Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383030303a3a2f34302d3430203d3e20323733343433.roa
File:                     323830343a386562343a383030303a3a2f34302d3430203d3e20323733343433.roa (raw, json)
Hash identifier:          OwLd3WswDDke9wf58H9H36ox1JEEcH6rSUtEEkBHrRE=
Subject key identifier:   A3:DF:1B:5F:E8:8B:3D:64:BC:E8:3C:BA:38:31:A6:B0:2F:3F:5A:74
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       65BA5C200F4C2102FFB319BFCA6C2F8B657CC0DB
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383030303a3a2f34302d3430203d3e20323733343433.roa
Signing time:             Tue 05 May 2026 14:06:35 +0000
ROA not before:           Tue 05 May 2026 14:01:35 +0000
ROA not after:            Tue 04 May 2027 14:06:35 +0000
asID:                     273443
IP address blocks:        2804:8eb4:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ba:5c:20:0f:4c:21:02:ff:b3:19:bf:ca:6c:2f:8b:65:7c:c0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: May  5 14:01:35 2026 GMT
            Not After : May  4 14:06:35 2027 GMT
        Subject: CN=A3DF1B5FE88B3D64BCE83CBA3831A6B02F3F5A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:d3:7b:dd:aa:2f:4f:a2:2d:b4:9d:25:4f:
                    13:38:e5:4c:f5:3e:05:55:7d:3a:ff:27:a7:0a:34:
                    22:fd:43:61:13:ba:e7:00:12:1d:33:4c:17:32:7d:
                    ae:e1:5b:35:80:18:4d:68:6d:48:50:de:0f:cb:03:
                    ee:b5:33:33:aa:de:9b:98:8d:2b:9e:fe:75:37:93:
                    ae:77:58:20:35:ed:41:3c:5a:43:eb:6e:29:85:67:
                    bf:49:f6:2e:80:a7:7e:07:b5:f8:e1:6b:e9:66:63:
                    37:d0:ec:85:a4:f6:7b:a0:1f:6e:4b:21:0c:dc:51:
                    9a:6f:80:02:70:00:a7:0c:01:7e:1c:fe:74:32:23:
                    99:16:4c:23:45:ed:8f:cd:aa:f7:73:d0:87:c6:e1:
                    1a:d1:a0:57:fb:3d:08:c5:34:60:aa:c8:57:63:9e:
                    3c:5a:a4:93:e3:8f:d1:93:4a:82:d8:d5:f6:50:87:
                    ef:26:60:b9:cc:2c:13:c4:13:11:63:5f:68:fd:cb:
                    af:ee:03:c8:da:ce:6d:f6:11:df:b0:8f:ba:a5:90:
                    3b:f5:1f:24:cb:5d:66:63:a9:e8:22:e5:0d:64:ad:
                    57:d7:c9:5e:03:58:93:77:32:a6:f0:4a:6d:37:c1:
                    b0:5d:06:26:05:8f:b2:d2:8a:ab:40:17:8b:37:22:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:1B:5F:E8:8B:3D:64:BC:E8:3C:BA:38:31:A6:B0:2F:3F:5A:74
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383030303a3a2f34302d3430203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb4:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:50:9d:fe:be:78:0d:47:62:9f:78:63:36:b5:0b:52:00:94:
         35:fc:67:38:95:e9:2a:24:a1:e1:6e:94:4b:6f:97:93:9c:32:
         b4:1a:f4:93:03:2e:b0:d1:06:54:03:63:6c:08:73:6f:a2:97:
         ef:e6:5a:ba:2f:fd:d3:6f:ac:f9:ed:0b:f8:52:23:ac:ab:24:
         b2:1b:ad:2a:52:6f:b7:6c:0d:73:31:8c:a5:8e:86:c3:54:a1:
         3c:d8:72:23:0f:d5:d5:96:c0:1f:08:09:f3:05:ad:63:88:e7:
         b5:61:5c:8c:de:da:eb:eb:50:8b:89:88:29:3d:00:20:80:a6:
         cb:5a:56:e4:7c:bb:2e:4f:57:1e:af:3e:9f:f9:be:c0:40:76:
         6a:fe:9a:a7:20:97:58:05:55:34:15:26:19:11:1b:2c:d0:ce:
         8d:87:d7:db:63:de:ca:60:c7:77:a9:aa:a6:ea:15:3f:89:7e:
         a3:5c:6c:ef:c1:d0:06:c6:f0:a6:fa:14:e6:eb:65:0a:7b:e9:
         d5:42:79:37:62:24:ab:a9:30:97:0c:17:2c:8e:6b:14:91:6b:
         04:e7:c6:da:ef:5b:43:c9:ca:8d:2f:df:20:4d:b3:f5:e5:72:
         55:c2:05:fb:2e:c1:cb:32:cd:69:82:c8:70:85:d4:81:d4:22:
         5c:73:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:08:52 2026 by rpki-client