Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa
File:                     323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa (raw, json)
Hash identifier:          NUScZ+Q8UxhoPp3FQA5ELis+f4zQvCeDC6yyFzJ6EmY=
Subject key identifier:   B3:EF:AE:D5:31:F6:CC:58:48:F6:02:72:69:A5:30:A3:02:F8:51:1E
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       2A1DE78BD712B4B60340071CBCC077B8E94A19A1
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa
Signing time:             Thu 23 Apr 2026 14:00:01 +0000
ROA not before:           Thu 23 Apr 2026 13:55:01 +0000
ROA not after:            Thu 22 Apr 2027 14:00:01 +0000
asID:                     269107
IP address blocks:        2804:5f88:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1d:e7:8b:d7:12:b4:b6:03:40:07:1c:bc:c0:77:b8:e9:4a:19:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Apr 23 13:55:01 2026 GMT
            Not After : Apr 22 14:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:b0:7b:d9:25:49:d1:4c:0f:b2:e4:37:11:
                    ff:3d:4d:03:9c:26:6f:7a:9f:06:1f:bc:06:f2:65:
                    dd:fc:c0:4f:96:20:72:af:b8:95:9a:ae:d4:79:20:
                    f7:f7:ee:f1:c8:0f:e5:ff:04:64:5e:93:0f:ad:70:
                    39:45:93:fc:2d:bf:46:cd:34:43:1b:71:d8:67:45:
                    f6:16:af:c5:0f:96:99:21:09:e4:ac:9c:a3:b9:07:
                    d5:a5:ee:d8:3e:00:32:65:91:87:05:4a:df:08:c2:
                    2e:18:0b:fd:09:aa:5e:2e:67:71:1a:e4:6c:88:c2:
                    08:81:11:a6:e2:15:a9:0f:66:ee:d9:07:89:50:2e:
                    24:eb:41:c2:b4:29:00:0f:19:9a:21:b3:2b:92:af:
                    ef:3e:1a:6a:52:3e:4c:90:e5:a5:21:96:af:95:7f:
                    a8:3b:48:af:90:d4:9e:ad:a6:de:a9:c6:34:dc:2b:
                    07:f2:d8:50:ac:63:94:d5:0e:2c:63:84:78:fd:60:
                    38:56:ca:f2:36:06:14:7d:f6:06:ac:22:32:d3:64:
                    eb:60:35:c6:7e:b5:24:79:32:e6:42:40:a1:f9:54:
                    21:c9:aa:f7:0d:91:b7:e8:c9:dd:74:7d:f9:57:6d:
                    46:06:75:ed:25:38:bc:6e:1e:58:6a:03:a2:d3:de:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EF:AE:D5:31:F6:CC:58:48:F6:02:72:69:A5:30:A3:02:F8:51:1E
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:6d:a1:ec:64:9f:c0:df:26:8a:10:72:fa:ea:63:6a:f2:
         5b:90:e9:5a:ff:d6:f4:7e:33:c3:63:b2:d6:80:1f:dd:73:b7:
         fe:91:aa:bf:7a:0e:86:35:ff:b6:60:dd:77:92:03:25:89:a0:
         9d:cf:29:dd:33:a2:dc:01:e0:b6:6c:53:c5:e5:cc:8d:81:31:
         6a:ea:7c:51:99:cf:df:75:9a:d3:a3:8c:2c:e5:5d:03:bd:ff:
         8c:49:5f:ce:e0:9d:4f:14:b0:8a:b7:c3:9f:8f:60:20:78:79:
         e6:02:ac:56:d3:ab:7c:42:a5:22:28:a8:f5:20:43:88:0f:26:
         c5:90:82:4b:b2:ef:35:74:8b:45:36:d3:61:57:80:4e:8a:3e:
         2c:e4:18:c0:66:0b:4a:3c:7c:0e:36:71:40:eb:e9:d8:4d:b0:
         6c:fa:ff:a9:c3:a5:62:ff:bc:de:95:ef:19:0b:ef:df:97:3f:
         c5:5e:8b:61:bb:8a:c9:97:a8:3a:a0:b0:fb:ce:c4:63:fd:ef:
         f8:77:0a:51:de:bd:a0:9c:5c:90:ef:e5:dc:af:f6:9a:ac:84:
         f3:d1:ec:37:dc:01:9a:97:1a:e4:e8:43:f2:bd:1a:69:24:c7:
         d2:89:5b:34:58:40:ea:65:46:5c:50:2f:69:5d:6e:7b:bf:86:
         43:17:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:56:08 2026 by rpki-client