Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/323830343a346531343a3a2f33322d313238203d3e20323638323338.roa
File:                     323830343a346531343a3a2f33322d313238203d3e20323638323338.roa (raw, json)
Hash identifier:          NF3nVWNGYxtyZfTW32e0tL0YX7IXNJY5LljodzVZFMs=
Subject key identifier:   3F:1A:59:C0:C2:C6:A1:CB:13:1F:66:EA:EA:0D:F0:7A:D8:E7:46:AE
Certificate issuer:       /CN=A718F3232A07A512E73F043C4977DE8F1D504E98
Certificate serial:       2E5FBCCA823935EB950E9393BCEF3FA1134C77F7
Authority key identifier: A7:18:F3:23:2A:07:A5:12:E7:3F:04:3C:49:77:DE:8F:1D:50:4E:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A718F3232A07A512E73F043C4977DE8F1D504E98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/323830343a346531343a3a2f33322d313238203d3e20323638323338.roa
Signing time:             Wed 15 Apr 2026 12:39:29 +0000
ROA not before:           Wed 15 Apr 2026 12:34:29 +0000
ROA not after:            Wed 14 Apr 2027 12:39:29 +0000
asID:                     268238
IP address blocks:        2804:4e14::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/A718F3232A07A512E73F043C4977DE8F1D504E98.crl
                          rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/A718F3232A07A512E73F043C4977DE8F1D504E98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A718F3232A07A512E73F043C4977DE8F1D504E98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5f:bc:ca:82:39:35:eb:95:0e:93:93:bc:ef:3f:a1:13:4c:77:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A718F3232A07A512E73F043C4977DE8F1D504E98
        Validity
            Not Before: Apr 15 12:34:29 2026 GMT
            Not After : Apr 14 12:39:29 2027 GMT
        Subject: CN=3F1A59C0C2C6A1CB131F66EAEA0DF07AD8E746AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:5c:17:75:7b:54:f3:68:59:8c:24:0e:2c:
                    12:43:73:19:88:05:be:6c:32:7e:06:c3:62:fa:af:
                    bf:92:b1:68:66:4f:86:fc:04:70:95:48:d9:14:22:
                    e6:1e:16:f1:f7:75:c5:47:2c:06:fc:f3:27:58:ba:
                    eb:d9:30:57:54:3b:6e:e0:d5:5e:bf:d4:88:0c:8a:
                    f1:d9:a6:2b:e8:b2:b6:f5:53:f8:8f:3c:5a:fe:ca:
                    5f:b0:7d:8a:8b:fb:2b:a7:53:36:2f:a7:6d:68:cd:
                    d2:91:77:07:f2:f1:0f:8e:1e:d1:e0:eb:be:fa:1a:
                    9e:91:0e:47:ec:c2:7a:f4:6f:a9:b6:1c:4e:a4:4f:
                    2f:b2:4d:97:08:5e:35:c8:e7:2a:d3:91:50:c7:d8:
                    cb:96:6e:6d:c8:8c:8a:7c:25:0f:d9:c0:40:80:24:
                    cb:f6:60:a0:c7:3c:f5:e2:35:6a:19:cb:99:ac:c0:
                    28:5b:52:3e:c3:47:c0:b4:84:4e:49:90:6c:35:95:
                    cd:54:23:a7:b8:d7:dd:8e:9d:35:e7:c9:d5:25:0e:
                    b3:9e:2c:40:ea:e9:87:66:ce:d2:eb:fb:11:d0:bd:
                    b4:1f:cd:05:48:ce:bf:4a:5f:58:7b:9c:b1:c4:ce:
                    d6:c6:a6:29:9d:b9:29:a2:1d:3f:9d:8d:44:4f:ab:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1A:59:C0:C2:C6:A1:CB:13:1F:66:EA:EA:0D:F0:7A:D8:E7:46:AE
            X509v3 Authority Key Identifier:
                keyid:A7:18:F3:23:2A:07:A5:12:E7:3F:04:3C:49:77:DE:8F:1D:50:4E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/A718F3232A07A512E73F043C4977DE8F1D504E98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A718F3232A07A512E73F043C4977DE8F1D504E98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUbVVoeeoDsn1McXMXtV3sDN4sK3q91Uoyr8P2DdnQNy/0/323830343a346531343a3a2f33322d313238203d3e20323638323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e14::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:4a:e0:b0:2d:39:f6:2f:b9:06:ac:46:a6:80:bd:6c:44:e5:
         b5:a9:42:68:f2:91:73:b9:4d:32:3e:c9:12:f8:c3:70:7a:68:
         3e:1c:d0:31:ac:ae:ea:c0:2b:74:7f:8b:ba:67:1c:73:27:55:
         26:a8:6a:2a:ea:94:6a:99:8c:20:4d:35:42:af:de:ca:56:2c:
         6d:fd:bc:08:6f:5d:c8:e3:4e:09:a4:7d:5c:31:cf:db:94:5c:
         81:e6:bd:2c:ca:6d:61:0f:1d:ac:23:85:93:30:c7:f3:ad:96:
         10:c1:c1:ff:43:6c:73:a3:85:80:ff:43:08:0d:88:7d:d9:8a:
         b1:68:25:45:79:98:60:30:6e:a6:ed:e9:66:e5:d0:af:5b:3b:
         82:d4:31:3f:ed:9a:82:58:22:57:43:3d:31:bb:61:d9:5f:5f:
         35:10:66:03:97:d5:fd:07:51:65:2c:ba:e6:57:13:16:c3:64:
         e3:2c:0b:3f:d1:a4:d3:cf:50:e2:79:e2:c4:cc:96:85:5e:ed:
         9a:01:b4:91:77:c5:27:e1:35:e1:a8:4e:62:36:59:95:8d:42:
         8d:39:5a:a9:ef:1b:08:09:4b:9f:f4:44:2c:63:83:a4:d8:fa:
         62:e8:b8:78:9f:e7:f1:e9:80:5f:63:25:70:cf:f7:57:78:ff:
         21:d0:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:06:16 2026 by rpki-client