Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3a2f33332d3333203d3e20323639363039.roa
File:                     323830343a363732633a3a2f33332d3333203d3e20323639363039.roa (raw, json)
Hash identifier:          98nWAcbh7Hm/eImAscNqKTS5PhD1VwECtnIstC651EM=
Subject key identifier:   BB:9C:1B:B5:8D:72:19:51:1F:5A:66:62:A3:27:EE:97:5C:77:1A:E2
Certificate issuer:       /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
Certificate serial:       42217B368748D83F754C2792D0CEF65735463A71
Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3a2f33332d3333203d3e20323639363039.roa
Signing time:             Tue 14 Apr 2026 11:30:56 +0000
ROA not before:           Tue 14 Apr 2026 11:25:56 +0000
ROA not after:            Tue 13 Apr 2027 11:30:56 +0000
asID:                     269609
IP address blocks:        2804:672c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl
                          rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 09:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:21:7b:36:87:48:d8:3f:75:4c:27:92:d0:ce:f6:57:35:46:3a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
        Validity
            Not Before: Apr 14 11:25:56 2026 GMT
            Not After : Apr 13 11:30:56 2027 GMT
        Subject: CN=BB9C1BB58D7219511F5A6662A327EE975C771AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b4:5c:42:32:09:2f:7d:94:80:ab:ba:c0:eb:
                    ee:30:22:a0:a8:8e:b9:33:a8:3b:4a:1e:47:bf:13:
                    d6:7f:56:49:2d:b5:43:1f:97:1a:25:1a:8f:2c:7d:
                    35:66:96:79:0d:f9:81:8c:e4:58:97:d4:6f:a5:f8:
                    5b:a9:b1:cd:58:d6:6b:5f:c3:a5:f2:70:ac:6a:ea:
                    41:2b:92:9e:fa:f1:c9:48:a9:3c:59:e5:e4:db:48:
                    93:02:98:13:f4:27:92:d3:1d:5a:d2:e6:af:2a:b0:
                    b2:36:0e:c8:31:a1:94:e6:e7:e0:a0:3c:76:23:c0:
                    47:85:7d:2f:ee:87:d3:99:66:18:a3:69:9c:58:6f:
                    55:39:2e:cf:3b:48:02:a3:3d:f8:42:82:37:60:5f:
                    07:ff:9c:ae:69:01:4f:67:1b:1a:79:b7:d2:74:a8:
                    8e:9b:37:85:28:b5:21:17:bf:e0:c9:a8:e0:96:a7:
                    05:cc:71:2b:a4:66:3c:9b:fe:66:a9:a4:ad:e4:7f:
                    c5:14:98:76:29:df:e4:dd:c2:b8:4d:0a:c8:1c:b4:
                    f7:a6:db:38:69:d6:0e:a0:df:9e:0e:37:ad:b5:cd:
                    93:d2:36:0b:78:84:1c:06:e6:31:19:58:cd:3a:49:
                    8c:79:c5:70:06:19:13:9a:db:87:ac:e9:fc:a1:76:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9C:1B:B5:8D:72:19:51:1F:5A:66:62:A3:27:EE:97:5C:77:1A:E2
            X509v3 Authority Key Identifier:
                keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3a2f33332d3333203d3e20323639363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:672c::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:db:04:ad:81:15:c8:01:58:e3:5f:2d:5b:d0:f2:cb:56:
         28:9c:36:d6:1a:d5:f4:1b:3c:b5:99:20:68:aa:80:72:2c:bf:
         45:eb:89:3b:f7:ed:8e:fc:90:09:8a:d3:89:78:5e:41:c6:43:
         05:b5:2e:a5:86:b4:b1:76:18:ab:b8:26:5e:fb:32:24:28:c2:
         de:d3:4d:17:c7:ed:85:fb:4a:4a:bc:5a:8d:a3:53:4f:27:a0:
         84:c4:36:07:5f:f6:cc:ec:75:2b:8f:d4:6e:aa:7e:b9:c9:b3:
         fc:2d:5f:b8:09:0b:a9:42:42:c1:e3:da:05:a0:58:66:97:19:
         fa:65:20:9d:27:1c:7b:81:5a:3b:90:08:26:07:84:d3:d9:30:
         0c:42:7c:2a:49:56:2b:50:42:14:97:10:0c:b6:b9:a6:d1:3b:
         5d:8a:6b:38:6f:33:bc:85:83:e5:3d:d5:f3:65:0c:0f:52:16:
         cc:50:a2:ee:8a:48:f1:62:1f:97:f2:f2:46:77:93:dd:d7:4a:
         ce:44:d5:b6:b9:9d:ad:84:f2:8d:20:9f:6b:3f:0f:4a:dd:38:
         94:0e:d7:50:79:55:a2:f7:a5:e7:ca:6c:5e:13:94:09:2a:5e:
         85:8d:01:23:58:31:78:df:87:22:54:14:57:09:9a:a1:b5:c4:
         a3:41:6b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:26:42 2026 by rpki-client