Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a343130313a3a2f34382d313238203d3e20323639353731.roa
File:                     323830343a363639633a343130313a3a2f34382d313238203d3e20323639353731.roa (raw, json)
Hash identifier:          r1S3CQXq3DuW4TOciD5M4uUCbIKvsDcR9yRtCy4RsU4=
Subject key identifier:   1D:56:13:01:52:D8:82:7C:6E:5F:E3:74:44:1B:CB:F6:74:38:56:E1
Certificate issuer:       /CN=9F407F1B434DB0D66D6F7D3778029A9723E49B7E
Certificate serial:       1FF3F83F2984445981BFA26FCD53ED21448D9F68
Authority key identifier: 9F:40:7F:1B:43:4D:B0:D6:6D:6F:7D:37:78:02:9A:97:23:E4:9B:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a343130313a3a2f34382d313238203d3e20323639353731.roa
Signing time:             Thu 09 Apr 2026 12:43:45 +0000
ROA not before:           Thu 09 Apr 2026 12:38:45 +0000
ROA not after:            Thu 08 Apr 2027 12:43:45 +0000
asID:                     269571
IP address blocks:        2804:669c:4101::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.crl
                          rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f3:f8:3f:29:84:44:59:81:bf:a2:6f:cd:53:ed:21:44:8d:9f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F407F1B434DB0D66D6F7D3778029A9723E49B7E
        Validity
            Not Before: Apr  9 12:38:45 2026 GMT
            Not After : Apr  8 12:43:45 2027 GMT
        Subject: CN=1D56130152D8827C6E5FE374441BCBF6743856E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:22:b3:01:66:1e:f2:e5:75:67:f4:4d:b0:
                    06:a2:66:2f:65:d5:36:72:8a:89:28:b6:93:e2:54:
                    67:cf:c3:cf:13:c2:11:eb:24:c5:df:a2:15:59:d0:
                    d9:b7:74:ce:c5:18:64:8b:4d:e0:10:cb:1b:a0:c9:
                    88:e7:d7:c4:44:38:9f:b8:d9:42:02:fd:05:b5:a4:
                    80:fb:d3:66:7a:89:df:6c:f3:02:79:21:c6:10:0c:
                    5b:73:37:26:41:54:70:27:4f:8d:5d:07:be:da:18:
                    5c:22:41:76:74:95:86:9d:0f:85:b6:89:37:88:b7:
                    9c:03:1c:ca:d1:d1:e0:e1:e2:93:46:64:6f:cb:81:
                    02:5f:3f:02:13:91:bb:da:bf:fc:b1:49:82:03:47:
                    7c:1b:81:96:1a:ca:6b:5b:51:c8:f6:74:4c:5c:1e:
                    dc:fb:92:c3:4d:a3:75:82:47:ae:16:fd:00:58:3d:
                    99:bd:50:97:b4:d8:f2:f3:ad:1f:21:bd:cb:d3:f4:
                    95:15:be:65:a9:2a:ab:84:f8:3b:85:6a:5a:fb:b5:
                    dc:8b:16:37:e5:ef:70:da:c7:d3:80:c9:74:b6:f9:
                    bd:2c:16:a1:d8:49:4b:b8:03:6a:0e:08:6e:5c:51:
                    2f:ed:58:aa:01:40:db:2a:65:79:71:11:20:bd:99:
                    05:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:56:13:01:52:D8:82:7C:6E:5F:E3:74:44:1B:CB:F6:74:38:56:E1
            X509v3 Authority Key Identifier:
                keyid:9F:40:7F:1B:43:4D:B0:D6:6D:6F:7D:37:78:02:9A:97:23:E4:9B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a343130313a3a2f34382d313238203d3e20323639353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:669c:4101::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:7b:f8:61:45:8d:48:7d:8e:ab:6a:b6:90:55:5d:61:28:
         05:26:25:7d:93:b2:a3:c2:92:b7:51:04:ae:9b:c5:f4:de:d3:
         53:d0:24:15:3b:63:84:37:70:84:7d:3c:3e:cc:01:5b:75:e9:
         2c:1e:01:04:9c:b0:a2:52:83:d3:10:6a:fa:72:f2:db:8f:1d:
         9f:f5:71:45:68:d3:4c:4c:77:1b:c8:05:83:35:57:b1:90:48:
         f8:df:c1:78:5b:0e:d3:71:31:42:4b:e8:3d:36:4f:64:57:fb:
         d0:7f:71:5e:10:28:f0:11:1e:e8:e5:25:3a:51:42:01:68:a8:
         a5:81:de:b0:4d:a6:c4:8c:dd:0a:be:ef:bf:32:97:cc:8f:1f:
         cc:4d:b7:84:eb:40:dc:7a:97:0a:3c:58:32:63:60:bf:16:b4:
         9a:b4:a9:22:70:ab:90:e5:3b:a7:f7:7c:de:98:8c:c4:96:21:
         9f:61:7c:9a:2f:12:f8:55:ab:be:e6:ef:a1:e4:cd:0d:04:50:
         a3:77:6a:27:f5:3a:57:58:68:fc:3f:13:4d:2d:f9:f7:82:0e:
         a2:b6:90:56:e3:3b:29:30:ce:d1:16:3b:26:ec:71:68:19:73:
         f2:5f:27:01:16:5a:8f:9d:d0:20:94:bf:b6:53:53:af:75:df:
         20:34:c4:e3
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUH/P4PymERFmBv6JvzVPtIUSNn2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY0MDdGMUI0MzREQjBENjZENkY3RDM3NzgwMjlBOTcy
M0U0OUI3RTAeFw0yNjA0MDkxMjM4NDVaFw0yNzA0MDgxMjQzNDVaMDMxMTAvBgNV
BAMTKDFENTYxMzAxNTJEODgyN0M2RTVGRTM3NDQ0MUJDQkY2NzQzODU2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCA6SKzAWYe8uV1Z/RNsAaiZi9l
1TZyiokotpPiVGfPw88TwhHrJMXfohVZ0Nm3dM7FGGSLTeAQyxugyYjn18REOJ+4
2UIC/QW1pID702Z6id9s8wJ5IcYQDFtzNyZBVHAnT41dB77aGFwiQXZ0lYadD4W2
iTeIt5wDHMrR0eDh4pNGZG/LgQJfPwITkbvav/yxSYIDR3wbgZYaymtbUcj2dExc
Htz7ksNNo3WCR64W/QBYPZm9UJe02PLzrR8hvcvT9JUVvmWpKquE+DuFalr7tdyL
Fjfl73Dax9OAyXS2+b0sFqHYSUu4A2oOCG5cUS/tWKoBQNsqZXlxESC9mQX7AgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUHVYTAVLYgnxuX+N0RBvL9nQ4VuEwHwYDVR0j
BBgwFoAUn0B/G0NNsNZtb303eAKalyPkm34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBRWVo0cml4d1Jibk1KMm9HaDlQRXRaTUJYcmZHY3NKOW5ZYnI2SkNN
eW8vMC85RjQwN0YxQjQzNERCMEQ2NkQ2RjdEMzc3ODAyOUE5NzIzRTQ5QjdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGNDA3RjFCNDM0REIwRDY2
RDZGN0QzNzc4MDI5QTk3MjNFNDlCN0UuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCB
pQYIKwYBBQUHMAuGgZhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQUVlaNHJpeHdSYm5NSjJvR2g5UEV0Wk1CWHJmR2NzSjluWWJyNkpDTXlvLzAv
MzIzODMwMzQzYTM2MzYzOTYzM2EzNDMxMzAzMTNhM2EyZjM0MzgyZDMxMzIzODIw
M2QzZTIwMzIzNjM5MzUzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKARmnEEBMA0GCSqGSIb3DQEB
CwUAA4IBAQClxHv4YUWNSH2Oq2q2kFVdYSgFJiV9k7KjwpK3UQSum8X03tNT0CQV
O2OEN3CEfTw+zAFbdeksHgEEnLCiUoPTEGr6cvLbjx2f9XFFaNNMTHcbyAWDNVex
kEj438F4Ww7TcTFCS+g9Nk9kV/vQf3FeECjwER7o5SU6UUIBaKilgd6wTabEjN0K
vu+/MpfMjx/MTbeE60DcepcKPFgyY2C/FrSatKkicKuQ5Tun93zemIzEliGfYXya
LxL4Vau+5u+h5M0NBFCjd2on9TpXWGj8PxNNLfn3gg6itpBW4zspMM7RFjsm7HFo
GXPyXycBFlqPndAglL+2U1Ovdd8gNMTj
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:58:22 2026 by rpki-client