Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d3336203d3e20323731323933.roa
File:                     323830343a373933633a3a2f33322d3336203d3e20323731323933.roa (raw, json)
Hash identifier:          wUNc0txjBm98pfxQf4X5Tz6/7FLs8trntMCZx8/34E4=
Subject key identifier:   02:F0:BB:08:3E:19:E5:BB:6B:3C:37:66:B8:C0:E4:9C:C0:81:11:E2
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       70372D42BF148D0415B62B4018C4B32F6797CF0E
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d3336203d3e20323731323933.roa
Signing time:             Thu 16 Apr 2026 14:00:00 +0000
ROA not before:           Thu 16 Apr 2026 13:55:00 +0000
ROA not after:            Thu 15 Apr 2027 14:00:00 +0000
asID:                     271293
IP address blocks:        2804:793c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:37:2d:42:bf:14:8d:04:15:b6:2b:40:18:c4:b3:2f:67:97:cf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: Apr 16 13:55:00 2026 GMT
            Not After : Apr 15 14:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:8b:14:c5:02:0a:3e:c0:8c:a1:3d:bd:82:
                    60:22:9b:fa:20:3d:61:4e:75:a8:4a:75:10:63:09:
                    4e:50:95:a6:dc:b6:74:dd:48:87:bc:f1:5b:1c:a4:
                    61:d8:3e:71:d8:25:f9:8f:2e:5e:02:99:55:bd:c4:
                    66:d0:0b:27:8e:b7:db:25:dc:cc:6e:43:87:fa:c4:
                    47:70:f2:9c:7a:b1:1b:a2:e1:80:55:a8:e6:77:3f:
                    ff:0e:69:46:c4:b0:ce:d0:6f:f7:83:e9:fc:34:24:
                    b1:3d:7d:5e:6f:8d:80:60:e6:85:61:d9:73:44:a5:
                    1a:87:62:73:f3:49:f7:5d:d7:55:07:13:42:35:46:
                    30:2f:be:29:08:18:e1:97:b2:f5:78:22:9a:71:32:
                    12:60:71:4d:59:8c:2e:b3:cd:fc:24:7b:69:54:89:
                    c6:f3:cf:3f:ec:18:63:20:d4:bc:b3:8f:a0:f2:ed:
                    6e:48:76:8d:8b:2d:56:d7:13:b8:29:2b:33:36:4c:
                    6a:06:65:8f:4f:7f:32:92:f3:ae:76:45:74:18:4e:
                    a2:e4:23:c3:e3:27:60:95:19:34:30:c6:c7:a0:b5:
                    46:44:63:07:2d:89:be:6a:b5:77:27:a8:d6:bb:e2:
                    8c:38:d1:1c:a3:bf:22:56:20:c1:c1:93:25:55:b2:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F0:BB:08:3E:19:E5:BB:6B:3C:37:66:B8:C0:E4:9C:C0:81:11:E2
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d3336203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:793c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:29:95:c4:17:e4:44:c2:ae:a3:48:7d:ac:64:c4:b9:94:48:
         7b:7f:e4:5b:46:42:c1:1f:b5:08:f7:31:ff:da:df:13:c2:1b:
         89:55:74:5c:94:0a:8e:91:f0:76:d5:34:3b:e4:9b:34:c3:5d:
         f7:a2:d9:c3:a5:51:ff:0c:64:4b:f9:e0:52:05:3d:6a:f6:2c:
         7f:94:cd:f6:62:92:ef:81:5e:6f:d3:d9:18:b7:40:2a:1b:54:
         e5:2d:a0:af:1b:69:60:d5:53:a8:99:c8:67:57:af:22:af:58:
         0b:c0:36:86:72:70:97:93:25:3d:08:4d:93:c0:5d:24:28:fa:
         79:44:f5:1e:5a:1c:b0:9a:fe:41:bb:f2:23:c6:5c:0f:96:42:
         1f:21:42:0d:3b:c1:be:92:99:45:c8:9e:d8:a2:de:c3:09:43:
         4e:75:47:2f:2a:db:85:4d:de:a9:67:56:5d:fa:75:2f:82:ed:
         64:b1:76:92:84:27:0a:dd:0d:6e:85:d0:5a:53:e0:a4:0f:ee:
         f9:3b:81:50:84:3f:70:fb:b4:4a:af:b7:1d:93:c0:68:ec:4c:
         f7:40:ef:fd:e5:e8:93:d7:0d:75:05:ec:17:fb:fc:50:70:a6:
         9f:70:b4:41:f3:c7:40:f3:28:68:42:83:85:e5:3c:7a:b3:6a:
         00:cb:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:09:20 2026 by rpki-client