Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a626438303a3a2f34312d3431203d3e20323732323138.roa
File:                     323830343a383363343a626438303a3a2f34312d3431203d3e20323732323138.roa (raw, json)
Hash identifier:          D7yuctjxhuBLdEApLjt57KTly9a+8g0oIujj9iik2jI=
Subject key identifier:   C6:02:7D:74:99:9D:68:91:1F:E8:9F:CD:6E:DD:EE:A4:53:0E:3B:71
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       33108320FAFF98C66A810D9C689F7D8ED3412A70
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a626438303a3a2f34312d3431203d3e20323732323138.roa
Signing time:             Fri 17 Apr 2026 23:05:31 +0000
ROA not before:           Fri 17 Apr 2026 23:00:31 +0000
ROA not after:            Fri 16 Apr 2027 23:05:31 +0000
asID:                     272218
IP address blocks:        2804:83c4:bd80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 02:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:10:83:20:fa:ff:98:c6:6a:81:0d:9c:68:9f:7d:8e:d3:41:2a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Apr 17 23:00:31 2026 GMT
            Not After : Apr 16 23:05:31 2027 GMT
        Subject: CN=C6027D74999D68911FE89FCD6EDDEEA4530E3B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:5b:29:4c:56:59:70:6d:6b:9b:d5:95:13:
                    19:63:ca:64:92:5c:37:aa:73:ad:a4:83:ff:cf:45:
                    65:5e:04:c7:86:2b:a0:ca:b2:41:d3:00:c9:04:05:
                    94:a5:e7:ae:a5:49:3f:7b:ca:6f:90:2c:7f:03:d7:
                    77:c8:45:08:56:0c:99:79:a1:b2:3b:61:98:b7:f4:
                    75:26:0f:ea:10:ab:c8:8b:7f:2d:c6:3c:c4:31:55:
                    56:a6:48:57:6b:67:3c:b0:52:7f:66:36:2b:71:e3:
                    9e:d9:10:f8:fe:86:42:0b:19:ef:05:48:a8:ef:8b:
                    e5:7e:1c:8b:6c:a3:86:97:6b:8c:f5:4a:4b:4d:db:
                    d8:55:b8:68:90:e3:34:5a:ca:da:5b:bd:e7:cb:b3:
                    df:44:eb:63:e6:04:95:c3:28:60:e3:57:05:65:4e:
                    6a:1f:2d:0c:d7:d1:d9:41:28:cf:4d:7d:27:cc:16:
                    52:f2:c3:e8:eb:91:e2:2c:57:e3:57:b2:6d:2e:fd:
                    cd:6e:8d:c1:bc:8c:99:d4:bc:e5:ba:da:d0:f2:69:
                    a2:08:4f:e7:d8:d6:87:28:a5:86:13:1c:62:2d:32:
                    53:49:4b:b1:6a:b0:5c:a8:31:ff:ce:f6:eb:1f:34:
                    c1:cb:8b:19:88:fb:4a:ec:09:9f:c7:a9:96:72:c6:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:02:7D:74:99:9D:68:91:1F:E8:9F:CD:6E:DD:EE:A4:53:0E:3B:71
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a626438303a3a2f34312d3431203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:bd80::/41

    Signature Algorithm: sha256WithRSAEncryption
         12:28:c5:1b:58:71:f1:93:11:99:e2:45:ba:6e:c6:e6:77:ca:
         20:3d:cb:ad:71:c6:de:d5:85:f0:b5:62:ca:6d:15:b4:cf:5a:
         4f:0f:5b:9f:56:ea:98:ed:cb:b1:de:7a:7c:56:08:c3:d1:dc:
         19:ea:04:91:91:a9:c5:9e:22:e4:38:0b:c8:48:25:ee:90:39:
         49:91:30:af:cd:2c:3d:08:c8:24:9a:53:84:5e:5e:e5:28:ec:
         96:39:68:ed:71:e6:35:0a:9c:bb:b3:06:07:0f:8b:6f:5e:56:
         19:50:64:03:ef:a1:a5:33:91:7a:f1:2c:e0:9a:1e:ae:f4:18:
         6f:54:3c:97:0a:29:a1:85:4e:16:f5:17:f0:71:d6:eb:c7:3a:
         a8:0b:ef:98:fc:6b:0d:9d:1f:dd:e6:96:f8:91:ea:11:9e:36:
         ef:b7:12:df:9f:c0:00:4c:93:3a:51:28:a3:e8:3e:c5:4e:ac:
         b6:a5:8d:63:e0:f4:19:dd:ff:64:7a:c8:1c:8f:0d:51:28:a9:
         6d:18:6f:b8:1a:00:8d:4c:17:e4:fe:f9:aa:8d:2d:bc:6d:e0:
         eb:b8:98:52:dc:0f:6a:5a:71:54:bb:2b:85:55:b9:5f:e8:72:
         a6:63:c6:42:bc:07:9b:5c:75:59:95:2a:64:f2:c6:6e:74:09:
         d1:47:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 11:12:26 2026 by rpki-client