Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a383030303a3a2f33332d3333203d3e20323732313637.roa
File:                     323830343a383266343a383030303a3a2f33332d3333203d3e20323732313637.roa (raw, json)
Hash identifier:          jk4DhMd9ymvp5NQYdONGQoeYJzkxMWH5j53vJnI63Ec=
Subject key identifier:   88:38:C2:F3:C7:DE:56:8B:36:43:F2:F0:CA:3D:14:64:09:51:74:CD
Certificate issuer:       /CN=266EB7778B34AD61D225851E8CF4924FC36A8639
Certificate serial:       563E0DB525992A773DABD0F7F38717D49B175898
Authority key identifier: 26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a383030303a3a2f33332d3333203d3e20323732313637.roa
Signing time:             Sun 22 Jun 2025 23:36:06 +0000
ROA not before:           Sun 22 Jun 2025 23:31:06 +0000
ROA not after:            Sun 21 Jun 2026 23:36:06 +0000
asID:                     272167
IP address blocks:        2804:82f4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl
                          rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3e:0d:b5:25:99:2a:77:3d:ab:d0:f7:f3:87:17:d4:9b:17:58:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266EB7778B34AD61D225851E8CF4924FC36A8639
        Validity
            Not Before: Jun 22 23:31:06 2025 GMT
            Not After : Jun 21 23:36:06 2026 GMT
        Subject: CN=8838C2F3C7DE568B3643F2F0CA3D1464095174CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:b2:4b:d6:be:44:f2:0e:5e:32:9e:f5:f4:
                    ee:d6:03:25:77:b2:2a:ef:57:13:bf:3a:68:6b:3c:
                    d7:17:a3:c1:40:24:06:fc:5a:e7:8a:dc:71:ed:d4:
                    b0:48:87:f5:55:2d:01:39:5e:3d:86:dd:69:3b:d3:
                    e0:e6:06:d1:d7:d8:34:33:79:0a:44:36:53:4a:c0:
                    e0:47:da:76:3c:82:81:e0:3a:34:ab:bb:b5:a4:4b:
                    cf:74:0b:65:41:c3:b9:b5:04:e6:78:e9:2b:e9:f2:
                    cd:e4:ef:e2:b1:a7:71:40:f0:76:ef:04:95:7a:41:
                    af:0a:0f:16:ea:0e:5a:fe:b9:53:a5:c5:61:00:86:
                    61:2a:ad:80:df:38:b9:f1:45:33:c7:0a:7a:4b:e8:
                    58:c1:7a:34:b8:a1:f7:8b:b6:39:8b:4c:db:68:1a:
                    fe:b4:cb:68:2e:43:ca:da:23:17:60:fc:d4:c3:74:
                    ca:da:8b:ab:25:bd:3e:87:a3:70:78:ff:34:48:08:
                    dc:42:bc:49:14:0a:f1:78:ae:f6:f6:8e:98:70:07:
                    a8:5e:19:69:21:1c:5b:89:b0:ed:57:cf:90:13:91:
                    55:d7:24:50:68:13:9c:f9:30:4f:a3:70:a6:c8:39:
                    e8:8a:90:48:be:c2:82:d8:3c:6d:8c:e5:52:ec:6d:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:38:C2:F3:C7:DE:56:8B:36:43:F2:F0:CA:3D:14:64:09:51:74:CD
            X509v3 Authority Key Identifier:
                keyid:26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a383030303a3a2f33332d3333203d3e20323732313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82f4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:28:0e:ff:cb:f9:65:1b:77:45:c4:9f:8e:20:ca:d8:00:
         d8:64:b9:e4:83:d0:01:39:4e:eb:1d:68:d2:79:e5:e1:c3:39:
         cf:97:5b:01:7b:ff:0c:b5:9f:1b:48:a0:01:ee:a5:8d:bf:61:
         0b:42:bf:81:ea:8b:04:8d:15:52:eb:06:da:47:c7:47:09:91:
         4f:60:dc:bc:67:52:11:c9:97:11:48:d4:67:01:86:a1:82:a0:
         bc:3f:f4:4a:4e:7a:f6:5f:08:45:40:5c:6c:6d:4d:34:6b:2f:
         c1:85:6a:96:00:fb:8c:c2:9a:c4:7d:48:7a:ec:8a:4e:ce:37:
         b2:88:ef:51:12:89:85:d9:77:ca:95:1f:2b:b9:c5:bf:68:a8:
         ad:54:c2:e1:47:63:24:e6:01:f9:83:e8:cd:d2:8d:3d:63:c2:
         47:81:eb:5b:2f:db:2f:78:f4:64:0d:9f:4b:6a:58:2a:f0:4d:
         59:07:c8:8a:c2:0b:4b:f8:d5:1d:f0:3a:26:d8:25:c9:10:bf:
         fe:3d:d0:d5:32:c7:8d:23:55:02:cc:3e:59:11:9a:f7:54:51:
         b4:f4:35:8e:bf:2a:f5:3d:a5:52:3b:88:0b:d2:fd:84:7d:f8:
         45:65:6f:01:24:1c:99:51:29:ee:a2:1f:42:c9:b3:92:35:30:
         49:43:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:30:36 2025 by rpki-client