Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BSrNUtdHk64C8R8dJ3MhRigLqq3FUCpuPivRcK5y2GU/0/323830343a346335383a3a2f33322d313238203d3e20323637333635.roa
File:                     323830343a346335383a3a2f33322d313238203d3e20323637333635.roa (raw, json)
Hash identifier:          vgFCc1QqZJP9YUCEAXuo6XlYAmwMbGzd2MPjBcvouL8=
Subject key identifier:   0E:F0:78:3F:21:6F:81:AA:79:DE:C2:62:4E:56:20:1B:13:ED:D4:6F
Certificate issuer:       /CN=108C51360FB26A8DAFB284343211C85420292D05
Certificate serial:       55D7132B5D8E1FBF8EEABFA4E80BC71EBC4B3AD2
Authority key identifier: 10:8C:51:36:0F:B2:6A:8D:AF:B2:84:34:32:11:C8:54:20:29:2D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/108C51360FB26A8DAFB284343211C85420292D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BSrNUtdHk64C8R8dJ3MhRigLqq3FUCpuPivRcK5y2GU/0/323830343a346335383a3a2f33322d313238203d3e20323637333635.roa
Signing time:             Thu 16 Apr 2026 20:04:59 +0000
ROA not before:           Thu 16 Apr 2026 19:59:59 +0000
ROA not after:            Thu 15 Apr 2027 20:04:59 +0000
asID:                     267365
IP address blocks:        2804:4c58::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BSrNUtdHk64C8R8dJ3MhRigLqq3FUCpuPivRcK5y2GU/0/108C51360FB26A8DAFB284343211C85420292D05.crl
                          rsync://rpki-repo.registro.br/repo/9BSrNUtdHk64C8R8dJ3MhRigLqq3FUCpuPivRcK5y2GU/0/108C51360FB26A8DAFB284343211C85420292D05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/108C51360FB26A8DAFB284343211C85420292D05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:13:2b:5d:8e:1f:bf:8e:ea:bf:a4:e8:0b:c7:1e:bc:4b:3a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108C51360FB26A8DAFB284343211C85420292D05
        Validity
            Not Before: Apr 16 19:59:59 2026 GMT
            Not After : Apr 15 20:04:59 2027 GMT
        Subject: CN=0EF0783F216F81AA79DEC2624E56201B13EDD46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2f:d3:6d:33:11:c2:fa:02:e2:b9:82:83:cf:
                    cb:f9:d4:8f:f3:ba:e4:cf:a0:1f:09:2f:44:4c:b5:
                    14:b8:3c:4f:f8:29:8d:d9:cc:cc:cf:3e:c8:3d:84:
                    71:66:d9:3e:9f:da:2f:6d:05:07:66:9a:1f:21:4d:
                    6a:7a:45:e8:46:83:8d:fb:c1:3c:53:c6:5c:7c:f3:
                    80:8f:e2:79:43:04:92:ee:01:1e:b2:fc:a2:f0:a1:
                    68:83:ef:b6:41:ce:5f:31:6a:7c:ed:35:77:96:5b:
                    8b:37:05:71:36:8a:19:eb:04:b1:e1:aa:80:8a:07:
                    23:30:48:31:d5:7d:6f:8d:60:4a:da:cb:ec:5c:70:
                    e4:09:a2:bf:90:f7:e1:62:42:21:74:ef:1e:c2:32:
                    4f:47:8c:af:26:6c:9b:60:35:ad:f9:08:3a:ca:c4:
                    fb:e5:63:83:83:f6:5e:53:ca:53:4a:3f:e1:88:47:
                    eb:a9:fa:25:7f:ee:f4:49:0d:d0:52:fc:22:f4:5a:
                    40:b7:8f:ba:4f:30:24:ca:1e:19:0e:fd:df:7f:51:
                    f3:d6:4d:ee:17:fb:27:17:ba:35:35:02:13:bb:13:
                    63:a7:50:08:6b:44:7d:64:db:b7:32:a3:e9:ba:c5:
                    1a:a3:30:94:ab:04:f5:de:ed:c2:d8:8d:09:9e:a8:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F0:78:3F:21:6F:81:AA:79:DE:C2:62:4E:56:20:1B:13:ED:D4:6F
            X509v3 Authority Key Identifier:
                keyid:10:8C:51:36:0F:B2:6A:8D:AF:B2:84:34:32:11:C8:54:20:29:2D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BSrNUtdHk64C8R8dJ3MhRigLqq3FUCpuPivRcK5y2GU/0/108C51360FB26A8DAFB284343211C85420292D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/108C51360FB26A8DAFB284343211C85420292D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BSrNUtdHk64C8R8dJ3MhRigLqq3FUCpuPivRcK5y2GU/0/323830343a346335383a3a2f33322d313238203d3e20323637333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c58::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:22:2a:97:1d:d6:50:69:d5:0c:db:25:72:d6:d6:2b:c9:
         ed:b8:ac:07:7d:73:5b:d3:2d:da:56:55:64:97:90:13:b0:d0:
         75:36:9f:3c:18:a5:1c:6b:7b:68:3a:b5:82:6c:e0:63:5a:9d:
         45:77:5e:33:9b:b5:4c:fb:13:e9:bc:7f:13:6f:6e:47:f5:7d:
         57:99:7d:18:72:ff:c2:b3:e1:a0:2e:18:68:e5:24:9b:24:d0:
         c6:83:69:59:45:6a:49:79:69:ca:c4:f3:1d:39:0d:45:f9:a5:
         bc:fe:3f:5b:cb:bf:46:26:3a:c9:31:f3:a1:51:a9:06:9f:90:
         8e:b9:2e:ad:77:0a:d7:e6:67:56:8e:09:71:01:73:4a:84:37:
         81:29:1d:5f:e4:d1:e0:8f:54:61:b8:60:1e:b6:ea:58:12:a8:
         d6:2e:2c:b3:ec:fc:a8:31:b5:57:d2:0f:cd:26:86:a7:a3:ab:
         79:72:dc:44:cc:dd:13:4f:32:06:b2:37:b4:c3:11:d7:3d:a6:
         b1:ba:b6:3e:a4:fb:70:af:fe:1b:7a:49:aa:96:73:0e:47:4d:
         55:92:d0:e5:fe:ce:bb:df:a2:e4:3c:c1:a1:19:ef:d8:03:70:
         8b:e9:e0:0a:a2:54:ae:dc:df:6e:ab:51:ba:8b:72:1b:84:a0:
         6a:68:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:50:21 2026 by rpki-client