Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/323830343a353264303a3a2f33322d3438203d3e20323638353433.roa
File:                     323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (raw, json)
Hash identifier:          IcZwwhQ2J8hWITHTr4hQGS/84f220KK3tuW6qpaJC6o=
Subject key identifier:   0A:7B:9D:AF:5A:42:86:D3:8F:CC:07:F0:09:6C:A9:FE:EC:92:D3:C2
Certificate issuer:       /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Certificate serial:       1BEC616DF833AFE90668579DE5A9E25FE37502B9
Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/323830343a353264303a3a2f33322d3438203d3e20323638353433.roa
Signing time:             Fri 10 Apr 2026 20:52:03 +0000
ROA not before:           Fri 10 Apr 2026 20:47:03 +0000
ROA not after:            Fri 09 Apr 2027 20:52:03 +0000
asID:                     268543
IP address blocks:        2804:52d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl
                          rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ec:61:6d:f8:33:af:e9:06:68:57:9d:e5:a9:e2:5f:e3:75:02:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
        Validity
            Not Before: Apr 10 20:47:03 2026 GMT
            Not After : Apr  9 20:52:03 2027 GMT
        Subject: CN=0A7B9DAF5A4286D38FCC07F0096CA9FEEC92D3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:47:64:9e:57:d5:c9:4f:e6:7c:80:e2:62:
                    ea:c0:f5:4b:33:d8:f5:2b:5c:f8:0f:32:93:7d:01:
                    8d:c9:ec:9e:be:36:e2:04:4d:c6:31:29:b8:b3:65:
                    22:fd:f5:60:0e:75:c4:14:04:d7:2d:9f:ea:67:b1:
                    9b:e6:8e:e8:4c:62:14:df:69:9b:a5:e3:f5:23:56:
                    14:44:94:e6:46:ed:7a:c7:4c:f7:6b:4b:12:43:60:
                    e7:85:51:ab:05:1f:97:b2:dc:4f:9c:73:1f:cd:e3:
                    4e:ee:3c:bf:51:95:da:f0:7c:ac:ee:83:3c:08:86:
                    19:82:b8:90:47:70:bc:1a:13:33:a3:5b:4c:78:94:
                    25:16:67:e5:53:f2:20:c5:af:32:9c:4c:a6:06:38:
                    23:d2:09:ac:27:16:57:a5:f6:f3:7b:26:05:63:79:
                    60:96:38:94:90:18:99:cc:7e:63:8e:5f:97:a0:cd:
                    49:ef:4f:c4:3a:9c:8c:b6:0f:17:1e:97:cd:ef:f0:
                    51:69:06:4a:ab:75:89:04:e6:74:86:da:38:1e:dc:
                    92:68:f9:16:93:88:cf:b9:eb:4a:f5:18:5f:1d:f1:
                    7c:aa:74:7f:1d:5b:a1:3d:c4:be:dd:73:a1:0c:e7:
                    16:4a:67:e2:ca:32:9b:96:ea:d0:38:df:f9:2d:9c:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7B:9D:AF:5A:42:86:D3:8F:CC:07:F0:09:6C:A9:FE:EC:92:D3:C2
            X509v3 Authority Key Identifier:
                keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/323830343a353264303a3a2f33322d3438203d3e20323638353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:8b:d6:ea:15:46:5c:89:f0:ff:69:1e:91:c8:5f:a2:dc:b2:
         e3:bb:3e:cf:eb:98:06:1d:e9:3e:e0:de:04:e0:50:41:3e:9a:
         bd:92:1e:6c:c7:41:8a:0d:ca:db:7c:1f:d6:39:9d:64:e5:d8:
         a8:99:09:94:57:f0:b5:8d:81:d6:ac:88:1d:77:4c:ff:71:ca:
         21:ac:76:52:24:1a:17:62:30:bb:73:b0:4a:67:28:38:ad:22:
         a7:4f:c6:70:52:c3:e6:fd:3a:75:29:db:22:1b:c6:05:50:41:
         a1:64:13:5c:3f:7e:a8:1b:74:1a:5f:63:2f:6b:3d:16:4c:b2:
         85:2b:db:22:38:12:b7:5f:c1:a7:59:58:20:5a:b3:88:61:c7:
         00:2c:c2:04:6c:35:a9:3f:35:c2:ea:0e:ef:6d:30:ac:1c:18:
         f7:69:21:7b:e5:a0:e8:9b:ca:06:18:f6:89:b0:70:1d:cc:95:
         49:0a:e8:05:83:dc:29:19:fc:ac:ae:2f:7c:66:35:86:de:d4:
         17:5f:d0:5b:9b:90:07:f6:5e:b0:38:66:c3:79:59:23:21:c9:
         53:49:1f:9d:ac:94:f2:c8:87:b6:f7:9e:a8:71:ff:60:54:43:
         f7:23:f4:32:f7:85:f2:a1:6c:14:fe:03:cf:ef:fe:b3:6a:3a:
         0a:0f:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:46:16 2026 by rpki-client