Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a323030303a3a2f33362d3336203d3e20323635343631.roa
File:                     323830343a333437633a323030303a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier:          8t7rYSus80Oi2gEGvY/X+A8RiIaHUFWos5VHTkcbNeU=
Subject key identifier:   8F:EB:FB:4C:F8:C9:1A:F9:C5:88:B4:E5:3E:A1:A3:80:EF:27:1F:17
Certificate issuer:       /CN=065E3409E65889AAF6B851D59C66CD22E4619409
Certificate serial:       645650B06339536C8DED5EDFF3C1DFC084A5FE7B
Authority key identifier: 06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a323030303a3a2f33362d3336203d3e20323635343631.roa
Signing time:             Wed 11 Mar 2026 13:53:46 +0000
ROA not before:           Wed 11 Mar 2026 13:48:46 +0000
ROA not after:            Wed 10 Mar 2027 13:53:46 +0000
asID:                     265461
IP address blocks:        2804:347c:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:56:50:b0:63:39:53:6c:8d:ed:5e:df:f3:c1:df:c0:84:a5:fe:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065E3409E65889AAF6B851D59C66CD22E4619409
        Validity
            Not Before: Mar 11 13:48:46 2026 GMT
            Not After : Mar 10 13:53:46 2027 GMT
        Subject: CN=8FEBFB4CF8C91AF9C588B4E53EA1A380EF271F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:c6:3f:46:24:1c:43:78:b8:06:35:21:a8:
                    d9:21:06:ac:47:6b:5f:ad:85:b1:cd:e7:b2:53:8e:
                    28:06:15:e3:cc:da:81:c8:40:6c:1f:db:33:fa:d6:
                    42:d6:17:63:46:c7:ce:b3:3a:7e:15:c7:be:c1:52:
                    51:cc:06:cf:b9:39:6e:34:7e:7d:0a:cb:38:77:0e:
                    25:17:c1:09:a0:d2:63:94:eb:36:bf:4d:2c:f4:fb:
                    54:73:aa:a6:df:1c:cf:c0:0c:34:12:f7:8d:17:18:
                    75:e9:8b:54:c1:f9:93:57:36:fc:e3:fb:4b:b2:8b:
                    51:a7:20:f3:10:d8:12:1c:c8:ca:e1:51:ad:6f:95:
                    fb:27:45:5b:43:74:3d:90:28:6d:54:26:4f:23:5b:
                    d4:56:8c:02:18:09:59:de:9d:96:fa:a1:44:dd:06:
                    aa:67:f9:ad:68:1e:da:d7:5b:86:3f:6f:d5:56:49:
                    fb:c2:4a:11:23:ca:6e:6f:a5:a0:14:f8:6b:bc:13:
                    c6:41:7c:33:56:3a:2a:72:37:4a:fa:6a:d1:59:e8:
                    2e:a1:f5:cb:c0:9e:90:84:27:c6:f2:15:0e:c0:ba:
                    ae:df:88:8f:53:8b:61:5c:39:d1:1b:83:a6:ba:a3:
                    e8:e0:18:ac:d2:03:86:60:fd:ff:a8:9a:16:64:16:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:FB:4C:F8:C9:1A:F9:C5:88:B4:E5:3E:A1:A3:80:EF:27:1F:17
            X509v3 Authority Key Identifier:
                keyid:06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a323030303a3a2f33362d3336203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:75:f1:af:f3:f5:f5:e6:86:12:35:2f:9d:69:44:65:85:
         27:6c:a1:cd:b1:86:88:bb:85:d9:5c:28:2a:39:84:7b:7a:3f:
         e3:16:9f:4a:36:e6:3e:b0:32:18:b7:f6:51:20:a9:9c:41:53:
         f0:ea:09:a9:ff:4d:7a:ad:9a:8b:fa:f8:9a:1c:31:f8:31:db:
         94:12:68:d6:d5:72:46:c1:e4:19:d0:cd:2d:1c:93:66:de:6a:
         84:41:84:b4:53:f8:9f:83:8e:9b:61:f1:99:fc:7e:51:ab:77:
         41:70:e0:67:92:8f:7b:88:52:1e:ff:1c:6c:0d:a8:57:d9:6c:
         1a:26:5e:c7:f9:42:dc:76:fe:66:3c:06:6a:e1:3d:2a:6e:08:
         1d:52:55:cc:c5:3a:0b:d6:7b:50:71:46:db:49:ef:b8:84:b5:
         c8:53:1f:c1:45:3d:d8:76:78:62:22:d4:37:e5:67:00:c5:aa:
         81:6b:c9:59:14:c7:5d:eb:74:75:dd:4f:51:75:fa:d7:26:d7:
         84:12:b3:4a:bd:02:71:24:c4:1c:32:e6:2a:42:dc:af:eb:b5:
         37:04:f3:b8:8b:6c:7e:a9:b0:6d:dd:50:1f:54:25:30:ef:36:
         a6:7c:44:f2:76:37:00:b8:28:75:18:ab:83:81:f6:a3:b7:c5:
         1c:ee:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:12:29 2026 by rpki-client