Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a6130303a3a2f34302d3430203d3e203532393734.roa
File:                     323830343a316239343a6130303a3a2f34302d3430203d3e203532393734.roa (raw, json)
Hash identifier:          Gws7g2Cc/TFC1b45kA4hyNM7Wh4ULYgJTb3E7HTbNZs=
Subject key identifier:   FC:84:01:9B:7E:D9:FF:D2:50:13:0F:77:00:58:6F:CF:E9:5D:9D:3C
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       0744E010A470285D6D15A3D2449213A73C80D608
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a6130303a3a2f34302d3430203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:53:53 +0000
ROA not before:           Mon 13 Apr 2026 13:48:53 +0000
ROA not after:            Mon 12 Apr 2027 13:53:53 +0000
asID:                     52974
IP address blocks:        2804:1b94:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:44:e0:10:a4:70:28:5d:6d:15:a3:d2:44:92:13:a7:3c:80:d6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:48:53 2026 GMT
            Not After : Apr 12 13:53:53 2027 GMT
        Subject: CN=FC84019B7ED9FFD250130F7700586FCFE95D9D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:44:fc:5f:e6:0d:95:1d:5a:64:9f:a0:2f:
                    4c:d7:2d:14:2b:3d:fe:df:3e:29:1e:c6:51:28:c3:
                    3e:8b:06:b3:10:a9:b7:f5:c6:ca:59:01:0e:a6:05:
                    b6:da:2d:58:18:9d:c7:73:ff:7f:51:71:a5:da:55:
                    9c:80:39:29:73:ac:96:99:84:27:64:af:e3:f3:6b:
                    f3:38:42:20:8d:a8:0d:b6:19:af:08:bc:be:a5:24:
                    c0:02:4f:d2:31:3e:fd:7b:9a:44:a2:b0:db:9e:60:
                    2f:bd:4e:d4:e0:96:a9:1f:ba:fa:8e:c5:64:8f:33:
                    fa:36:77:21:7e:ed:ca:fc:35:c8:1c:2d:e9:9c:ab:
                    33:c3:60:9f:f4:41:12:2c:d8:8a:56:65:60:53:4d:
                    2a:89:ba:43:cf:1a:ab:4c:57:65:29:7c:f1:4d:a1:
                    ef:37:d2:79:06:8a:a0:c3:c6:24:66:97:a6:69:3e:
                    16:9f:e3:a6:dd:d9:d7:a6:dc:09:7f:4d:13:fe:2e:
                    87:56:e9:8f:0f:e8:a5:a0:8f:01:5b:40:45:b0:84:
                    38:aa:18:c2:3e:32:ad:4a:6f:f7:c2:ab:c8:01:04:
                    50:c6:ac:ca:9f:92:dd:e1:96:12:0b:7e:bb:01:3b:
                    e4:ca:fd:42:e1:74:d1:b7:ef:5e:f5:b6:99:f5:0e:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:84:01:9B:7E:D9:FF:D2:50:13:0F:77:00:58:6F:CF:E9:5D:9D:3C
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a6130303a3a2f34302d3430203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b94:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:ed:70:ff:27:f8:8b:84:11:dd:2c:f8:0a:d0:e6:f4:1f:24:
         31:d6:58:a0:be:2f:d0:2e:aa:1d:0b:5e:10:e0:1d:f6:a0:cc:
         13:b0:61:2e:48:85:28:08:95:92:99:e2:9d:fd:75:f5:d6:c0:
         99:25:94:c3:7e:92:8f:07:51:87:48:a0:7d:bc:3b:58:2c:99:
         ab:81:47:8b:dc:66:8d:a3:e4:77:b5:c2:09:50:a5:97:60:1f:
         c3:d1:80:6c:df:ee:0a:54:12:7b:7b:c5:18:5d:0c:e3:d2:f2:
         68:58:c7:34:0b:a8:7e:b2:f5:53:70:e2:7b:9f:01:89:37:97:
         4c:62:da:37:71:a1:d9:3d:5e:9d:39:39:0c:ad:45:00:45:8b:
         b6:e0:05:54:0d:9b:fb:b8:fb:15:62:7f:73:9c:5f:72:d6:18:
         59:0c:c9:12:94:d7:9b:a6:c9:23:c4:a6:31:59:3c:4c:0f:81:
         e8:e7:60:96:0f:8a:1a:dd:26:a5:10:b5:b8:c7:84:3a:86:d9:
         17:c7:45:3b:3c:2d:5a:04:d6:c9:00:12:e8:9a:b0:52:cd:24:
         37:14:5d:05:cf:a7:5b:d8:7f:61:73:b6:c3:83:00:b9:df:cc:
         7d:e3:ac:47:57:f1:37:2c:e3:92:5d:32:80:fd:44:42:fa:f1:
         20:f9:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:25:50 2026 by rpki-client