Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33322d313236203d3e20323639313833.roa
File:                     323830343a363061633a3a2f33322d313236203d3e20323639313833.roa (raw, json)
Hash identifier:          Qj1ciIMh3QeTgXCJFnVdDa0J/3oA8O+vvs2SYUFtCHM=
Subject key identifier:   16:F7:C3:4F:D0:40:10:48:3C:E3:DE:38:8B:59:03:72:7C:F8:90:27
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       06EDD6027397BB5D2742AD4B811007FBD6E7036E
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33322d313236203d3e20323639313833.roa
Signing time:             Fri 10 Apr 2026 16:26:04 +0000
ROA not before:           Fri 10 Apr 2026 16:21:04 +0000
ROA not after:            Fri 09 Apr 2027 16:26:04 +0000
asID:                     269183
IP address blocks:        2804:60ac::/32 maxlen: 126
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
                          rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ed:d6:02:73:97:bb:5d:27:42:ad:4b:81:10:07:fb:d6:e7:03:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Apr 10 16:21:04 2026 GMT
            Not After : Apr  9 16:26:04 2027 GMT
        Subject: CN=16F7C34FD04010483CE3DE388B5903727CF89027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:6a:a5:4b:a0:91:6f:11:03:f5:6f:5f:61:
                    e8:df:ba:69:a1:77:aa:6c:8d:73:82:17:8d:3f:20:
                    9b:44:77:e5:9d:ba:14:ff:d9:4d:df:05:79:29:80:
                    bd:f6:b1:92:97:e7:cd:bf:45:b2:7e:54:5f:27:f6:
                    7e:4a:66:77:90:46:87:f9:88:ef:1a:ad:28:4c:8c:
                    fc:19:1c:f4:26:68:cd:c1:d9:ed:1e:4f:e9:58:c2:
                    5e:17:85:5d:7b:10:29:16:3d:5b:d7:21:d1:8f:67:
                    e7:b7:bc:d3:ff:34:e1:08:de:0d:5f:93:92:03:b8:
                    94:46:41:9e:48:92:34:e6:c0:82:3a:b4:fe:41:eb:
                    91:43:aa:ad:6d:05:cf:1a:df:85:1d:b9:f3:a1:bb:
                    75:d0:5f:76:fb:a8:f9:ce:e3:b4:f9:9b:05:e2:b0:
                    f9:a7:a1:1d:32:b2:1d:34:ff:13:77:e7:20:2b:fe:
                    6f:87:9a:bf:f4:7e:35:09:80:3c:3b:39:db:63:e1:
                    f1:23:1e:94:8a:f8:43:b7:97:4e:4c:55:2b:dd:74:
                    af:5d:65:f7:97:ae:5e:cd:21:ea:53:87:35:91:63:
                    11:15:37:b2:4f:93:5a:e0:ce:cb:06:9a:3b:80:9a:
                    20:fe:74:31:d4:76:56:f3:3e:0c:00:23:f1:6f:22:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F7:C3:4F:D0:40:10:48:3C:E3:DE:38:8B:59:03:72:7C:F8:90:27
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33322d313236203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:65:06:22:66:6c:e1:50:5e:3d:59:dc:91:bb:d2:2a:28:
         69:41:47:b9:d6:39:3a:ba:e7:a4:8a:71:2f:c8:94:0e:e4:16:
         b5:db:f2:e2:94:75:d7:74:fe:d5:90:2e:5b:14:a9:0d:ac:c7:
         06:84:d2:c4:f3:89:69:57:be:4c:ba:ac:59:49:b4:c1:5a:dd:
         5d:72:93:9a:f6:12:48:4e:23:fa:b1:35:fe:29:66:ce:8d:e6:
         30:17:35:2b:ab:b9:ae:4e:18:6f:76:b9:6f:0c:c1:71:fe:5a:
         18:ce:d6:4b:6b:75:e9:fd:d8:4f:d8:69:47:f4:16:9d:cf:b4:
         ac:0e:37:d1:2a:6e:6b:6e:12:67:bb:b8:b3:19:72:1a:91:74:
         6a:61:10:68:2d:b0:34:8f:65:d3:d8:bc:34:57:64:6b:5e:a5:
         6a:c3:a6:df:3b:a2:47:6c:d7:76:3e:f4:f9:27:28:65:93:ce:
         95:86:79:d7:06:92:db:68:56:d1:df:61:56:91:29:94:9e:4c:
         70:55:94:29:9f:af:3e:a3:18:85:75:47:bf:82:10:96:9e:60:
         13:f3:d2:f6:b1:af:aa:09:a8:ae:4e:b6:d3:e1:0d:3b:64:72:
         1b:20:46:af:21:eb:94:ad:1c:01:19:dd:14:df:7d:ea:18:5e:
         a5:5d:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:19:54 2026 by rpki-client