Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa
File:                     323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa (raw, json)
Hash identifier:          rrQlFGUxLtN+X/evQ2tS7WilHoVL9aQjDFFLu36q3Vc=
Subject key identifier:   2D:AF:5A:C2:A0:5D:49:42:F6:94:4D:C9:07:EF:15:3E:1F:87:E5:79
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       446EB95858558C1369E7B81B0D7E94A37EE27070
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa
Signing time:             Thu 09 Apr 2026 18:53:02 +0000
ROA not before:           Thu 09 Apr 2026 18:48:02 +0000
ROA not after:            Thu 08 Apr 2027 18:53:02 +0000
asID:                     52772
IP address blocks:        2804:259c:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 22:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6e:b9:58:58:55:8c:13:69:e7:b8:1b:0d:7e:94:a3:7e:e2:70:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: Apr  9 18:48:02 2026 GMT
            Not After : Apr  8 18:53:02 2027 GMT
        Subject: CN=2DAF5AC2A05D4942F6944DC907EF153E1F87E579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:ff:8b:f4:21:19:99:72:25:a3:cf:f7:c6:
                    98:98:41:1a:36:da:d2:89:54:15:df:9e:44:35:9e:
                    b0:8d:ca:15:0d:ac:d8:30:d4:6a:0d:05:22:3a:51:
                    51:ae:3d:2e:d8:a1:56:46:bc:69:44:71:fe:32:9e:
                    c5:70:cf:ed:96:03:fd:82:3d:1e:9a:4a:8d:ad:d6:
                    3b:24:c5:ae:6f:8f:aa:b6:7f:f2:08:fe:ee:df:ce:
                    a9:80:ab:a5:37:fa:88:72:96:87:cc:10:72:89:cc:
                    0f:96:e5:fa:7b:ba:d5:9d:85:65:3d:8d:6e:0c:60:
                    cb:d9:fb:f6:15:5e:2c:b8:a9:41:2e:b0:57:ee:55:
                    d6:4f:e9:1d:dd:71:78:cb:b7:ad:ef:e3:b9:54:84:
                    ef:db:a2:9b:b3:55:32:ad:59:58:8b:83:61:70:18:
                    93:28:60:e0:53:b9:6b:05:3c:a5:3a:ad:98:23:cb:
                    25:a5:9f:37:80:75:4e:68:0a:59:b0:85:34:2d:de:
                    e8:04:3f:97:8b:1e:82:df:f5:5b:47:31:b1:6d:38:
                    c5:65:28:d7:a8:b8:f1:0c:83:84:b6:46:82:40:4d:
                    1d:d0:e4:4d:69:70:e1:9e:21:b9:07:a4:49:17:47:
                    14:ac:07:2c:ee:a2:08:80:48:d0:ae:f3:5b:cb:1c:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AF:5A:C2:A0:5D:49:42:F6:94:4D:C9:07:EF:15:3E:1F:87:E5:79
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:20:85:c7:18:65:73:8f:ea:d8:eb:88:fe:ee:a2:fa:8a:6c:
         23:30:69:02:e0:ae:29:c3:af:ae:93:21:db:b8:e8:01:30:d5:
         c4:5d:78:e7:b0:93:1a:69:ff:55:82:dd:1e:ed:72:05:4e:f4:
         43:9a:af:a1:59:1d:c7:f4:97:3e:3f:94:97:dd:de:c1:79:54:
         53:3b:3f:96:ce:82:1a:22:ba:6a:ec:c8:34:80:b4:e1:9d:96:
         da:57:81:f9:35:01:81:d1:8b:f6:cc:10:1c:65:62:a4:72:b0:
         25:f4:c9:33:3d:98:7d:db:06:cc:60:47:e2:73:a0:9d:79:3b:
         ef:ca:bb:50:bc:b5:dd:17:a0:62:17:2a:b6:5f:99:57:35:ce:
         f6:7a:09:83:f2:c1:76:d7:7f:65:12:bb:14:af:8e:15:1f:17:
         b4:d6:04:93:14:3f:48:c5:4d:00:b8:38:ce:94:10:ed:11:a6:
         70:59:29:bd:93:80:4b:af:57:a5:dd:fa:62:c5:61:00:50:0e:
         82:ba:9f:a4:fe:44:2c:e9:fc:89:4b:9d:10:8d:56:4a:73:32:
         59:a2:fc:88:22:2a:9d:9c:a4:b1:e2:09:b1:65:0f:97:cd:33:
         c5:41:d7:9d:56:4f:29:f6:9b:31:04:cb:56:89:10:4b:32:ec:
         a0:b2:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:47:27 2026 by rpki-client