
                    61:a2:e1:f3:4d:8d:22:ed:c9:72:9c:e5:eb:19:59:
                    56:70:57:b2:a6:12:a3:ad:e6:bb:fa:23:da:d2:c5:
                    04:4b:03:e5:01:1e:af:01:11:34:44:01:ac:be:bb:
                    03:ef:21:ac:f7:c2:b6:9d:5f:c0:b1:0a:31:3c:65:
                    21:eb:14:e3:6b:0b:08:4a:48:8b:4f:33:4e:22:a8:
                    20:00:33:4b:be:f2:0b:9b:7b:dd:34:30:4c:10:4d:
                    ce:08:ea:e5:2d:8b:2b:dc:f9:4e:8e:ff:a3:2e:3c:
                    13:87:ac:c9:c7:f8:7e:c9:b4:43:dd:f5:ec:62:0e:
                    19:d3:9f:5a:44:a4:67:35:a6:80:5d:67:30:84:81:
                    dc:97:26:22:0a:02:b7:fd:7b:a7:f9:dd:dd:06:d0:
                    93:4d:20:2c:f5:6a:29:08:40:25:3e:2e:31:11:62:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:31:F2:3C:83:7B:05:2E:40:FF:FD:FD:0D:33:E5:68:60:2D:7A
            X509v3 Authority Key Identifier:
                keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a3a2f33322d3332203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6424::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:84:fd:5e:f9:7a:3d:29:46:89:77:c8:60:fd:40:a5:4f:
         19:36:59:da:99:30:5b:83:5b:b4:42:18:93:aa:df:35:f6:b3:
         2b:c1:c8:98:92:ec:b7:f2:3e:0b:e0:2b:21:27:cd:bc:c2:b1:
         18:ca:bb:00:19:24:38:5b:29:d9:61:bf:91:57:b1:d3:5c:ba:
         48:2f:5b:d3:fd:9a:d9:c9:49:44:02:fd:5c:4c:a1:1a:37:52:
         0a:1c:2f:cd:b0:5e:8e:3f:20:2c:2e:6d:61:02:e1:c3:de:fd:
         48:17:6d:5b:ae:5a:81:be:94:b4:1d:df:14:68:b7:51:d0:cf:
         d6:f8:3e:b4:1b:d6:2d:63:65:ca:32:a1:bf:5d:70:fc:2e:b9:
         70:0c:9a:d4:3a:b4:21:46:4b:7e:4a:d4:f3:08:0b:ef:59:52:
         56:5d:5f:10:34:17:61:bb:fc:ad:b5:77:25:3c:38:5e:d8:19:
         46:f8:d8:78:4c:e7:10:3b:3f:2d:75:59:fc:2b:fe:ae:92:cf:
         67:f9:3a:9c:e7:4d:b4:0c:85:a3:c5:35:68:e5:a8:21:4e:08:
         e4:87:df:91:18:29:b8:0c:a3:49:1b:81:76:c2:9c:6f:9e:07:
         3d:37:57:c2:7d:7f:5d:13:51:c7:3e:18:be:fb:db:e4:b3:64:
         9e:95:ae:0c
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUHIcielzjKpxbU+M9H7lOX7KQ6ZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY5NjJEM0JDMjI1OTE4MUJGNjgxN0Q0MENDMzgxRTAx
NTBDOTc0MDAeFw0yNjA1MDMxOTU5MzNaFw0yNzA1MDIyMDA0MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkM1MEYzNkRCQTc2QjU1NTVG
MDVFMzUxMjIzNkVCOUI0QTEyMkRDMkU0MjlBQjRFQ0E2RTBBOEVENzJFQ0YxMzBC
N0E3QzEwQzc1MkY2MDcwRDdFOTRGOTUxRjlCRUM5M0Q1QzA3MjBCN0U1NkIxQTkz
RDUzQjdDODM0MEY5ODA3MzI2RUU4ODREOTFFMTU1RkY2MDk2Qjc5MTUyNUI5MzdC
MzIxRTVBMTRGOTkzOTA3NjYxQTJFMUYzNEQ4RDIyRURDOTcyOUNFNUVCMTk1OTU2
NzA1N0IyQTYxMkEzQURFNkJCRkEyM0RBRDJDNTA0NEIwM0U1MDExRUFGMDExMTM0
NDQwMUFDQkVCQjAzRUYyMUFDRjdDMkI2OUQ1RkMwQjEwQTMxM0M2NTIxRUIxNEUz
NkIwQjA4NEE0ODhCNEYzMzRFMjJBODIwMDAzMzRCQkVGMjBCOUI3QkREMzQzMDRD
MTA0RENFMDhFQUU1MkQ4QjJCRENGOTRFOEVGRkEzMkUzQzEzODdBQ0M5QzdGODdF
QzlCNDQzRERGNUVDNjIwRTE5RDM5RjVBNDRBNDY3MzVBNjgwNUQ2NzMwODQ4MURD
OTcyNjIyMEEwMkI3RkQ3QkE3RjlEREREMDZEMDkzNEQyMDJDRjU2QTI5MDg0MDI1
M0UyRTMxMTE2MkE4NTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvFDzbbp2tVVfBeNRIjbrm0oSLcLkKatOym4KjtcuzxMLenwQx1L2
Bw1+lPlR+b7JPVwHILflaxqT1Tt8g0D5gHMm7ohNkeFV/2CWt5FSW5N7Mh5aFPmT
kHZhouHzTY0i7clynOXrGVlWcFeyphKjrea7+iPa0sUESwPlAR6vARE0RAGsvrsD
7yGs98K2nV/AsQoxPGUh6xTjawsISkiLTzNOIqggADNLvvILm3vdNDBMEE3OCOrl
LYsr3PlOjv+jLjwTh6zJx/h+ybRD3fXsYg4Z059aRKRnNaaAXWcwhIHclyYiCgK3
/Xun+d3dBtCTTSAs9WopCEAlPi4xEWKoUwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FOYjMfI8g3sFLkD//f0NM+VoYC16MB8GA1UdIwQYMBaAFP+WLTvCJZGBv2gX1AzD
geAVDJdAMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh1M0ozUTlkTXlKWW9x
VkhXQmtrVGNYcXBuTUdkRktoN1RaR1FwTXQ4U2NILzAvRkY5NjJEM0JDMjI1OTE4
MUJGNjgxN0Q0MENDMzgxRTAxNTBDOTc0MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GRjk2MkQzQkMyMjU5MTgxQkY2ODE3RDQwQ0MzODFFMDE1MEM5
NzQwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84dTNKM1E5ZE15SllvcVZIV0Jr
a1RjWHFwbk1HZEZLaDdUWkdRcE10OFNjSC8wLzMyMzgzMDM0M2EzNjM0MzIzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM0MzAzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
ZCQwDQYJKoZIhvcNAQELBQADggEBAETAhP1e+Xo9KUaJd8hg/UClTxk2WdqZMFuD
W7RCGJOq3zX2syvByJiS7LfyPgvgKyEnzbzCsRjKuwAZJDhbKdlhv5FXsdNcukgv
W9P9mtnJSUQC/VxMoRo3UgocL82wXo4/ICwubWEC4cPe/UgXbVuuWoG+lLQd3xRo
t1HQz9b4PrQb1i1jZcoyob9dcPwuuXAMmtQ6tCFGS35K1PMIC+9ZUlZdXxA0F2G7
/K21dyU8OF7YGUb42HhM5xA7Py11Wfwr/q6Sz2f5OpznTbQMhaPFNWjlqCFOCOSH
35EYKbgMo0kbgXbCnG+eBz03V8J9f10TUcc+GL772+SzZJ6Vrgw=
-----END CERTIFICATE-----
Generated at Wed May 13 17:01:59 2026 by rpki-client