Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3a2f33322d3332203d3e20323733363633.roa
File:                     323830343a386135383a3a2f33322d3332203d3e20323733363633.roa (raw, json)
Hash identifier:          qoEnukLEramDP+WHlr9+EzYtIvozvT0lr6KTyX2+Yk0=
Subject key identifier:   F5:B6:80:0A:B5:9D:EA:2E:86:1C:E4:71:15:1B:01:7F:5A:BF:09:8A
Certificate issuer:       /CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
Certificate serial:       1BB213FAB31F7CA325D5F1B4B1698421E49DB3A5
Authority key identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3a2f33322d3332203d3e20323733363633.roa
Signing time:             Thu 09 Apr 2026 18:53:03 +0000
ROA not before:           Thu 09 Apr 2026 18:48:03 +0000
ROA not after:            Thu 08 Apr 2027 18:53:03 +0000
asID:                     273663
IP address blocks:        2804:8a58::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 02:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b2:13:fa:b3:1f:7c:a3:25:d5:f1:b4:b1:69:84:21:e4:9d:b3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
        Validity
            Not Before: Apr  9 18:48:03 2026 GMT
            Not After : Apr  8 18:53:03 2027 GMT
        Subject: CN=F5B6800AB59DEA2E861CE471151B017F5ABF098A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:ac:27:4c:ca:c3:7a:32:e9:41:a8:44:5b:
                    5d:6d:29:ff:2b:25:82:58:fb:0a:46:9a:7a:71:82:
                    cb:97:62:50:70:7b:87:65:cd:11:3f:21:4d:eb:5d:
                    d1:c5:8e:a3:9f:e5:8d:b1:61:da:a7:82:8a:4c:25:
                    b2:ea:18:55:93:f0:e7:b7:7c:5a:01:88:1f:b8:3b:
                    4a:96:36:a5:9f:7d:6c:9a:b6:d1:af:24:7d:67:ba:
                    a9:ef:5a:37:b6:1a:dc:4f:fc:90:71:9b:e8:76:a3:
                    a1:b4:12:70:75:ef:dd:7e:40:07:6d:2d:68:29:9d:
                    eb:ed:a0:2c:aa:10:a0:ae:72:9f:3b:eb:14:75:81:
                    3d:2d:d0:08:55:04:70:95:f9:1e:58:f0:ea:fc:b3:
                    bb:36:3e:82:3f:40:be:49:a5:c2:00:3c:bc:64:59:
                    c9:ce:fd:43:1d:34:d2:65:d6:52:f5:18:19:2c:f2:
                    fd:4e:16:12:e6:68:bf:70:a3:07:6d:bb:d7:87:a0:
                    ac:44:c7:37:7c:5a:e9:46:eb:0b:78:d9:e5:6d:f9:
                    1b:23:d2:5d:f5:8a:98:b9:12:92:a0:ff:a0:cf:14:
                    85:3b:60:5b:ec:0f:71:4a:2d:50:f5:87:de:00:51:
                    89:83:6d:5f:26:1a:30:b5:6a:d1:53:df:f7:19:66:
                    49:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:80:0A:B5:9D:EA:2E:86:1C:E4:71:15:1B:01:7F:5A:BF:09:8A
            X509v3 Authority Key Identifier:
                keyid:F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3a2f33322d3332203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:54:2a:59:76:71:bb:df:43:05:00:72:50:97:b6:a3:b4:
         e5:b0:29:0c:d2:ec:a8:06:3f:b3:07:9f:52:0d:02:c9:10:64:
         66:38:dd:25:62:f5:cd:fd:16:d4:60:80:ef:fc:a1:25:d9:e7:
         3c:b4:d7:59:f6:fa:f5:a5:4d:0a:c3:15:d4:61:fd:27:ee:d1:
         ad:1d:88:4d:b3:02:90:45:a5:4e:7f:d2:e4:33:80:b2:fc:ce:
         2f:c6:ed:a6:d5:0e:9e:13:e9:cb:ab:5b:f1:4d:d5:f4:13:c7:
         34:d4:fb:cb:3e:5a:ed:6d:6f:49:f6:17:86:13:3d:fe:2d:f4:
         29:8d:15:56:81:71:55:6a:81:7c:e8:de:91:79:4e:a5:83:f0:
         41:ad:af:59:c6:4c:97:71:a7:9f:fb:24:10:81:a2:28:ed:e6:
         eb:49:42:e8:e7:ad:50:4e:a3:eb:c1:40:5b:3b:84:f1:9d:9b:
         a5:98:75:fe:dd:08:ba:c0:e9:87:54:d6:d0:a0:8c:a9:14:cf:
         87:0e:76:4f:30:71:8e:b0:bc:08:92:58:24:53:c0:c3:55:dd:
         a7:63:98:e5:f6:66:af:1c:bd:0e:ad:47:67:dc:e3:7e:59:f2:
         4e:9a:bc:9e:44:7a:12:be:27:1f:e9:72:9d:06:5f:5a:a7:bc:
         e2:0c:6b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:40:09 2026 by rpki-client