Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/323830343a6230303a3a2f33322d313238203d3e203532393333.roa
File:                     323830343a6230303a3a2f33322d313238203d3e203532393333.roa (raw, json)
Hash identifier:          8Ahykt/Fh+LT0S9ZJv6bQU4qBuGkR4OByHx02QGwx3Q=
Subject key identifier:   E4:11:F7:5A:CE:FD:9A:9B:23:9F:72:4E:16:7E:25:3D:BF:C0:6A:B1
Certificate issuer:       /CN=1DF94E27DD59F35BF7F2A01F3DBF9BA152FD853D
Certificate serial:       2423E028744746912553ACE92751B1B81A7F56FB
Authority key identifier: 1D:F9:4E:27:DD:59:F3:5B:F7:F2:A0:1F:3D:BF:9B:A1:52:FD:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF94E27DD59F35BF7F2A01F3DBF9BA152FD853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/323830343a6230303a3a2f33322d313238203d3e203532393333.roa
Signing time:             Fri 13 Mar 2026 19:41:20 +0000
ROA not before:           Fri 13 Mar 2026 19:36:20 +0000
ROA not after:            Fri 12 Mar 2027 19:41:20 +0000
asID:                     52933
IP address blocks:        2804:b00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/1DF94E27DD59F35BF7F2A01F3DBF9BA152FD853D.crl
                          rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/1DF94E27DD59F35BF7F2A01F3DBF9BA152FD853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF94E27DD59F35BF7F2A01F3DBF9BA152FD853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:23:e0:28:74:47:46:91:25:53:ac:e9:27:51:b1:b8:1a:7f:56:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DF94E27DD59F35BF7F2A01F3DBF9BA152FD853D
        Validity
            Not Before: Mar 13 19:36:20 2026 GMT
            Not After : Mar 12 19:41:20 2027 GMT
        Subject: CN=E411F75ACEFD9A9B239F724E167E253DBFC06AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:2f:0c:8b:f8:9f:57:71:1c:de:09:d7:5f:
                    f5:fb:f3:bc:ee:34:7a:45:4c:1d:6f:1f:90:b9:aa:
                    b1:37:61:5b:62:40:3e:4e:2d:7c:2a:6d:59:11:64:
                    65:75:66:44:e6:f5:1d:a5:64:aa:02:cf:fd:f4:6e:
                    1d:9a:93:7d:18:db:8e:31:b9:41:12:d1:91:dd:7a:
                    7b:43:59:37:6d:74:8c:2f:f9:d7:ef:92:45:e5:08:
                    63:7e:e6:28:a5:a3:6d:20:b6:da:5b:38:5d:eb:b8:
                    38:a7:76:68:07:4c:bc:86:9f:ea:c7:89:93:0f:7f:
                    80:bb:be:5e:d7:03:e3:92:18:dd:5e:97:0f:d2:c3:
                    9d:c2:c3:84:c7:8a:55:01:8b:d3:96:3c:5c:4a:a2:
                    df:17:f6:79:33:03:c6:d4:bb:0c:af:a6:7f:96:c1:
                    34:85:bd:a1:b0:ec:61:ee:f9:ba:14:57:a3:88:39:
                    a5:e3:a4:fa:7f:9b:fc:17:c7:1c:8f:87:7f:95:97:
                    a3:c0:73:34:14:2f:91:16:ce:db:d8:43:2e:56:22:
                    3e:04:73:66:b4:15:4d:cd:75:74:6e:65:85:19:91:
                    a5:20:f8:d6:a1:fb:b9:34:70:f3:8a:f5:b2:5d:e2:
                    ff:f2:c6:41:3d:aa:d4:b2:1a:ac:82:84:eb:14:c5:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:11:F7:5A:CE:FD:9A:9B:23:9F:72:4E:16:7E:25:3D:BF:C0:6A:B1
            X509v3 Authority Key Identifier:
                keyid:1D:F9:4E:27:DD:59:F3:5B:F7:F2:A0:1F:3D:BF:9B:A1:52:FD:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/1DF94E27DD59F35BF7F2A01F3DBF9BA152FD853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF94E27DD59F35BF7F2A01F3DBF9BA152FD853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/323830343a6230303a3a2f33322d313238203d3e203532393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:b8:ed:7c:90:d3:c4:ea:09:47:e4:2c:7a:19:0d:56:1e:
         85:3a:db:29:34:64:29:1b:2a:fd:59:ec:59:5d:e8:61:29:a7:
         93:06:54:04:75:d8:c7:e3:d7:50:ec:19:26:17:ff:20:67:51:
         1f:31:c5:63:2b:6d:f7:48:14:8b:2a:96:d0:f7:78:b6:1d:4d:
         14:1e:6f:63:ad:7c:a9:eb:0a:4f:d7:4f:e9:4c:42:13:4f:9a:
         f0:0a:ec:a0:19:3e:01:49:bb:88:15:ca:27:e8:c7:27:bc:41:
         a5:3b:89:69:15:96:43:b3:e8:dd:ec:51:01:47:89:10:01:bd:
         35:79:99:dd:31:55:c3:cf:d9:48:a0:ff:06:95:6f:16:ef:25:
         38:9e:91:eb:3b:6d:08:44:eb:3b:b9:f7:06:92:47:17:b7:b5:
         b9:b1:c5:13:78:a0:02:04:d3:b8:54:27:f8:0a:11:3b:dd:8f:
         eb:b9:ac:e3:5f:d4:8e:38:92:ee:c8:79:6e:99:fd:46:02:22:
         2b:45:30:41:f3:ff:d3:2d:e6:88:e8:7a:b3:87:77:02:72:87:
         1c:37:2a:c9:81:e0:4b:4a:d7:9b:5c:9d:c1:10:0f:f9:88:5d:
         10:f5:16:5e:27:3d:d4:66:58:81:9c:4a:65:68:72:11:eb:17:
         d5:44:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:20:58 2026 by rpki-client