Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a3a2f33362d313238203d3e20323632383933.roa
File:                     323830343a3663343a3a2f33362d313238203d3e20323632383933.roa (raw, json)
Hash identifier:          IdQ+eR+2usAZno0iLUJyKKitoGjtVjDcBLMy70ZiCak=
Subject key identifier:   9A:8E:94:FE:30:56:B4:22:83:B9:58:E0:A4:82:B8:7C:DD:88:AB:33
Certificate issuer:       /CN=665EFCBFABFCD6BCD560939857AA5CE775E9B630
Certificate serial:       02207AFC84FBDCBE91104502D65692DE322F1776
Authority key identifier: 66:5E:FC:BF:AB:FC:D6:BC:D5:60:93:98:57:AA:5C:E7:75:E9:B6:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665EFCBFABFCD6BCD560939857AA5CE775E9B630.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a3a2f33362d313238203d3e20323632383933.roa
Signing time:             Tue 30 Jun 2026 19:09:48 +0000
ROA not before:           Tue 30 Jun 2026 19:04:48 +0000
ROA not after:            Tue 29 Jun 2027 19:09:48 +0000
asID:                     262893
IP address blocks:        2804:6c4::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/665EFCBFABFCD6BCD560939857AA5CE775E9B630.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/665EFCBFABFCD6BCD560939857AA5CE775E9B630.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665EFCBFABFCD6BCD560939857AA5CE775E9B630.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:20:7a:fc:84:fb:dc:be:91:10:45:02:d6:56:92:de:32:2f:17:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665EFCBFABFCD6BCD560939857AA5CE775E9B630
        Validity
            Not Before: Jun 30 19:04:48 2026 GMT
            Not After : Jun 29 19:09:48 2027 GMT
        Subject: CN=9A8E94FE3056B42283B958E0A482B87CDD88AB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:de:bb:3e:c7:b4:d6:b3:bf:1a:a5:61:7c:
                    ef:6f:51:22:4a:10:2a:be:47:e3:91:33:9f:67:2b:
                    07:92:1f:ea:b0:f4:23:7d:1a:35:40:bd:7b:4d:84:
                    20:57:c1:e5:2b:e2:82:bc:fe:dc:93:25:f8:43:11:
                    7d:f1:a0:21:8e:9b:6a:94:a6:18:57:53:a7:b5:b9:
                    4c:24:42:09:00:e4:c4:6d:94:92:b6:3d:3e:b2:c7:
                    51:d3:a7:71:26:86:c5:4a:b2:0d:44:2a:33:a4:c4:
                    b3:fd:60:f0:8d:2b:7b:bd:9a:91:02:82:f5:7c:7a:
                    69:b6:d8:3c:8a:e3:6a:5b:3e:31:4e:41:7a:6d:4e:
                    02:e6:6c:9a:e7:f3:2b:67:5f:d7:e0:e3:60:4d:a9:
                    4f:78:7a:d4:00:d5:1c:97:0c:f1:2b:ef:7e:7d:1a:
                    67:57:ca:44:de:a1:3c:3c:ae:4d:3f:bf:55:16:ac:
                    91:e4:9a:94:04:83:f4:02:f3:67:12:c9:25:93:5c:
                    38:7b:6c:f3:34:06:7e:9c:38:e5:8f:bd:55:05:75:
                    c8:5d:04:4d:4c:8f:a7:9e:d7:65:c3:9f:65:ff:90:
                    13:3e:61:46:74:1a:22:0c:00:a0:f3:95:60:53:54:
                    78:9e:09:64:5d:34:7a:37:35:59:5d:02:51:74:cd:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8E:94:FE:30:56:B4:22:83:B9:58:E0:A4:82:B8:7C:DD:88:AB:33
            X509v3 Authority Key Identifier:
                keyid:66:5E:FC:BF:AB:FC:D6:BC:D5:60:93:98:57:AA:5C:E7:75:E9:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/665EFCBFABFCD6BCD560939857AA5CE775E9B630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665EFCBFABFCD6BCD560939857AA5CE775E9B630.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a3a2f33362d313238203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c4::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:58:e3:58:c7:5b:ef:7f:eb:cf:ae:89:65:f5:b1:dd:71:ed:
         93:de:40:a6:58:60:56:e3:97:cd:e8:a9:2b:e0:56:4f:9e:50:
         9f:0c:77:a5:bb:f0:cc:13:5a:47:83:80:a7:4f:49:9e:61:27:
         ac:53:72:bc:98:c2:c2:8f:47:b5:5a:60:99:1e:5b:a2:44:f0:
         6d:c5:ca:de:68:7e:40:f0:72:7f:03:fb:ad:27:a4:7b:ef:23:
         36:e4:6b:1f:bd:d8:d1:8f:20:66:c7:f4:a1:f3:0b:d8:2c:c4:
         30:b6:9e:b2:7f:d3:6f:69:1b:99:ec:79:e8:91:0b:eb:a5:55:
         bb:a5:99:8b:f0:4b:89:0b:98:a5:be:a3:d9:16:e7:80:2e:33:
         37:1b:97:55:a4:bf:7c:55:37:ad:e7:fc:1f:a4:41:8c:19:e5:
         a5:19:fd:be:ff:ab:2c:5f:d6:52:8e:2e:3a:7e:04:df:df:22:
         8e:cc:fb:b8:d3:6d:df:72:89:b3:f7:64:e5:66:67:4f:78:54:
         95:18:14:6a:ca:21:42:b8:93:df:21:8c:68:fe:e1:d1:72:a5:
         e7:76:cf:40:33:92:fe:e9:b7:9d:0f:09:4e:85:11:35:60:15:
         37:2f:d1:e4:56:22:ad:4d:90:ec:ea:12:2d:6c:34:6e:ef:23:
         af:f1:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:27:18 2026 by rpki-client