Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3332203d3e203532353837.roa
File:                     323830343a386563303a3a2f33322d3332203d3e203532353837.roa (raw, json)
Hash identifier:          pTZEVhVDPQYGCQbBV41GVXkSfG5aFQnLiOopgunTjyQ=
Subject key identifier:   FB:FC:CB:E5:4A:D3:3B:D4:E7:B3:06:24:96:A1:EA:96:61:0F:43:35
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       4C1104DBD461DA290BC5BA4B376D58E623D88E29
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3332203d3e203532353837.roa
Signing time:             Thu 16 Apr 2026 00:33:40 +0000
ROA not before:           Thu 16 Apr 2026 00:28:40 +0000
ROA not after:            Thu 15 Apr 2027 00:33:40 +0000
asID:                     52587
IP address blocks:        2804:8ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:11:04:db:d4:61:da:29:0b:c5:ba:4b:37:6d:58:e6:23:d8:8e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Apr 16 00:28:40 2026 GMT
            Not After : Apr 15 00:33:40 2027 GMT
        Subject: CN=FBFCCBE54AD33BD4E7B3062496A1EA96610F4335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:53:f0:b9:15:7b:93:02:00:aa:80:0e:2d:
                    e4:fb:52:19:09:8b:14:f6:bf:00:9b:89:c4:c3:aa:
                    0a:a3:c9:04:df:11:2b:a3:79:03:e1:c7:ed:3c:5b:
                    b1:75:0e:f8:eb:af:ab:a4:68:73:5a:a7:25:75:a3:
                    f6:18:21:b4:4c:f4:57:57:dc:af:24:31:df:e8:33:
                    6c:6b:50:67:d2:aa:d7:c5:29:cc:ad:f2:4b:29:48:
                    88:76:dd:6a:1b:6b:04:22:4c:ab:81:4e:09:db:e0:
                    6f:ef:6a:9d:b1:c4:73:91:6a:b0:4a:14:ca:5f:32:
                    b9:e5:9b:6a:bc:30:97:11:44:2f:47:c6:1d:91:72:
                    df:0a:09:4b:f3:77:f5:d4:7a:d0:2a:57:99:69:2c:
                    a9:0e:ee:f5:3e:40:12:0d:2f:95:41:e4:08:75:2e:
                    f3:dd:7b:38:01:53:e4:84:97:bb:38:d0:83:00:a3:
                    c4:61:3a:dc:fb:29:88:a2:be:c6:1b:a8:c2:50:ae:
                    1f:c0:6e:fa:e1:0b:32:89:90:c5:4c:9e:e4:69:30:
                    98:65:51:2d:a9:d5:f1:21:53:a0:04:88:c9:26:f3:
                    ae:03:00:9f:68:c9:05:46:58:82:2c:f5:93:25:dd:
                    e4:fa:c8:d4:98:56:13:85:00:10:7b:d5:27:d7:07:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FC:CB:E5:4A:D3:3B:D4:E7:B3:06:24:96:A1:EA:96:61:0F:43:35
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/323830343a386563303a3a2f33322d3332203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:51:f5:8f:7d:6b:99:6f:1e:6a:6a:05:b8:d1:40:bc:9f:
         62:56:cc:5c:d6:80:2b:ce:51:46:89:6b:15:83:00:e9:a4:8c:
         34:a5:fc:61:2d:b1:0a:22:46:48:f5:1a:1d:73:80:68:17:6d:
         06:6b:7f:ec:07:fa:14:74:b2:dd:e8:5b:09:1c:91:02:3f:cf:
         6d:ca:82:38:f1:88:22:ad:ae:58:31:9d:b5:f9:1a:a1:dc:ec:
         dc:3e:8a:6f:f7:76:3c:72:cc:34:bd:0d:40:ac:56:bc:0f:9c:
         a5:cf:bf:77:e4:0a:d8:4c:df:41:4e:2f:b0:2c:77:86:1c:67:
         4c:ef:6d:53:a0:c0:45:4a:03:71:24:32:47:a5:58:1b:bc:31:
         cf:0e:c9:26:0c:2f:46:da:0d:e6:89:7e:ff:74:7f:b1:bd:bc:
         20:70:1b:dd:4d:2c:66:73:06:cd:36:59:6b:40:05:55:de:19:
         e8:c0:2b:cb:17:a9:92:17:05:3d:4d:84:4c:ad:bf:44:f0:92:
         4b:8d:02:05:10:7a:01:02:11:35:ac:e8:69:50:d5:78:64:41:
         1f:ed:17:09:38:d6:9f:98:2c:07:45:25:fc:91:b4:e2:3d:88:
         28:b3:a4:f9:d5:d9:db:e9:9d:6b:2e:3a:ae:62:8d:fa:72:e0:
         11:35:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:04:35 2026 by rpki-client