Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3834303a3a2f34332d3433203d3e203533303735.roa
File:                     323830343a3931303a3834303a3a2f34332d3433203d3e203533303735.roa (raw, json)
Hash identifier:          QFLvyUGAJo/vm2wacaztGLP51PiJ6eHFnqlcaNIiKS0=
Subject key identifier:   8D:42:A2:3E:C1:C6:FA:A1:A6:D4:AC:F9:03:B4:42:3C:89:C3:F7:CC
Certificate issuer:       /CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
Certificate serial:       44ECAC5CCB605570F9CAA166D2C817FD1B02EDB5
Authority key identifier: AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3834303a3a2f34332d3433203d3e203533303735.roa
Signing time:             Sun 12 Apr 2026 00:16:06 +0000
ROA not before:           Sun 12 Apr 2026 00:11:06 +0000
ROA not after:            Sun 11 Apr 2027 00:16:06 +0000
asID:                     53075
IP address blocks:        2804:910:840::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl
                          rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ec:ac:5c:cb:60:55:70:f9:ca:a1:66:d2:c8:17:fd:1b:02:ed:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
        Validity
            Not Before: Apr 12 00:11:06 2026 GMT
            Not After : Apr 11 00:16:06 2027 GMT
        Subject: CN=8D42A23EC1C6FAA1A6D4ACF903B4423C89C3F7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:ae:dd:90:22:64:c1:28:fd:72:6e:53:4d:
                    f3:75:c9:47:80:ed:cd:b1:35:bc:91:8d:ae:53:2f:
                    5f:4c:9c:77:ae:dd:6b:99:c0:a5:c1:89:35:11:b4:
                    d6:54:b4:92:b6:a1:a4:1b:3a:45:ef:f8:f1:68:7f:
                    ed:d2:90:b5:5e:cc:f2:30:30:55:26:b4:5d:fa:82:
                    45:a7:54:80:17:86:f6:e7:6d:b8:65:eb:be:69:6f:
                    ea:62:5d:aa:de:bd:19:22:ba:86:d0:11:9f:14:7c:
                    99:d1:36:8a:94:3e:8a:0b:65:1d:7f:c3:e0:58:3b:
                    81:2a:79:5d:8d:e2:3a:01:d9:93:ec:70:33:13:e8:
                    8d:c1:f1:3c:c7:af:3d:c5:90:04:a7:22:63:24:ac:
                    23:27:7c:24:f3:18:c5:21:19:f8:51:f6:18:90:03:
                    de:70:3a:71:ac:d9:23:51:ce:63:06:73:81:e1:21:
                    47:44:4e:17:4f:da:0f:27:c2:e4:f4:83:1a:84:c7:
                    81:4d:73:23:74:b6:6f:6a:2c:cc:d7:8d:11:6a:3b:
                    ae:85:68:96:8b:47:42:1f:f4:8a:be:2f:d2:65:7d:
                    ef:8b:d7:0f:27:bc:ac:5c:17:c4:10:d7:f6:72:3d:
                    40:22:c3:47:b6:9d:c5:ac:28:bc:f9:87:8f:a6:87:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:A2:3E:C1:C6:FA:A1:A6:D4:AC:F9:03:B4:42:3C:89:C3:F7:CC
            X509v3 Authority Key Identifier:
                keyid:AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3834303a3a2f34332d3433203d3e203533303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:910:840::/43

    Signature Algorithm: sha256WithRSAEncryption
         81:31:d4:ac:26:92:09:3e:8b:f0:12:48:f3:cd:55:74:11:35:
         d6:ad:a1:2d:c7:a8:29:42:a0:e4:a9:93:1e:2c:2f:e9:96:e1:
         97:09:83:4b:d3:35:19:e7:97:ad:4b:34:e5:8e:5c:2b:e6:98:
         9b:b8:94:92:1f:70:c4:f8:ba:ed:30:e2:4c:d1:a8:42:a3:30:
         ab:ef:df:58:0a:ca:9b:65:10:70:ea:20:d2:87:ff:55:2a:ca:
         87:36:ec:2f:0d:8b:5d:f5:c2:55:74:be:77:7c:0b:fb:3d:53:
         c8:65:b8:3d:01:7b:4f:30:42:86:00:37:68:81:3f:97:4e:2e:
         15:d5:fd:fe:65:ef:9f:30:c2:65:c8:62:57:e5:6d:45:72:75:
         03:f3:b3:fb:ed:44:67:44:d6:4a:a7:8e:a3:fa:62:4e:86:5c:
         a4:f5:be:d9:ba:93:1a:d5:83:6d:f7:31:21:2d:c7:f3:88:8d:
         5b:37:8d:c5:78:8f:f5:e2:71:0c:51:91:e8:45:7c:68:da:7c:
         7c:f5:cb:a9:1d:a4:de:2f:59:e5:a5:72:5e:8d:74:39:36:f2:
         4b:e0:22:68:c5:40:6a:ce:fd:be:74:8b:09:6b:e7:1d:f3:2f:
         9e:55:22:79:a7:8f:8b:07:3c:72:3f:60:53:45:6d:c1:95:14:
         44:c5:b7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:56 2026 by rpki-client