Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/323830343a363237343a3a2f33322d313238203d3e20323639323938.roa
File:                     323830343a363237343a3a2f33322d313238203d3e20323639323938.roa (raw, json)
Hash identifier:          VKsU1uiItDlnNnK8W2tnqcjWuKpAvnvhmJS2DypTvYI=
Subject key identifier:   1B:8E:DC:27:C7:DC:1F:3F:F7:09:E6:BB:E7:EB:B5:6E:D2:B9:E5:CA
Certificate issuer:       /CN=EAB852D3B67B1504FF16254E3B8E19DCAB827C2A
Certificate serial:       606CEAB9A1DA700FD4BE633F4114316C168AF328
Authority key identifier: EA:B8:52:D3:B6:7B:15:04:FF:16:25:4E:3B:8E:19:DC:AB:82:7C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB852D3B67B1504FF16254E3B8E19DCAB827C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/323830343a363237343a3a2f33322d313238203d3e20323639323938.roa
Signing time:             Tue 24 Mar 2026 13:05:37 +0000
ROA not before:           Tue 24 Mar 2026 13:00:37 +0000
ROA not after:            Tue 23 Mar 2027 13:05:37 +0000
asID:                     269298
IP address blocks:        2804:6274::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/EAB852D3B67B1504FF16254E3B8E19DCAB827C2A.crl
                          rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/EAB852D3B67B1504FF16254E3B8E19DCAB827C2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB852D3B67B1504FF16254E3B8E19DCAB827C2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6c:ea:b9:a1:da:70:0f:d4:be:63:3f:41:14:31:6c:16:8a:f3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB852D3B67B1504FF16254E3B8E19DCAB827C2A
        Validity
            Not Before: Mar 24 13:00:37 2026 GMT
            Not After : Mar 23 13:05:37 2027 GMT
        Subject: CN=1B8EDC27C7DC1F3FF709E6BBE7EBB56ED2B9E5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:3c:8f:cd:b7:6d:63:7f:68:57:d7:46:a7:
                    98:f8:07:3c:06:78:0d:3b:d5:3c:e0:4e:02:e6:99:
                    71:05:1d:ca:90:b8:59:6a:b4:eb:6b:2d:ae:94:15:
                    78:20:93:0b:c9:81:b4:51:7f:b1:56:48:e9:33:1f:
                    7c:12:9e:6e:25:a6:c9:a0:10:6c:7a:d8:6e:b5:8f:
                    4a:5a:d7:e7:0b:0f:c5:e3:a7:c3:9c:43:fe:51:b9:
                    57:13:88:32:79:ef:d2:fd:23:5c:24:40:73:d0:8a:
                    d7:93:68:7a:4c:ad:1f:0b:fc:21:f0:0d:87:f5:33:
                    86:b5:d2:7e:f1:b4:d1:47:03:82:a9:36:74:be:da:
                    6c:4f:de:ff:e2:34:83:63:d7:8b:f6:5e:40:79:4e:
                    af:fb:5c:0a:63:51:b8:b5:c7:3a:17:72:d5:b1:c8:
                    fa:1e:29:21:10:4d:83:29:de:91:4f:75:91:94:a4:
                    2f:4e:67:9f:a2:4e:7f:1e:80:22:e5:49:d2:0d:a1:
                    d5:3b:23:85:1a:71:29:09:44:c3:db:80:ca:e2:d7:
                    1b:67:27:93:86:23:70:04:85:dc:93:eb:56:b6:0b:
                    24:fd:ef:d7:2e:78:20:59:ab:ca:2a:d8:e5:f7:ad:
                    9e:18:fa:85:34:24:be:e0:00:6b:6c:02:fa:b8:a3:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8E:DC:27:C7:DC:1F:3F:F7:09:E6:BB:E7:EB:B5:6E:D2:B9:E5:CA
            X509v3 Authority Key Identifier:
                keyid:EA:B8:52:D3:B6:7B:15:04:FF:16:25:4E:3B:8E:19:DC:AB:82:7C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/EAB852D3B67B1504FF16254E3B8E19DCAB827C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB852D3B67B1504FF16254E3B8E19DCAB827C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/323830343a363237343a3a2f33322d313238203d3e20323639323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6274::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:da:67:db:00:1b:26:bb:9c:a4:e5:5d:c7:6f:03:1b:74:e4:
         52:c6:93:bc:74:03:65:5a:6a:52:91:cd:30:42:c4:b7:2a:40:
         bc:df:87:c8:b8:5d:d3:26:cf:6e:ce:2a:d3:7e:fb:4e:50:43:
         20:19:39:03:31:df:c6:67:3f:3a:4f:65:48:49:7f:7e:25:cd:
         35:91:00:6f:24:23:32:bb:76:ce:25:e6:d5:43:e2:05:94:79:
         19:7c:ae:e5:9c:f8:26:55:b7:40:57:db:5c:aa:e7:44:af:8b:
         a8:1d:77:57:c8:5d:88:29:fd:49:cc:a5:60:66:c5:42:3c:d4:
         fa:10:6f:18:3c:29:51:05:e0:fa:a5:e5:ac:f0:40:45:ce:f3:
         70:84:b3:17:3d:2c:70:8b:86:a4:29:8d:c0:25:ea:3d:c5:01:
         aa:e1:99:bd:9f:fb:f8:88:8e:5d:47:57:65:17:e8:26:50:e4:
         e2:b4:36:6c:63:65:4e:59:3a:77:6b:bd:29:08:ac:ee:73:e1:
         5e:51:2a:8c:35:b7:84:76:1d:e7:ff:0b:8a:27:43:ca:f6:e4:
         de:a8:3b:f4:91:c7:c0:48:b5:bc:79:18:dc:06:06:f7:8f:30:
         30:ef:86:f8:e0:cb:ae:d2:a6:00:1b:45:ff:14:37:69:9c:5a:
         a9:38:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:59:47 2026 by rpki-client