Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a3a2f33332d3333203d3e20323638303931.roa
File:                     323830343a353764633a3a2f33332d3333203d3e20323638303931.roa (raw, json)
Hash identifier:          ixPa7T3H++FwxnTresv+6JnHXNIsk3SeaxUSKd5HWtk=
Subject key identifier:   CF:51:B9:D0:6B:F9:D4:AF:BA:CE:46:D4:65:DA:D8:71:90:27:01:71
Certificate issuer:       /CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
Certificate serial:       631E4C2D6C896778F9B7976ECE2E31E593C3518B
Authority key identifier: 89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a3a2f33332d3333203d3e20323638303931.roa
Signing time:             Thu 09 Apr 2026 18:53:04 +0000
ROA not before:           Thu 09 Apr 2026 18:48:04 +0000
ROA not after:            Thu 08 Apr 2027 18:53:04 +0000
asID:                     268091
IP address blocks:        2804:57dc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl
                          rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 02:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1e:4c:2d:6c:89:67:78:f9:b7:97:6e:ce:2e:31:e5:93:c3:51:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
        Validity
            Not Before: Apr  9 18:48:04 2026 GMT
            Not After : Apr  8 18:53:04 2027 GMT
        Subject: CN=CF51B9D06BF9D4AFBACE46D465DAD87190270171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:f4:d3:e5:67:1f:d4:e9:7a:08:49:fe:95:
                    ea:c1:9c:82:9e:e1:ed:e1:b9:b3:5d:5c:84:09:4e:
                    2d:f6:cb:eb:46:31:b4:c9:d8:ae:10:a4:68:87:b9:
                    f6:dd:26:0e:19:5e:43:06:a8:ab:18:d7:13:b9:13:
                    8c:da:28:d0:35:55:4c:5e:5a:d3:59:66:3a:b6:05:
                    30:b5:33:9a:df:cc:59:91:9a:92:50:63:5f:3e:b2:
                    cb:b6:01:f5:8e:2f:fc:5c:14:d7:76:e1:58:f2:4e:
                    03:0d:55:56:42:31:23:99:8c:a6:8b:30:22:6a:02:
                    af:e6:cd:ed:fb:a6:81:c8:e8:3f:be:60:a4:3e:94:
                    22:ef:61:9a:2e:8b:1d:34:f2:76:45:c7:05:a7:85:
                    1d:22:04:9c:39:f3:f3:21:43:f0:c1:6c:85:c1:79:
                    b9:b0:60:d9:56:75:36:34:15:23:ce:73:06:9a:02:
                    54:3b:13:0f:2b:d3:71:e7:3d:89:01:68:66:08:ae:
                    cd:32:da:31:2c:5b:d6:8e:60:d8:51:95:6b:ea:6b:
                    99:8e:d4:ed:46:f3:7c:07:56:9a:ef:c2:03:17:67:
                    45:ad:75:1e:ac:2a:14:ed:13:a3:16:97:a7:a4:2f:
                    a5:b6:27:46:e9:26:8c:00:e6:38:bf:b6:9d:51:2e:
                    1d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:51:B9:D0:6B:F9:D4:AF:BA:CE:46:D4:65:DA:D8:71:90:27:01:71
            X509v3 Authority Key Identifier:
                keyid:89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a3a2f33332d3333203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57dc::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:fd:40:ba:3d:cb:9b:77:32:99:06:03:48:ad:c5:e3:7b:b3:
         f2:5d:a7:d0:0c:b3:b9:7f:ec:66:88:91:70:44:fc:77:85:01:
         b9:9f:77:bc:e7:07:ee:c4:bd:0d:c1:c3:3c:d9:4a:0c:b8:8f:
         ba:4a:cd:31:05:a5:6a:b9:95:45:a3:35:86:75:14:d7:6c:8c:
         fa:9c:b0:80:34:21:fd:ce:85:04:9a:63:6e:c6:ff:c3:87:3d:
         58:1e:ca:2b:40:ac:ff:82:84:6e:e4:49:9f:62:a4:fd:63:2c:
         e7:02:89:c3:d0:95:7a:b1:a3:fb:98:64:0d:bf:af:e2:f1:fd:
         87:16:90:ee:f3:b5:a0:6a:72:23:98:80:88:4c:e5:b3:de:6c:
         88:34:b7:4c:09:46:d5:3a:3c:40:df:6b:2a:b0:c0:fa:5d:95:
         31:0f:10:87:3a:61:f0:0e:ec:4c:e6:1f:cd:41:a0:37:df:25:
         db:0b:42:71:65:f9:42:c3:87:11:d0:f2:b6:25:bf:8b:b8:20:
         1a:10:ac:ac:dd:bb:34:66:0e:d7:56:bb:d6:c5:35:30:8b:4c:
         93:c7:c7:15:c9:5f:b6:ca:38:e4:73:de:50:32:6c:f5:db:c4:
         f0:fe:7d:14:e7:20:92:0b:86:27:ed:a9:32:3a:aa:53:0b:9b:
         00:41:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:31:11 2026 by rpki-client