Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/323830343a393762303a3a2f33322d313238203d3e20323735363339.roa
File:                     323830343a393762303a3a2f33322d313238203d3e20323735363339.roa (raw, json)
Hash identifier:          7WQfT9s5Vs6JyWbtMwa79SveBVBaRPUpvUopeNKplRA=
Subject key identifier:   6E:00:62:76:8F:28:81:CF:0A:6E:B2:8B:6A:92:BD:F4:64:A8:A5:60
Certificate issuer:       /CN=F2B381253D05DE08BFD574FE941200F5C91B6CE7
Certificate serial:       530E2298060B3F32C37E8D157D123144B0252E0A
Authority key identifier: F2:B3:81:25:3D:05:DE:08:BF:D5:74:FE:94:12:00:F5:C9:1B:6C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2B381253D05DE08BFD574FE941200F5C91B6CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/323830343a393762303a3a2f33322d313238203d3e20323735363339.roa
Signing time:             Thu 16 Apr 2026 19:48:14 +0000
ROA not before:           Thu 16 Apr 2026 19:43:14 +0000
ROA not after:            Thu 15 Apr 2027 19:48:14 +0000
asID:                     275639
IP address blocks:        2804:97b0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/F2B381253D05DE08BFD574FE941200F5C91B6CE7.crl
                          rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/F2B381253D05DE08BFD574FE941200F5C91B6CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2B381253D05DE08BFD574FE941200F5C91B6CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0e:22:98:06:0b:3f:32:c3:7e:8d:15:7d:12:31:44:b0:25:2e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2B381253D05DE08BFD574FE941200F5C91B6CE7
        Validity
            Not Before: Apr 16 19:43:14 2026 GMT
            Not After : Apr 15 19:48:14 2027 GMT
        Subject: CN=6E0062768F2881CF0A6EB28B6A92BDF464A8A560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:04:9c:50:aa:1f:60:9b:8b:ef:23:76:cd:
                    00:d6:30:24:be:f9:91:46:8d:ff:0e:61:7d:66:b2:
                    d5:c7:74:e8:3b:f5:bc:84:b4:66:75:bd:ec:3e:07:
                    8a:d4:0b:3d:bd:66:f4:82:4a:89:bb:0f:e7:b1:9b:
                    8e:1c:f2:03:1e:c6:28:dd:6f:71:3f:a6:52:c5:56:
                    9f:34:7f:bc:81:5e:66:64:ac:7b:b9:a3:6e:85:32:
                    c0:d4:ba:23:fe:e7:7e:b3:03:e0:73:1b:f8:4f:66:
                    3d:53:e7:43:46:01:a4:b7:d5:de:1f:f1:d7:93:25:
                    28:c5:f1:4c:cd:92:11:3b:81:69:f8:cf:c6:ea:2c:
                    e4:cb:06:4d:a3:c9:7a:95:c2:7d:9b:ea:9c:3c:23:
                    d4:1f:ed:aa:61:47:27:1e:5b:f8:8f:79:d4:28:81:
                    2c:ef:3c:ea:c6:25:c7:d9:80:3d:34:96:12:26:6e:
                    b7:45:9d:bb:e9:fc:07:3d:37:b7:2c:89:23:3a:ad:
                    e2:a4:65:2f:cf:00:2d:85:2e:ad:f0:aa:5a:8f:c9:
                    9b:fc:34:55:ed:93:5f:55:3c:e2:b9:4a:e0:a8:31:
                    f9:25:04:5f:77:40:97:42:42:46:a9:5f:d1:86:ed:
                    b6:07:07:09:34:60:3a:2a:d4:78:bd:43:8c:33:05:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:00:62:76:8F:28:81:CF:0A:6E:B2:8B:6A:92:BD:F4:64:A8:A5:60
            X509v3 Authority Key Identifier:
                keyid:F2:B3:81:25:3D:05:DE:08:BF:D5:74:FE:94:12:00:F5:C9:1B:6C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/F2B381253D05DE08BFD574FE941200F5C91B6CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2B381253D05DE08BFD574FE941200F5C91B6CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/323830343a393762303a3a2f33322d313238203d3e20323735363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:97b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c5:a0:3f:8c:f8:07:0d:38:eb:f0:b2:92:0f:ad:74:8f:e1:
         8c:06:9d:ea:be:6b:68:89:ad:27:92:12:dd:b8:c3:fc:77:5a:
         1b:cc:ba:c1:ba:e4:50:d8:25:21:e8:e2:e9:58:56:61:d2:63:
         86:3c:65:0e:1c:9c:08:23:c8:5c:ef:b0:15:80:6f:9e:f0:93:
         b9:ad:92:46:f3:c1:fc:f1:17:61:25:f2:d4:fd:a4:c7:12:2b:
         63:73:21:e5:42:f4:ed:5d:a9:32:3e:1a:c6:fa:1d:cb:79:e7:
         63:78:17:85:49:65:9e:f2:06:7f:63:ae:8a:af:2d:ee:08:71:
         b8:36:c8:39:fe:44:77:11:a7:d9:23:fc:28:54:b6:10:4f:2c:
         12:e5:1e:e3:08:f3:b1:7d:44:3b:85:eb:b3:e5:22:80:ec:ea:
         0d:b9:00:9c:af:fb:f0:7a:29:a8:14:96:5f:cc:f1:87:3f:06:
         e0:f2:cf:79:58:60:f5:66:af:14:2c:43:fd:f3:89:82:87:bb:
         26:75:79:c3:6b:d8:de:b6:b2:be:eb:92:60:dd:5f:6f:c6:09:
         f2:c1:86:66:57:1d:49:2b:52:e1:91:ab:a2:ee:ce:f4:00:45:
         1a:c4:ce:be:75:70:c1:47:45:c4:1b:13:ce:00:82:b0:ca:5c:
         b5:fa:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:38:50 2026 by rpki-client