Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a3a2f33342d3334203d3e20323733343433.roa
File:                     323830343a386562343a3a2f33342d3334203d3e20323733343433.roa (raw, json)
Hash identifier:          iY08DpMjgRNB5cZAK3lksQLaysqstsV6xRsZGeLatcY=
Subject key identifier:   85:D0:38:5A:28:E7:2C:69:94:1C:28:83:3D:72:D9:97:0A:A9:32:45
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       247E51AC704A134BA55D03E02F53CE1A38EE490D
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a3a2f33342d3334203d3e20323733343433.roa
Signing time:             Tue 05 May 2026 14:06:34 +0000
ROA not before:           Tue 05 May 2026 14:01:34 +0000
ROA not after:            Tue 04 May 2027 14:06:34 +0000
asID:                     273443
IP address blocks:        2804:8eb4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7e:51:ac:70:4a:13:4b:a5:5d:03:e0:2f:53:ce:1a:38:ee:49:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: May  5 14:01:34 2026 GMT
            Not After : May  4 14:06:34 2027 GMT
        Subject: CN=85D0385A28E72C69941C28833D72D9970AA93245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:0a:31:b8:2e:89:c3:34:26:e7:94:4a:36:
                    a8:7b:f7:b1:bf:5d:cf:37:5c:24:6f:82:b3:a0:39:
                    ab:03:9e:71:00:63:e3:e3:f6:84:b0:48:7d:ca:10:
                    1f:03:54:57:e7:0c:ce:fe:47:2a:19:79:91:f5:9f:
                    f0:08:64:a6:05:19:45:42:88:30:55:90:6f:05:fc:
                    4d:5e:ef:6f:cc:30:cf:cc:24:5f:75:fd:71:12:56:
                    0b:89:1f:92:52:b5:b8:81:2c:6a:d7:3c:81:e2:e3:
                    12:5d:3f:46:5e:20:d5:dc:89:d1:90:a4:38:07:9d:
                    d0:8c:d0:93:1a:4d:b6:55:4d:4a:d4:43:d7:26:9f:
                    84:5c:af:f8:54:39:d9:8c:56:e0:7d:b2:3f:06:e8:
                    92:a2:bc:9b:f5:7c:34:e5:73:4d:2e:07:53:25:9c:
                    77:3c:a4:95:3d:1d:63:6f:ee:86:86:07:c6:c3:27:
                    18:f5:ee:bd:f3:50:52:1f:66:16:35:20:49:b8:97:
                    6c:9a:90:f6:a5:3f:48:b9:f6:c3:15:79:9f:1a:fc:
                    e6:77:50:b2:b4:0d:19:2a:fe:e5:2a:81:a4:d5:d2:
                    f1:8f:e9:93:c5:dc:76:e6:c1:51:a3:f7:28:80:55:
                    c7:ee:69:0d:19:be:2c:48:cd:af:f1:c4:0a:1b:93:
                    b7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D0:38:5A:28:E7:2C:69:94:1C:28:83:3D:72:D9:97:0A:A9:32:45
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a3a2f33342d3334203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb4::/34

    Signature Algorithm: sha256WithRSAEncryption
         b7:1d:52:b5:36:5f:1c:fd:92:a2:2f:99:fc:33:d4:2f:c8:81:
         28:8c:42:77:f3:e9:b7:cf:c6:7e:6b:8f:f0:57:e9:dc:ac:88:
         28:0b:4e:c2:86:87:67:71:a3:38:53:cb:65:b3:b0:46:4c:84:
         56:de:6b:ee:9c:fe:a3:7d:76:8b:18:5b:14:31:07:55:ba:6b:
         07:2b:ec:bd:5e:37:90:c9:40:6b:5c:cc:93:34:20:7d:ee:7a:
         83:12:16:b9:bf:22:58:96:84:ee:42:4d:f6:ab:28:50:fe:90:
         98:ad:31:c7:f7:e9:d6:4e:aa:36:68:fe:c3:67:55:f0:94:1d:
         00:dd:af:84:3b:b4:c8:0d:72:2f:80:0f:4c:1a:67:05:1d:3e:
         c9:04:15:83:c0:df:da:7c:ea:5f:64:28:a0:21:2f:90:38:89:
         57:de:bc:c1:eb:35:7d:fc:c4:90:90:b7:87:f6:c9:66:db:4c:
         a2:2d:b5:80:7c:b2:b3:6f:a2:81:5d:ca:68:cb:fa:b5:84:9b:
         75:40:b3:5d:94:14:e5:2f:76:4e:ac:b4:a2:d4:17:b5:f9:d2:
         91:ee:0c:97:6e:63:16:99:42:f4:6c:d5:e2:99:75:d2:87:88:
         f5:51:56:c9:e3:1e:76:16:d4:48:f8:fd:0b:0e:e8:cc:50:79:
         4d:46:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:58:36 2026 by rpki-client