Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/323830343a393834383a3a2f33322d3334203d3e20323735363739.roa
File:                     323830343a393834383a3a2f33322d3334203d3e20323735363739.roa (raw, json)
Hash identifier:          AA3KXA8ukWICbzyRq8gcm4D9riSnRFH2V35QuPvXI2c=
Subject key identifier:   6D:FB:6B:74:18:0B:7F:9B:BE:9F:E2:E6:53:3F:6B:DB:D6:66:08:62
Certificate issuer:       /CN=2832861A32D9BFD5DABB7E0AF9C855AB65A91499
Certificate serial:       77AFE35626A37942ADE36BBBB81461B4E6863788
Authority key identifier: 28:32:86:1A:32:D9:BF:D5:DA:BB:7E:0A:F9:C8:55:AB:65:A9:14:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/323830343a393834383a3a2f33322d3334203d3e20323735363739.roa
Signing time:             Sat 11 Apr 2026 03:28:42 +0000
ROA not before:           Sat 11 Apr 2026 03:23:42 +0000
ROA not after:            Sat 10 Apr 2027 03:28:42 +0000
asID:                     275679
IP address blocks:        2804:9848::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl
                          rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 06:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:af:e3:56:26:a3:79:42:ad:e3:6b:bb:b8:14:61:b4:e6:86:37:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2832861A32D9BFD5DABB7E0AF9C855AB65A91499
        Validity
            Not Before: Apr 11 03:23:42 2026 GMT
            Not After : Apr 10 03:28:42 2027 GMT
        Subject: CN=6DFB6B74180B7F9BBE9FE2E6533F6BDBD6660862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:75:78:3a:e7:82:12:02:a8:44:d9:1e:a9:
                    7b:af:c7:4a:9d:87:4b:a5:08:c6:2a:24:4a:3f:db:
                    ba:e9:6d:08:60:79:4c:b2:0b:3f:d4:9b:b1:d2:72:
                    74:4e:31:5e:5f:ed:dd:08:81:5a:ea:51:5f:a0:c4:
                    14:4a:5f:b6:56:4b:10:85:0d:81:2c:76:bf:18:b3:
                    cd:7f:e1:5b:c2:7f:7a:84:af:e5:4f:16:4a:74:97:
                    22:90:42:16:07:e9:25:f5:37:ed:ea:81:1a:bc:d8:
                    6a:ca:89:f1:55:cf:32:e2:17:62:09:93:40:c9:63:
                    3c:1c:5d:b9:05:b6:80:8e:f1:e2:41:7c:c4:46:f4:
                    2c:91:2d:68:d1:c9:82:06:24:a5:02:5b:80:53:5b:
                    0f:68:58:b9:a4:46:a1:c2:10:4d:22:2d:4a:ae:12:
                    ce:30:d4:67:7d:30:69:93:82:03:a9:56:b4:00:e5:
                    03:f2:c6:fe:72:99:4c:76:b9:e2:f0:a0:73:f8:2d:
                    9d:4a:e9:b5:ee:60:92:ec:41:e0:59:b5:bf:a9:4c:
                    a1:22:be:32:27:e5:4a:ef:68:87:2e:f2:a2:6d:c7:
                    8f:64:11:23:21:ea:1b:fa:37:47:55:64:8d:20:d8:
                    8a:20:5b:1e:bc:83:83:8a:2c:fe:4c:80:47:23:2b:
                    a6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FB:6B:74:18:0B:7F:9B:BE:9F:E2:E6:53:3F:6B:DB:D6:66:08:62
            X509v3 Authority Key Identifier:
                keyid:28:32:86:1A:32:D9:BF:D5:DA:BB:7E:0A:F9:C8:55:AB:65:A9:14:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/323830343a393834383a3a2f33322d3334203d3e20323735363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9848::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:49:fb:47:5e:8e:55:a7:24:ee:b6:99:e3:0e:56:5b:e2:eb:
         cb:d3:0e:f8:41:2b:0a:27:95:ae:7a:1f:6a:df:9b:28:7a:16:
         e5:4d:48:46:38:b1:9f:88:4c:44:c6:95:19:aa:5d:51:31:bd:
         86:ce:9c:7a:ed:24:99:5f:7e:0f:27:b2:af:d0:67:eb:69:88:
         92:85:3d:47:14:c9:20:23:cf:61:4a:a3:e9:b4:f6:94:06:5a:
         5c:30:fb:81:4f:65:c2:49:80:68:61:cf:2f:5b:ff:56:9c:19:
         78:25:af:00:3d:7b:95:1d:63:52:c1:2a:e1:02:19:74:28:84:
         84:32:38:4a:41:6a:79:9a:47:44:2b:33:f0:79:7b:aa:26:96:
         c1:0b:e2:d7:6c:fd:c2:f6:e8:f2:29:79:bb:45:4f:5a:df:4a:
         87:cd:60:1e:39:4a:4c:99:31:9c:69:02:90:a3:31:88:47:b3:
         c8:fd:2f:db:23:12:26:89:53:04:b6:db:73:c5:34:2a:31:18:
         50:a0:45:06:02:e2:6b:6d:6d:4c:a8:70:2c:11:76:66:6f:3a:
         e8:f8:17:ac:92:2d:6a:c3:22:4b:59:13:c0:ca:cb:8d:4a:41:
         1e:cc:96:2c:02:84:07:a6:32:b5:59:98:9a:10:fd:18:fe:1c:
         54:13:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:46:15 2026 by rpki-client