Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a363030303a3a2f33352d3335203d3e203631373139.roa
File:                     323830343a316235303a363030303a3a2f33352d3335203d3e203631373139.roa (raw, json)
Hash identifier:          CkMNcBjzA1sra1As/UU5WFYlu0Akvoukwul3g5xqwrc=
Subject key identifier:   54:E5:EA:79:16:84:CA:27:A6:78:48:FB:7E:F9:40:A1:C6:73:3A:0D
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       5C46D9003A5D2C5BE692C4EF97B20187C2EFF151
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a363030303a3a2f33352d3335203d3e203631373139.roa
Signing time:             Thu 02 Jul 2026 11:27:17 +0000
ROA not before:           Thu 02 Jul 2026 11:22:17 +0000
ROA not after:            Thu 01 Jul 2027 11:27:17 +0000
asID:                     61719
IP address blocks:        2804:1b50:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:46:d9:00:3a:5d:2c:5b:e6:92:c4:ef:97:b2:01:87:c2:ef:f1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Jul  2 11:22:17 2026 GMT
            Not After : Jul  1 11:27:17 2027 GMT
        Subject: CN=54E5EA791684CA27A67848FB7EF940A1C6733A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:c7:cd:6e:3b:d5:a2:88:fb:d1:9e:70:3f:
                    5f:83:49:2d:07:b9:8d:f4:7d:cd:48:62:ba:15:10:
                    86:7b:be:85:95:1e:92:2c:b0:2f:2c:7a:ab:15:d8:
                    76:b9:3c:b4:72:5c:7d:f4:0c:a2:c7:76:73:56:8b:
                    41:5e:79:38:e5:50:39:41:3c:cf:d9:f4:5d:c8:5b:
                    59:4a:0a:d6:5c:c8:3f:61:39:58:25:cd:76:41:e6:
                    dc:d9:01:17:d0:c4:5a:d9:3f:7f:0a:f1:c0:ae:8d:
                    86:e4:98:94:cc:e0:25:a6:6c:a5:f7:7a:f0:44:4e:
                    a5:99:84:dc:ca:0e:11:2b:74:47:a1:e0:82:3f:94:
                    cf:64:2d:37:51:74:ae:d8:73:a5:f0:98:36:09:64:
                    6b:7d:b3:b3:2e:ea:51:ef:e1:2b:2d:a7:d2:3a:f3:
                    7d:81:0e:89:2e:e4:0c:9d:75:93:a8:13:de:d8:25:
                    78:fc:30:5a:3c:30:59:ec:60:7a:6c:93:d0:31:e5:
                    38:11:21:99:c0:79:e4:c0:ba:f5:47:8b:4a:64:4f:
                    eb:14:17:21:8d:f4:97:32:19:8b:d6:ca:c0:1a:68:
                    36:21:6b:79:4b:4f:6d:7e:e9:d4:9f:0a:c8:ac:5e:
                    0a:cf:5d:52:bf:21:c8:ec:91:04:89:c4:82:e8:0d:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E5:EA:79:16:84:CA:27:A6:78:48:FB:7E:F9:40:A1:C6:73:3A:0D
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a363030303a3a2f33352d3335203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         72:38:0d:06:f8:38:7e:bd:a1:1c:44:37:92:80:81:96:85:db:
         9b:0c:9c:2a:90:88:0d:d2:27:da:f3:ef:63:52:95:e1:cd:a8:
         5c:c6:c5:00:db:f7:5f:ff:c3:c2:09:5c:1e:24:42:94:b1:7c:
         60:9f:23:4d:c0:ce:00:04:11:99:b3:3a:0f:74:e8:c1:bd:6f:
         ec:21:ee:d8:30:68:b3:57:b3:1d:0b:e2:8c:62:2a:da:92:52:
         97:08:76:0f:d8:d7:49:48:97:9c:a3:b4:2c:bc:83:e4:ec:f7:
         ea:c5:3d:8f:e2:2b:a1:02:4e:63:ba:00:28:ef:09:66:47:75:
         22:76:3f:c6:5a:a7:b0:b7:ef:a9:66:4d:cc:ee:ef:f1:76:65:
         96:c5:48:5c:5e:41:e8:39:55:79:24:19:dd:5d:c4:e3:d7:f9:
         58:56:14:81:14:b4:b0:7b:7d:98:6c:cd:89:49:51:88:2f:ae:
         be:09:ec:9a:28:dd:4c:88:08:67:ec:55:cb:a2:10:2a:5c:f1:
         46:5d:1b:21:84:3a:4b:27:e7:33:15:5b:04:e6:c7:cb:1f:98:
         0a:a6:65:c3:3b:3f:e4:55:7f:f3:e7:99:ae:0d:59:aa:b8:c1:
         d1:29:ab:1e:35:36:6a:fd:18:ad:13:1d:69:e0:51:be:0e:f0:
         ab:20:6a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:01:15 2026 by rpki-client