Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/323830343a393831343a3a2f33322d3438203d3e20323735363634.roa
File:                     323830343a393831343a3a2f33322d3438203d3e20323735363634.roa (raw, json)
Hash identifier:          +Vsrizr7XCDngTJymaSA8P4f2ia4XjakRpeIkUSbLT4=
Subject key identifier:   63:F2:C9:6C:EF:49:53:9F:F9:10:0D:C7:43:C3:C6:E7:4F:9E:7B:BA
Certificate issuer:       /CN=2BE50025D1B09A6D839F7185D6BD694383893878
Certificate serial:       303A7290A33727D0259319E0576AC3472A269445
Authority key identifier: 2B:E5:00:25:D1:B0:9A:6D:83:9F:71:85:D6:BD:69:43:83:89:38:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE50025D1B09A6D839F7185D6BD694383893878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/323830343a393831343a3a2f33322d3438203d3e20323735363634.roa
Signing time:             Tue 03 Mar 2026 19:32:39 +0000
ROA not before:           Tue 03 Mar 2026 19:27:39 +0000
ROA not after:            Tue 02 Mar 2027 19:32:39 +0000
asID:                     275664
IP address blocks:        2804:9814::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/2BE50025D1B09A6D839F7185D6BD694383893878.crl
                          rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/2BE50025D1B09A6D839F7185D6BD694383893878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE50025D1B09A6D839F7185D6BD694383893878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3a:72:90:a3:37:27:d0:25:93:19:e0:57:6a:c3:47:2a:26:94:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE50025D1B09A6D839F7185D6BD694383893878
        Validity
            Not Before: Mar  3 19:27:39 2026 GMT
            Not After : Mar  2 19:32:39 2027 GMT
        Subject: CN=63F2C96CEF49539FF9100DC743C3C6E74F9E7BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:c4:aa:04:41:5b:f6:ed:69:b5:ff:bc:41:
                    9d:aa:44:d0:84:45:61:bb:ef:90:76:ba:30:49:cd:
                    e6:20:2e:f1:24:8a:fa:44:f4:b3:13:7b:a0:da:a4:
                    c0:fd:e5:f9:6d:c7:b3:a3:e7:d6:71:ae:cb:97:ef:
                    6c:55:68:c7:7b:76:5c:cc:01:68:65:1c:13:e8:c7:
                    7f:d5:42:c4:bb:14:c3:9b:7d:40:13:0e:39:be:98:
                    84:00:28:48:db:83:96:92:05:a1:dd:97:0f:e6:5b:
                    0a:df:01:49:6c:10:f4:01:24:ef:0f:ac:c3:61:1b:
                    db:a3:95:26:9d:1c:92:55:b4:0f:68:7e:10:51:e0:
                    62:5e:8a:74:d9:c1:aa:82:dc:dc:0b:94:28:54:75:
                    8c:7e:f7:9b:02:26:9a:2d:a1:86:6f:bc:1d:16:5a:
                    2d:b0:5c:77:06:5d:e2:b6:8c:43:a4:a8:bc:77:24:
                    21:c8:05:9c:0c:e5:f5:e4:e2:a0:ae:6b:ae:44:f1:
                    18:6b:5e:84:d5:0b:ee:6c:43:6d:2f:27:ad:21:04:
                    6d:c0:18:0c:77:76:7f:35:ce:f1:7a:b3:f0:82:bf:
                    a8:b0:01:62:90:b8:49:72:90:52:c4:70:cd:76:6a:
                    68:38:3a:cc:18:31:65:75:f4:00:b7:6e:60:05:91:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F2:C9:6C:EF:49:53:9F:F9:10:0D:C7:43:C3:C6:E7:4F:9E:7B:BA
            X509v3 Authority Key Identifier:
                keyid:2B:E5:00:25:D1:B0:9A:6D:83:9F:71:85:D6:BD:69:43:83:89:38:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/2BE50025D1B09A6D839F7185D6BD694383893878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE50025D1B09A6D839F7185D6BD694383893878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/323830343a393831343a3a2f33322d3438203d3e20323735363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9814::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:99:4a:14:b7:e7:28:88:10:ac:01:19:b5:4a:9d:2c:2f:
         9e:55:4c:96:cc:c4:1b:65:41:3b:f1:70:ff:d1:a9:56:9f:96:
         92:d5:18:aa:59:ad:51:cf:92:ac:22:b2:fa:04:a5:20:88:a4:
         30:b2:7a:ed:12:2d:a9:9b:29:cc:02:a4:1f:9a:b2:2d:fb:3f:
         a7:f1:a4:1d:87:cb:a5:53:17:9d:19:9c:21:7e:3f:ee:e6:5e:
         d2:62:a7:70:f5:16:b9:f3:1e:27:54:2c:02:3f:48:ea:3c:ee:
         cd:d8:cc:f7:81:f9:28:58:a6:92:da:55:7e:d2:2f:4e:60:57:
         86:2f:52:a7:13:3c:71:5b:b0:f8:f7:86:ed:7c:c8:9e:31:80:
         48:46:dd:11:6f:04:86:c4:3e:85:56:7f:7e:53:20:b4:2a:80:
         a4:3d:a0:9d:f9:25:ea:bb:ba:31:cc:7f:1e:60:b0:6d:08:37:
         11:62:e0:0d:b3:50:28:a0:39:4b:0f:ff:35:6e:ae:a8:64:bd:
         fe:67:40:93:32:87:81:48:b4:ca:ef:b3:f1:8e:88:ea:2a:c0:
         0a:b8:00:d7:2a:0d:63:29:03:5f:74:c3:e7:8f:3a:ac:a2:52:
         c9:e2:a8:cc:77:e3:74:6a:e5:db:c5:e9:35:79:a7:21:13:66:
         81:b8:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:38 2026 by rpki-client