Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3a2f33322d3333203d3e203532393734.roa
File:                     323830343a316239343a3a2f33322d3333203d3e203532393734.roa (raw, json)
Hash identifier:          1Y1klBIwMr4ZQxm1jyO0E7Osv7GbGSoYllemmA7x0Ho=
Subject key identifier:   FF:79:8A:C2:64:25:A5:EC:77:2C:7E:84:1F:2B:6F:B8:09:80:8F:A5
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       261F3F4FC8E86B833BE60D99B85F998E4B2051C3
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3a2f33322d3333203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:54:26 +0000
ROA not before:           Mon 13 Apr 2026 13:49:26 +0000
ROA not after:            Mon 12 Apr 2027 13:54:26 +0000
asID:                     52974
IP address blocks:        2804:1b94::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1f:3f:4f:c8:e8:6b:83:3b:e6:0d:99:b8:5f:99:8e:4b:20:51:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:49:26 2026 GMT
            Not After : Apr 12 13:54:26 2027 GMT
        Subject: CN=FF798AC26425A5EC772C7E841F2B6FB809808FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:14:10:4d:7d:4f:f7:1e:82:a8:b3:c7:65:
                    56:76:09:ca:fc:01:ae:d7:d8:6e:66:2a:0c:a3:ee:
                    53:9e:e6:d5:f1:fe:a6:dd:85:85:a8:18:bb:79:c1:
                    b2:6e:86:4c:0e:d2:cf:85:e3:90:d7:bc:f7:22:0a:
                    0f:4e:09:a5:6c:d6:3d:fe:8b:ba:f7:74:ba:63:4c:
                    73:70:aa:16:86:ee:24:37:08:9f:49:1e:f3:09:f8:
                    ae:43:41:98:61:f8:5b:23:1a:4b:f8:45:ed:ff:da:
                    3d:a3:e6:c9:bb:09:a6:91:ad:d5:0d:4b:4a:06:1a:
                    81:35:7c:88:ae:6f:e6:ec:4e:d2:8d:09:85:92:0c:
                    80:a6:9c:9b:84:4b:2f:49:e3:3c:10:32:8e:e9:d3:
                    f4:56:e4:99:0f:d3:13:e0:dd:15:0d:74:50:63:7a:
                    b6:16:bc:b4:70:7a:92:f3:0f:e0:39:1f:e3:ac:fc:
                    5e:b5:e5:b6:53:7c:6d:2c:15:53:9e:af:0f:8b:52:
                    78:f3:59:22:fb:1c:92:65:eb:57:d5:e8:89:a7:02:
                    06:09:fb:86:86:8a:7f:0b:09:3b:92:33:e1:5e:46:
                    e7:72:5b:85:2e:09:9b:e5:0c:96:53:5c:98:11:9f:
                    b1:26:a1:6d:08:8a:96:64:8a:44:e1:e7:96:e2:0f:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:79:8A:C2:64:25:A5:EC:77:2C:7E:84:1F:2B:6F:B8:09:80:8F:A5
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3a2f33322d3333203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b94::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:fa:95:49:bc:06:37:ce:07:e4:4c:42:4e:f9:43:7c:d4:68:
         bf:52:35:cc:90:54:c5:34:84:ae:48:ff:e7:b4:f4:b8:0b:27:
         80:5b:b8:77:42:58:69:92:9c:3c:6a:2e:22:68:dd:ac:38:ac:
         59:2e:68:eb:7c:51:5d:57:66:dd:4a:76:9e:87:58:03:28:3c:
         7f:9d:a6:27:f0:ec:8b:bf:14:f9:d6:48:09:fc:7f:39:8d:88:
         d1:d9:f5:d6:e7:5a:25:06:16:37:6a:e3:17:42:f8:c6:ed:5e:
         3d:a4:20:44:0d:2b:ef:b6:cb:9d:dc:12:48:31:12:06:03:a2:
         d8:6f:e8:e2:d3:4c:aa:61:11:8f:a1:13:40:5e:cd:40:1b:de:
         b4:bd:a7:aa:69:34:77:52:6b:e9:b4:5b:ae:b1:50:c5:3a:1c:
         05:3f:73:e6:d2:3e:c0:29:03:9d:64:8b:26:c6:0c:34:36:01:
         a9:64:9b:cb:0b:1b:50:9c:c5:b9:9a:5e:7a:54:72:e7:0c:da:
         75:b2:89:49:60:67:6b:6b:ff:11:20:b3:ad:d9:f1:af:05:dc:
         63:ea:e0:f6:82:ef:05:22:93:64:8b:8f:70:5c:c9:2b:12:02:
         f1:88:c2:d9:70:4a:35:dc:23:f2:2d:e8:d9:15:42:b3:93:3d:
         b5:2c:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:25:50 2026 by rpki-client