Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a633030303a3a2f33342d3334203d3e20323730353234.roa
File:                     323830343a366435303a633030303a3a2f33342d3334203d3e20323730353234.roa (raw, json)
Hash identifier:          PKSk5MfxqUJ3xJ025/7pOtmu0UivoaJ6nZE0vidouWQ=
Subject key identifier:   27:E4:34:C4:41:0C:6F:19:68:4E:72:C2:A8:72:6A:35:67:A2:83:CD
Certificate issuer:       /CN=4582BF5F264D259FE997D22E716C8A5B71A0BB83
Certificate serial:       55D355841CB821E209F6EA362FDE81B98DC50C79
Authority key identifier: 45:82:BF:5F:26:4D:25:9F:E9:97:D2:2E:71:6C:8A:5B:71:A0:BB:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a633030303a3a2f33342d3334203d3e20323730353234.roa
Signing time:             Fri 17 Apr 2026 17:05:31 +0000
ROA not before:           Fri 17 Apr 2026 17:00:31 +0000
ROA not after:            Fri 16 Apr 2027 17:05:31 +0000
asID:                     270524
IP address blocks:        2804:6d50:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.crl
                          rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d3:55:84:1c:b8:21:e2:09:f6:ea:36:2f:de:81:b9:8d:c5:0c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4582BF5F264D259FE997D22E716C8A5B71A0BB83
        Validity
            Not Before: Apr 17 17:00:31 2026 GMT
            Not After : Apr 16 17:05:31 2027 GMT
        Subject: CN=27E434C4410C6F19684E72C2A8726A3567A283CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:41:cd:f5:98:d9:c2:1b:df:04:d4:81:8f:
                    3a:ba:22:c0:d8:bf:18:7b:4f:12:68:53:9e:78:46:
                    91:5d:7f:fb:24:1f:85:66:23:37:f8:ab:60:83:9b:
                    cc:d2:49:08:6f:3d:ae:2e:cf:e7:d3:4b:2a:93:e4:
                    07:27:ca:be:fb:af:65:ce:16:7a:ff:03:60:59:29:
                    c1:d7:fe:82:ef:01:33:72:70:aa:10:28:19:b1:34:
                    58:aa:16:60:a4:12:60:cd:7e:8c:7f:de:63:03:da:
                    6f:83:92:fd:a2:38:73:0c:36:c5:66:29:a4:21:52:
                    66:f1:2e:11:80:bb:48:0d:8c:1b:a6:5b:b5:e9:eb:
                    19:79:a0:b8:be:dc:5a:8d:bb:44:6b:56:48:ad:b0:
                    06:83:ee:bb:fd:31:ac:0f:00:22:75:80:4f:77:4c:
                    b8:2b:0e:56:77:a5:aa:72:6f:7e:51:45:af:f2:7b:
                    af:4d:0b:bd:db:35:ef:cf:d3:61:40:60:db:09:0c:
                    8a:b2:51:dc:d6:38:47:fd:90:47:63:2a:c5:4d:ff:
                    a7:1f:e5:fa:0a:83:8e:05:3d:c1:74:0d:81:c8:f4:
                    95:b3:9e:67:05:4e:6e:0d:de:97:2a:37:09:76:09:
                    ac:8e:92:7f:7e:6d:f1:bd:5a:5c:a3:ce:3b:5d:d3:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E4:34:C4:41:0C:6F:19:68:4E:72:C2:A8:72:6A:35:67:A2:83:CD
            X509v3 Authority Key Identifier:
                keyid:45:82:BF:5F:26:4D:25:9F:E9:97:D2:2E:71:6C:8A:5B:71:A0:BB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a633030303a3a2f33342d3334203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d50:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:97:3c:d9:56:65:0b:02:86:8d:c1:6d:06:23:ed:ba:a5:e8:
         20:a5:5a:93:af:68:f8:ac:58:b4:20:1b:fe:6d:e2:64:9c:38:
         f1:60:9c:c0:1c:52:27:38:87:2b:90:de:6b:f4:88:88:58:47:
         c3:5e:25:27:09:70:2e:8a:58:40:2b:35:40:30:49:61:1a:86:
         e0:bb:b3:df:c6:ff:c4:2c:0f:96:3c:8b:be:b4:f4:35:d9:55:
         21:8d:e0:5b:d0:30:9e:e7:f3:ab:30:62:92:e6:24:fc:cb:62:
         6f:27:55:9f:a0:23:bb:32:8a:58:32:58:c9:cb:a8:86:c3:10:
         ee:5f:a8:34:f4:60:29:0b:d2:f2:01:72:eb:b0:8f:99:27:cd:
         fa:26:b6:83:da:10:b9:48:30:ed:44:16:ed:0b:0a:f6:51:ab:
         6a:76:60:86:59:60:66:6d:d5:bd:b8:10:ed:c1:9f:9c:0c:d6:
         e5:4b:ad:47:d3:f1:36:d6:ed:06:72:69:9d:41:eb:84:56:ed:
         c8:31:4d:f9:c8:75:4e:d7:15:09:ec:86:96:67:a0:de:7e:b7:
         27:7e:73:4e:41:86:8a:d2:1d:ed:da:c6:43:c1:62:7d:14:01:
         8c:b4:da:7d:2e:00:b9:46:bf:8c:0c:9a:59:cd:92:aa:69:25:
         9d:34:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:55:54 2026 by rpki-client