Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a343130303a3a2f34382d313238203d3e20323639353731.roa
File:                     323830343a363639633a343130303a3a2f34382d313238203d3e20323639353731.roa (raw, json)
Hash identifier:          eR1LVtod0z0xUfQzOzHzspePsdN20nEJJgWw0rCPpoM=
Subject key identifier:   80:0B:D2:AA:F6:B3:C1:AA:F7:24:9A:63:14:F0:11:7F:1D:DA:20:86
Certificate issuer:       /CN=9F407F1B434DB0D66D6F7D3778029A9723E49B7E
Certificate serial:       5DE51F12CABDDE6D841382B6C5C06E949A18D58B
Authority key identifier: 9F:40:7F:1B:43:4D:B0:D6:6D:6F:7D:37:78:02:9A:97:23:E4:9B:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a343130303a3a2f34382d313238203d3e20323639353731.roa
Signing time:             Thu 09 Apr 2026 12:43:39 +0000
ROA not before:           Thu 09 Apr 2026 12:38:39 +0000
ROA not after:            Thu 08 Apr 2027 12:43:39 +0000
asID:                     269571
IP address blocks:        2804:669c:4100::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.crl
                          rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e5:1f:12:ca:bd:de:6d:84:13:82:b6:c5:c0:6e:94:9a:18:d5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F407F1B434DB0D66D6F7D3778029A9723E49B7E
        Validity
            Not Before: Apr  9 12:38:39 2026 GMT
            Not After : Apr  8 12:43:39 2027 GMT
        Subject: CN=800BD2AAF6B3C1AAF7249A6314F0117F1DDA2086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:38:9f:20:8d:4e:81:6f:f8:4a:8c:d6:95:
                    7e:ef:f2:aa:02:df:ef:86:6b:24:de:de:68:3f:bd:
                    5c:8d:5c:1a:54:e3:e5:62:66:6c:e5:e3:24:96:65:
                    34:d4:8e:0c:1c:89:91:ef:d6:c0:ec:1e:bc:48:5f:
                    17:ef:dc:0b:5a:ec:a5:80:20:a8:62:10:cc:9f:2c:
                    e3:d4:a5:ff:4e:e9:0d:02:7b:2a:a5:de:e9:33:df:
                    5d:30:82:77:bc:76:60:05:92:ad:93:0c:02:8e:f5:
                    24:a6:90:94:0b:f3:63:c3:50:bf:5f:79:7c:45:37:
                    15:23:d5:95:cf:ea:80:db:53:40:f2:d0:f8:a7:f4:
                    fc:f0:e4:be:f0:cc:4d:86:11:99:c3:ab:db:c2:45:
                    a9:6d:a7:37:83:6b:26:79:d3:1f:fb:d1:5c:ec:20:
                    16:7d:75:f8:d3:a7:50:98:c2:c0:68:fc:d1:8c:bd:
                    71:1f:2e:f5:39:81:55:99:7e:93:59:06:90:af:be:
                    38:f8:2d:e2:ee:5f:83:4b:3c:c8:d9:b0:b1:64:48:
                    2e:36:98:19:90:ec:ae:5e:96:34:43:20:a2:d3:55:
                    ea:d9:39:92:ef:eb:cd:b0:dc:f3:8e:0a:b6:00:e1:
                    c3:b4:54:c9:11:0e:02:53:92:65:ff:1b:7f:56:bd:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0B:D2:AA:F6:B3:C1:AA:F7:24:9A:63:14:F0:11:7F:1D:DA:20:86
            X509v3 Authority Key Identifier:
                keyid:9F:40:7F:1B:43:4D:B0:D6:6D:6F:7D:37:78:02:9A:97:23:E4:9B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a343130303a3a2f34382d313238203d3e20323639353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:669c:4100::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:62:6a:8a:c6:de:9b:6d:14:33:3e:bc:e9:b2:56:f8:a6:
         bc:bf:a5:6f:b4:13:6b:cc:17:bf:83:29:bf:f6:4c:e3:5f:60:
         9a:72:dd:ba:a5:86:8d:e5:32:9c:44:12:f3:e7:c8:8c:c3:bf:
         ff:b4:1d:70:ca:fd:1a:a5:70:09:07:82:8d:04:73:0c:73:70:
         e6:7a:f3:90:d9:71:73:b2:a7:25:3d:6e:eb:5b:ca:69:f7:11:
         d9:f9:aa:34:27:7c:70:41:45:86:f3:7c:f5:a9:31:b8:34:e5:
         9f:6a:b1:da:d7:65:b7:08:e5:0f:f8:72:bb:c4:2a:1d:84:10:
         d9:7c:44:2f:50:28:92:31:b0:96:5a:eb:a8:61:35:0a:89:91:
         7e:13:ec:a5:e7:c1:18:27:4f:52:f6:40:a5:bb:15:da:7e:17:
         ea:5f:79:49:11:36:88:ff:cc:bd:51:e6:da:01:70:ab:be:fc:
         50:1a:63:f4:48:7e:4d:d8:90:6c:dd:d5:6b:83:a2:50:23:d4:
         a3:b3:1b:99:d1:21:f2:b0:52:e2:7c:59:f6:a4:2b:8a:78:f9:
         3b:d2:cc:e0:09:8d:55:dc:0b:db:02:92:c0:32:ec:36:48:b4:
         13:fc:8e:f6:d2:ab:12:44:8b:80:48:96:ec:c6:2a:00:a6:bf:
         9f:75:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:58:22 2026 by rpki-client