Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa
File:                     323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa (raw, json)
Hash identifier:          yJn0kmQWVPt1EDddmqT1oHc3Y2sWcN9+uOMqn46xDAA=
Subject key identifier:   1A:55:6D:98:B3:C5:84:F4:1A:73:42:57:31:04:07:A5:F1:5D:E3:7A
Certificate issuer:       /CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
Certificate serial:       0F0ADFD74BFB505183CC3E2AF62DD206B51860DC
Authority key identifier: 6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa
Signing time:             Fri 01 May 2026 11:18:51 +0000
ROA not before:           Fri 01 May 2026 11:13:51 +0000
ROA not after:            Fri 30 Apr 2027 11:18:51 +0000
asID:                     271137
IP address blocks:        2804:76d4:ff00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl
                          rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0a:df:d7:4b:fb:50:51:83:cc:3e:2a:f6:2d:d2:06:b5:18:60:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
        Validity
            Not Before: May  1 11:13:51 2026 GMT
            Not After : Apr 30 11:18:51 2027 GMT
        Subject: CN=1A556D98B3C584F41A734257310407A5F15DE37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cb:a7:57:1c:98:a6:3c:5b:ca:73:70:08:a7:
                    12:a0:0b:0d:3c:cd:3e:7a:43:6f:df:b2:91:dd:eb:
                    7f:28:ee:84:82:6e:13:73:46:92:7b:aa:8e:41:60:
                    f0:df:f1:a6:08:7b:b4:07:e0:ca:97:a6:3f:fe:ec:
                    6c:08:94:ad:7e:2a:69:61:d0:a4:14:df:47:7b:cc:
                    33:c4:87:ce:f1:75:c6:8f:b5:0a:e4:7a:fc:f2:21:
                    ff:74:ac:6a:e8:e1:7c:ca:23:9c:51:58:de:14:4a:
                    ee:d7:29:ed:43:12:a1:70:e6:d7:2f:2c:a0:9f:13:
                    24:34:68:23:ed:bc:42:ac:85:c2:d9:46:05:ff:b4:
                    b9:30:b1:19:e1:6e:14:6f:b0:fe:5f:ba:d8:f8:cf:
                    da:b8:dd:bd:6f:a2:23:ae:b1:c0:d9:8b:65:ba:e8:
                    f7:4c:aa:aa:a3:45:50:82:ec:ec:a4:15:23:04:fe:
                    11:d8:eb:27:02:5e:2c:5d:e3:7c:2e:88:7f:6e:0e:
                    4a:65:7c:3d:42:69:88:8d:cd:47:a2:c8:81:c7:44:
                    c0:29:14:41:14:ee:cb:13:29:16:ed:ba:6e:05:f4:
                    61:29:3d:4a:95:fc:e8:b0:60:96:d5:58:03:67:e5:
                    1d:b7:56:76:51:46:bb:46:da:4e:c5:c2:1d:12:33:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:55:6D:98:B3:C5:84:F4:1A:73:42:57:31:04:07:A5:F1:5D:E3:7A
            X509v3 Authority Key Identifier:
                keyid:6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76d4:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:43:90:33:68:96:31:7c:43:d4:b6:d7:4b:f8:75:82:1e:30:
         19:97:e8:b8:67:4c:53:28:41:4f:ae:dc:44:a6:ce:8c:6c:89:
         b1:b9:b1:2c:85:31:db:2a:2d:59:6c:37:6c:5c:8f:37:06:26:
         ff:a1:68:5b:7a:e8:fb:2e:ff:71:75:5e:6c:68:68:3e:ef:e5:
         57:e8:6f:24:17:2e:cc:45:70:5f:10:5f:7a:84:0d:97:a2:52:
         fc:9f:22:a8:3f:d2:a2:c2:13:44:56:46:a2:d0:f5:33:67:50:
         69:93:c0:4b:65:56:a0:45:24:8d:20:53:12:73:92:d8:58:4b:
         be:3d:f4:3a:6e:5f:f1:c8:b7:4d:a2:29:a7:2a:e4:4c:6e:89:
         90:4b:b9:ed:ef:06:b3:84:ae:29:34:d4:db:45:bb:11:ce:ff:
         4d:2d:61:1f:64:c7:d5:9d:ee:de:af:e4:c8:2c:74:87:a3:ac:
         1e:56:58:33:c1:85:c3:82:0c:e9:59:24:ba:b5:ca:4b:da:91:
         7c:2d:46:20:39:b9:02:3d:30:cf:84:c6:d9:2a:49:95:6e:b3:
         b4:04:8c:af:fb:e0:eb:b8:55:f3:95:e0:2c:a5:6e:d2:03:ff:
         cf:9b:c0:86:67:69:ac:c9:93:8f:2b:88:78:1a:37:a6:b1:31:
         66:c8:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:52:33 2026 by rpki-client