Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/323830343a363833303a3a2f33322d313238203d3e20323639363734.roa
File:                     323830343a363833303a3a2f33322d313238203d3e20323639363734.roa (raw, json)
Hash identifier:          Fdw1r4HO1Z5ucfsNC4mM3ebSjPR3pr2NgPtWlCVYxZU=
Subject key identifier:   41:C5:44:D7:61:97:27:7A:77:6E:CE:99:0E:EA:63:EE:C2:58:E2:8B
Certificate issuer:       /CN=69CE20FA9020F27973CD76BE91FBDEB28AD7336D
Certificate serial:       718F4C523BAFAF32DE68433CE6D24B2FAC745B9B
Authority key identifier: 69:CE:20:FA:90:20:F2:79:73:CD:76:BE:91:FB:DE:B2:8A:D7:33:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/323830343a363833303a3a2f33322d313238203d3e20323639363734.roa
Signing time:             Wed 15 Jul 2026 23:00:38 +0000
ROA not before:           Wed 15 Jul 2026 22:55:38 +0000
ROA not after:            Wed 14 Jul 2027 23:00:38 +0000
asID:                     269674
IP address blocks:        2804:6830::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl
                          rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8f:4c:52:3b:af:af:32:de:68:43:3c:e6:d2:4b:2f:ac:74:5b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69CE20FA9020F27973CD76BE91FBDEB28AD7336D
        Validity
            Not Before: Jul 15 22:55:38 2026 GMT
            Not After : Jul 14 23:00:38 2027 GMT
        Subject: CN=41C544D76197277A776ECE990EEA63EEC258E28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:49:3f:d5:aa:ec:32:8e:e7:7b:e7:84:6d:
                    6a:80:ba:a7:de:93:88:18:0a:cf:bd:5b:56:b1:e9:
                    ba:b8:a6:a5:28:75:df:73:eb:2e:0e:56:d8:b7:c0:
                    56:df:9c:f3:e2:d5:71:cc:ec:b0:de:b0:99:a0:a2:
                    fa:de:20:9f:4b:87:e5:ad:79:0f:8d:d9:50:1e:35:
                    ed:f8:39:fc:1f:b1:3f:8b:8c:9e:b4:a6:0c:2c:43:
                    4b:4e:63:6b:ad:bb:e7:d5:59:44:52:6e:59:7d:33:
                    f4:af:31:87:a5:53:c0:55:4b:b7:08:dc:9b:a2:f0:
                    7f:8e:35:0b:fa:47:5f:08:b6:1d:b0:14:d8:5a:54:
                    ef:3d:4e:42:99:62:e6:9b:28:2a:fa:4d:51:d6:6b:
                    41:f1:96:c0:fe:ff:33:0c:1f:89:7c:85:ea:42:48:
                    ce:69:c0:0c:0c:6b:26:5f:98:58:10:2e:4c:61:11:
                    88:5c:c3:99:e8:0e:ca:0d:3a:8e:f6:79:71:79:ae:
                    9a:80:1c:9e:09:5f:50:77:36:05:91:68:fc:48:6e:
                    17:72:db:f2:a2:ae:3a:39:38:87:d0:e0:5d:b6:bf:
                    a4:b3:6d:7c:9a:5d:8c:9b:4f:87:06:b3:44:54:ef:
                    ea:91:68:28:5d:6d:13:96:81:d8:46:b1:3a:8d:bd:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:44:D7:61:97:27:7A:77:6E:CE:99:0E:EA:63:EE:C2:58:E2:8B
            X509v3 Authority Key Identifier:
                keyid:69:CE:20:FA:90:20:F2:79:73:CD:76:BE:91:FB:DE:B2:8A:D7:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/323830343a363833303a3a2f33322d313238203d3e20323639363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6830::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:f1:62:4c:73:8d:d8:cc:38:c6:a4:02:ab:dc:91:cd:98:
         0d:e2:c4:16:f1:dd:5b:60:1b:b8:ee:15:08:62:55:bd:22:f3:
         ef:af:c6:da:25:95:1d:4f:3f:e3:39:be:99:62:b2:88:a8:3f:
         94:38:b0:e2:d3:18:c7:fd:a7:89:06:2e:37:09:41:58:bb:f1:
         3c:fd:e5:2a:2f:84:8e:bb:c4:f1:61:e7:2d:84:5e:42:10:5c:
         4c:b8:ed:74:4a:c1:5a:1a:1c:b3:dd:c0:89:f9:e6:42:a7:e5:
         3a:7d:26:54:fb:3e:5a:8c:03:52:61:c4:6b:eb:19:58:5a:63:
         b4:d0:4a:29:1a:32:69:b8:76:36:2c:a2:2d:84:e3:cf:a4:ec:
         25:6c:95:71:7d:d7:18:c8:11:34:a7:20:44:35:38:44:39:7d:
         38:51:e3:ee:2b:8e:43:d0:db:3c:e8:5b:af:29:7b:9a:cc:c0:
         11:f0:b0:33:a4:b8:82:f4:5d:49:6c:64:3e:42:9c:55:db:1f:
         7e:b7:c5:a2:e2:bc:0d:a5:18:b4:27:95:8e:18:ab:dc:00:cb:
         63:8b:ee:5b:a2:12:2d:c3:c7:5f:23:99:cf:f8:3e:61:bd:56:
         74:44:35:a5:91:fb:22:56:3d:96:8d:18:60:0d:90:fe:fb:1d:
         ff:dc:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:50:07 2026 by rpki-client