Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33342d3334203d3e203631373139.roa
File:                     323830343a316235303a3a2f33342d3334203d3e203631373139.roa (raw, json)
Hash identifier:          27c1IZFWofQl4Y3T3kJSWZWCJVBtvIfHfswvxVbMMTw=
Subject key identifier:   68:1F:44:59:F5:99:B6:44:F6:85:F3:1F:1A:31:46:C2:B1:0F:5C:72
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       4F0AEFE7BA98AF2979C72B4551C4DE358412E79B
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33342d3334203d3e203631373139.roa
Signing time:             Thu 02 Jul 2026 11:27:16 +0000
ROA not before:           Thu 02 Jul 2026 11:22:16 +0000
ROA not after:            Thu 01 Jul 2027 11:27:16 +0000
asID:                     61719
IP address blocks:        2804:1b50::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0a:ef:e7:ba:98:af:29:79:c7:2b:45:51:c4:de:35:84:12:e7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Jul  2 11:22:16 2026 GMT
            Not After : Jul  1 11:27:16 2027 GMT
        Subject: CN=681F4459F599B644F685F31F1A3146C2B10F5C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:00:c1:25:3d:12:93:02:0c:33:94:30:d3:
                    96:e4:e1:34:00:ce:bc:45:2d:49:fe:dd:7d:99:90:
                    08:a4:34:39:a5:03:a6:6a:f1:44:e6:00:76:30:19:
                    b1:ee:13:54:68:9b:fe:ad:08:1d:0b:92:e8:0a:25:
                    fa:dd:d3:71:eb:94:5a:b9:b5:24:d4:72:c0:1e:45:
                    6c:c5:1d:82:dc:f5:d5:a1:59:61:7c:23:55:2d:bf:
                    da:fa:14:26:c3:2c:ed:5b:98:b3:fb:3f:be:4a:e0:
                    70:05:6f:c3:ab:06:7d:d7:bd:b6:52:f2:88:f4:e7:
                    94:60:d8:f6:9a:84:93:07:b4:89:0b:f6:d3:6c:6d:
                    29:ca:50:47:07:e4:39:e2:ce:aa:20:46:a5:2f:0a:
                    17:35:2e:10:e9:da:5c:bf:86:bb:52:1d:ba:f3:34:
                    41:24:42:3c:11:2d:c4:26:e9:9c:f6:6b:73:0e:6d:
                    52:15:13:de:2f:6d:67:cc:4b:69:2a:4d:ad:54:14:
                    cf:20:d1:1f:40:37:16:1a:2a:e3:ad:d4:98:8f:61:
                    c1:67:ee:2e:ff:6f:1d:7a:a6:71:3d:d5:e1:c4:c6:
                    b0:f6:4a:a5:0c:39:56:06:0a:16:ff:90:e8:ff:5e:
                    09:0a:ef:20:d3:41:c0:4d:24:84:4c:64:43:ab:d2:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1F:44:59:F5:99:B6:44:F6:85:F3:1F:1A:31:46:C2:B1:0F:5C:72
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33342d3334203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:18:1f:f5:9b:91:56:c2:96:0f:56:02:ae:db:ac:2f:66:58:
         aa:ce:ae:ef:6f:ed:97:9d:08:bd:7c:40:fc:97:bf:25:9f:13:
         62:9b:fc:15:49:f6:1d:dc:19:67:c2:c4:b9:ce:34:3b:a7:e9:
         eb:ae:b7:5a:49:af:0d:3f:52:81:cd:d9:27:53:53:97:7b:51:
         25:d4:3a:01:cf:fe:e4:20:ed:6f:29:84:96:aa:99:73:ee:df:
         6e:fd:79:37:7d:29:77:55:a3:73:2c:a5:42:2b:c5:c8:56:70:
         5d:a3:26:e2:ec:ba:07:62:da:52:93:de:10:40:a4:39:f4:62:
         be:58:9c:19:46:60:74:bc:1a:84:14:40:56:43:0a:2f:8c:74:
         87:7e:34:17:be:e7:c6:dd:e2:e0:88:99:22:c5:55:89:51:3a:
         f2:30:89:38:8c:f6:0e:42:51:0e:67:47:89:e1:82:5e:1d:48:
         49:ee:63:a2:e9:c4:66:4e:85:03:3e:80:10:fc:b5:f3:e9:59:
         0c:d5:22:08:b7:ab:87:a4:62:cf:07:03:2a:f0:97:63:27:91:
         7d:6f:3f:c9:0a:f5:d0:9c:b7:02:7e:1c:7b:d3:82:c4:64:6e:
         02:ac:98:ef:28:02:40:58:ab:34:a0:53:17:da:a4:87:ab:4d:
         3c:6b:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:57 2026 by rpki-client