Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663730303a3a2f34302d3430203d3e20323634313230.roa
File:                     323830343a323263303a663730303a3a2f34302d3430203d3e20323634313230.roa (raw, json)
Hash identifier:          2XL5YfL0jnFSvvP3mGktlfIpfU18Wyw3iMTWzYoIRCA=
Subject key identifier:   E7:B7:91:45:AD:F3:33:93:36:2F:A2:B0:68:C0:6A:BC:4C:8C:DA:2D
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       035ECB09F245E55EFF4D14102B3FE4179767EA90
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663730303a3a2f34302d3430203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:37:16 +0000
ROA not before:           Mon 02 Mar 2026 15:32:16 +0000
ROA not after:            Mon 01 Mar 2027 15:37:16 +0000
asID:                     264120
IP address blocks:        2804:22c0:f700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5e:cb:09:f2:45:e5:5e:ff:4d:14:10:2b:3f:e4:17:97:67:ea:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:32:16 2026 GMT
            Not After : Mar  1 15:37:16 2027 GMT
        Subject: CN=E7B79145ADF33393362FA2B068C06ABC4C8CDA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:39:e0:66:9c:bd:1f:5d:85:86:23:3e:76:
                    9f:33:7b:90:76:b2:29:a3:20:2b:34:d1:1f:3a:ed:
                    ea:a2:70:f7:92:2b:bb:1f:eb:a9:f5:be:22:09:04:
                    e8:22:f8:9a:19:90:43:68:84:9a:24:c1:b1:12:f4:
                    f9:0e:b1:40:73:2c:51:db:01:ba:d4:63:c9:53:02:
                    cc:b0:10:44:85:66:12:d4:3e:a9:29:8f:4b:34:2c:
                    a5:98:58:09:94:11:73:09:c1:84:2c:34:5b:d6:73:
                    21:4f:1d:5b:5b:dd:2a:f9:32:fb:48:84:15:ac:f8:
                    5f:ae:fb:7f:70:e9:e8:ba:05:52:b6:7b:e2:53:40:
                    17:17:cc:c2:b5:f0:6b:3a:53:40:c7:22:86:66:5d:
                    dc:b6:67:9d:48:61:d9:0e:ce:92:9d:f4:8e:65:2f:
                    f4:17:53:34:c3:48:2f:da:ef:b9:00:4f:80:75:33:
                    80:90:9c:d5:b9:fa:3a:ee:d5:51:c7:70:cb:c5:d3:
                    bc:20:e5:59:fa:a3:47:f0:75:36:86:4a:76:b7:7b:
                    76:bc:fa:43:75:e0:16:bd:34:04:7c:11:5f:7e:5e:
                    a4:78:d9:ab:4f:06:0e:46:82:9a:9b:bd:88:88:c6:
                    70:e3:85:86:95:bc:e5:bc:c6:10:96:a9:7f:f0:32:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B7:91:45:AD:F3:33:93:36:2F:A2:B0:68:C0:6A:BC:4C:8C:DA:2D
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663730303a3a2f34302d3430203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c0:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:cc:5e:53:21:f7:c3:cc:7d:1b:67:30:50:5a:f1:70:e6:42:
         71:da:12:1d:92:04:d7:69:36:ab:4a:55:7c:29:6c:ae:c3:b6:
         58:4f:e7:23:60:bb:ff:a5:e5:ec:a0:ee:b5:9a:b1:cb:39:24:
         93:2e:09:1b:30:52:17:94:50:f9:c0:71:df:55:72:8b:e7:5a:
         dc:ac:40:38:05:42:61:fb:d9:fc:bc:bf:4c:d3:c0:07:c3:70:
         ff:d2:f6:f5:09:80:56:4e:cc:6a:5f:89:8d:19:bb:e6:e6:2c:
         a8:1f:19:eb:58:12:35:d9:8f:4d:7c:c4:94:c2:de:ad:e1:88:
         61:10:33:b9:e7:3e:44:39:71:87:35:48:8a:1a:bd:c0:ee:f6:
         df:c5:45:6a:74:73:5c:08:d0:33:db:28:3c:99:09:c9:7a:70:
         d5:69:e6:85:ef:00:41:f0:2b:84:08:c4:07:4b:92:e2:02:ac:
         67:f0:fe:14:48:22:4f:5e:0d:58:5e:64:5a:54:37:c2:69:c2:
         4f:c3:df:b4:e6:8c:d1:35:a3:36:70:7d:03:76:01:5c:b2:fc:
         2e:66:2a:26:ae:bc:48:cb:c5:b0:fd:20:65:c9:1d:ce:91:34:
         b5:d2:2c:c2:a0:43:94:a0:53:f0:cb:ac:34:b9:33:13:5b:ea:
         f7:43:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:32:49 2026 by rpki-client