Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa
File:                     323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa (raw, json)
Hash identifier:          DD+p1+OtWcFxRM+iNqHsqnbPOR4DF1wfIAJw2QkBJnI=
Subject key identifier:   0E:74:8F:57:BA:36:18:43:77:97:4A:55:A6:4F:76:9E:AA:D1:A2:E9
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       01A00BE36806F369062DF22DE1650C2DF8EB074C
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa
Signing time:             Sat 04 Jul 2026 05:43:07 +0000
ROA not before:           Sat 04 Jul 2026 05:38:07 +0000
ROA not after:            Sat 03 Jul 2027 05:43:07 +0000
asID:                     270741
IP address blocks:        2804:70ac:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:0b:e3:68:06:f3:69:06:2d:f2:2d:e1:65:0c:2d:f8:eb:07:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Jul  4 05:38:07 2026 GMT
            Not After : Jul  3 05:43:07 2027 GMT
        Subject: CN=0E748F57BA36184377974A55A64F769EAAD1A2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:ba:b4:da:86:ae:22:51:cc:5d:07:50:4d:
                    56:fd:c3:a8:f2:bc:11:f9:f8:3b:e9:f2:a1:9a:35:
                    e3:6c:90:ff:61:5a:87:c7:2d:4e:87:87:84:6b:4b:
                    06:51:01:5a:dc:48:01:ac:4a:bd:7d:d7:c0:35:1e:
                    7d:de:1c:32:05:bc:7d:2b:1c:5a:58:82:4d:7d:19:
                    0d:ac:8c:a6:d8:4e:1a:a7:c3:42:cc:ab:19:08:9a:
                    62:9f:8f:f6:09:e7:c9:4c:d7:fd:c0:4a:6a:35:4a:
                    fd:80:d5:eb:e4:17:a6:79:74:e1:68:8b:00:9d:5d:
                    c0:ed:4b:d0:b8:f8:cf:4f:e4:8d:0f:fe:86:64:e9:
                    33:3d:5a:85:0c:aa:04:9d:58:8e:05:3d:94:de:ac:
                    b1:99:dc:69:c2:09:50:ed:08:ab:d0:69:16:21:93:
                    21:4a:c4:38:fb:80:07:1b:54:90:58:dd:06:f6:dc:
                    7f:47:16:e3:44:76:e4:c3:61:f6:9d:31:0e:46:dc:
                    cb:d7:ab:78:04:06:50:44:87:c2:3f:51:ab:ae:f5:
                    af:50:de:76:48:6b:ac:8a:e8:ca:a9:74:9c:b3:43:
                    86:8b:e4:e0:b1:4a:1e:8e:26:bf:6a:69:e8:05:e4:
                    99:7a:bd:b0:20:82:9a:a1:e9:9e:d8:15:71:83:bf:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:74:8F:57:BA:36:18:43:77:97:4A:55:A6:4F:76:9E:AA:D1:A2:E9
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70ac:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:68:3f:0b:8a:3c:4b:d2:b6:72:19:c3:cc:ba:4c:e2:bf:35:
         11:f3:d2:88:29:f9:0c:54:51:be:c6:07:78:43:9d:0a:e4:56:
         c0:5f:97:c3:9c:a9:e2:82:41:50:18:16:a7:c1:e3:72:eb:8f:
         02:06:8b:ab:e2:43:a9:45:4d:63:92:98:b5:23:a1:4b:25:ee:
         30:9c:f3:a9:82:59:8c:5d:01:2d:94:e8:fb:42:30:58:f1:89:
         63:61:71:22:2b:03:b7:3d:e8:f1:b9:4c:b7:06:c2:c8:90:eb:
         ce:9f:ca:e2:dd:c5:b4:9a:93:1a:9a:74:21:d4:d1:f8:7b:85:
         eb:fe:5f:f7:d0:fc:41:9b:4c:31:53:c1:82:0e:93:dd:4c:32:
         51:4c:9d:b2:08:e6:c9:1b:28:ae:40:5f:38:13:76:2a:93:e8:
         65:6a:66:ab:87:b9:d7:2d:54:ab:70:3c:dd:c3:2e:a9:d5:ff:
         ca:59:93:ba:de:cb:b9:b4:d7:f5:0c:dd:f1:6f:8a:70:49:66:
         74:b3:20:da:c8:28:45:e4:2f:03:0e:72:81:e1:c4:7f:8d:c3:
         93:7a:9a:10:35:c5:41:86:c2:a6:4e:4e:81:67:da:90:bc:d6:
         32:6f:32:af:d9:fa:e6:50:f3:64:62:98:a9:9e:27:bd:c8:b9:
         5d:03:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:46 2026 by rpki-client