Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3335203d3e203631363034.roa
File:                     323830343a373735343a3a2f33322d3335203d3e203631363034.roa (raw, json)
Hash identifier:          cpkP9vhmpmy4Z3OwwnyxyN3oDj1Kg9AI9V1F13Z+xUc=
Subject key identifier:   4D:81:93:C3:36:26:6E:CD:6A:7D:35:4A:04:68:A8:74:FC:92:8D:2D
Certificate issuer:       /CN=7E0AD46BC956DF4483B7CF4F2040DD9BAC1359A2
Certificate serial:       2F25BAF740C24DED914C29066C16C7C62C1D15FE
Authority key identifier: 7E:0A:D4:6B:C9:56:DF:44:83:B7:CF:4F:20:40:DD:9B:AC:13:59:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E0AD46BC956DF4483B7CF4F2040DD9BAC1359A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3335203d3e203631363034.roa
Signing time:             Fri 10 Apr 2026 02:28:54 +0000
ROA not before:           Fri 10 Apr 2026 02:23:54 +0000
ROA not after:            Fri 09 Apr 2027 02:28:54 +0000
asID:                     61604
IP address blocks:        2804:7754::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/7E0AD46BC956DF4483B7CF4F2040DD9BAC1359A2.crl
                          rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/7E0AD46BC956DF4483B7CF4F2040DD9BAC1359A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E0AD46BC956DF4483B7CF4F2040DD9BAC1359A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 16:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:25:ba:f7:40:c2:4d:ed:91:4c:29:06:6c:16:c7:c6:2c:1d:15:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E0AD46BC956DF4483B7CF4F2040DD9BAC1359A2
        Validity
            Not Before: Apr 10 02:23:54 2026 GMT
            Not After : Apr  9 02:28:54 2027 GMT
        Subject: CN=4D8193C336266ECD6A7D354A0468A874FC928D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:32:fa:77:5c:33:24:98:9c:b8:7b:bc:83:
                    a3:27:46:0d:0b:b2:ea:b3:c7:67:52:fc:64:dc:2f:
                    7f:09:ad:78:c6:d2:f3:ed:e6:9c:1d:b1:26:18:08:
                    2d:38:df:54:11:f8:02:5e:bc:ef:c9:3d:ff:77:c2:
                    2b:7e:ea:bb:b5:e8:56:59:eb:8b:af:04:6f:17:f6:
                    9c:2b:2a:44:19:0a:0f:f9:48:59:8c:94:01:0f:1d:
                    0a:9e:52:9a:dc:a3:28:66:48:42:ed:cb:9a:7d:6c:
                    bb:6b:ed:c7:1d:ec:3b:02:ed:e9:bf:c1:90:62:05:
                    2f:da:ab:86:95:5e:f4:d8:e3:e9:41:63:64:8f:32:
                    b7:c3:99:74:b7:f0:86:6d:1b:1e:1b:1d:9a:c5:8a:
                    18:6a:d9:66:cd:53:9b:d4:61:85:29:2e:c2:b9:70:
                    3d:df:a1:de:74:61:6e:27:1b:3b:d2:ac:74:9c:2a:
                    10:98:eb:ee:7e:fb:79:1f:8e:ec:40:1c:a3:69:75:
                    5a:e6:fa:79:92:14:e5:b6:4c:23:0b:28:32:ee:b5:
                    9e:ee:bc:0f:42:48:2b:76:c9:ea:c7:9a:0d:4e:9f:
                    0a:c5:b3:e5:9c:7a:ab:8e:ea:89:c3:47:02:b8:64:
                    cd:97:55:b7:aa:24:be:cb:12:43:48:1d:13:53:08:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:81:93:C3:36:26:6E:CD:6A:7D:35:4A:04:68:A8:74:FC:92:8D:2D
            X509v3 Authority Key Identifier:
                keyid:7E:0A:D4:6B:C9:56:DF:44:83:B7:CF:4F:20:40:DD:9B:AC:13:59:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/7E0AD46BC956DF4483B7CF4F2040DD9BAC1359A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E0AD46BC956DF4483B7CF4F2040DD9BAC1359A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3335203d3e203631363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7754::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:65:72:55:3d:2c:c1:8f:4b:ae:bc:55:c8:e2:ab:9e:47:be:
         66:c4:bb:47:75:48:a7:cb:78:db:15:aa:31:3e:fd:c0:15:83:
         fc:e7:52:0f:39:83:37:6b:f2:52:1f:45:62:e4:41:77:82:72:
         c5:e2:95:62:c5:40:8a:9c:7a:eb:eb:b5:47:ae:7e:53:15:1f:
         c7:5e:36:e5:01:ec:59:3f:c4:36:1c:8c:ee:e6:9d:0e:44:5e:
         76:03:ef:bb:d4:fe:08:19:ae:9d:2a:89:3e:87:df:b0:fe:19:
         13:2e:ca:ad:d9:bd:a4:f1:19:90:2e:c8:3c:1c:a1:5e:c5:ca:
         a5:a4:f3:64:9f:94:82:1d:ac:0e:72:11:78:83:62:f3:38:64:
         6c:a9:f7:7c:56:c8:02:26:cd:75:90:b0:bb:fd:b2:67:39:3d:
         3c:b6:57:0a:10:6f:2a:9c:27:8a:13:9e:2b:87:f3:a6:03:b4:
         27:b2:c1:c4:39:f0:73:55:a2:37:d7:e1:f0:84:f3:1d:11:44:
         5a:bf:d8:49:1f:46:c7:21:f8:1f:72:ca:66:6e:3f:70:ce:1b:
         32:64:09:09:9c:ac:46:f2:f6:9e:d3:2b:cf:76:c0:71:79:08:
         ea:52:89:bf:84:58:76:56:2d:82:61:ad:ff:01:44:5c:df:a5:
         6a:e9:e3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:57:36 2026 by rpki-client