Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33332d3333203d3e20323635323831.roa
File:                     323830343a326436633a3a2f33332d3333203d3e20323635323831.roa (raw, json)
Hash identifier:          sG7q+pUQ3r4Lc8bcR9OSSfHkgSsxo0mZE1yoHShR70Q=
Subject key identifier:   1F:BA:4B:F6:C4:A2:D2:E1:CA:CB:E7:BE:38:96:AF:2D:58:DF:29:74
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       754BC79ECC635873E2573DD434EECC66FBCE2317
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33332d3333203d3e20323635323831.roa
Signing time:             Thu 07 May 2026 18:01:17 +0000
ROA not before:           Thu 07 May 2026 17:56:17 +0000
ROA not after:            Thu 06 May 2027 18:01:17 +0000
asID:                     265281
IP address blocks:        2804:2d6c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4b:c7:9e:cc:63:58:73:e2:57:3d:d4:34:ee:cc:66:fb:ce:23:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: May  7 17:56:17 2026 GMT
            Not After : May  6 18:01:17 2027 GMT
        Subject: CN=1FBA4BF6C4A2D2E1CACBE7BE3896AF2D58DF2974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:1a:44:8a:c0:d0:2c:bd:81:63:aa:52:27:
                    73:2e:82:53:a0:44:aa:bb:1f:1f:b1:f3:1a:dd:f8:
                    ee:fd:66:a4:dc:d9:65:25:34:4c:64:37:e0:0b:60:
                    55:d7:0f:18:f6:d1:55:14:5f:33:04:f2:69:52:5e:
                    1f:76:61:18:4d:1e:10:a4:0b:9e:67:27:ff:19:d7:
                    d8:22:43:18:ee:d0:9e:31:bd:ad:b4:c0:ea:45:40:
                    b1:b6:1d:ff:3e:6e:46:c4:af:b1:88:7f:f3:a0:a7:
                    2a:fb:f9:af:40:50:3c:0c:3f:d8:34:38:59:b3:4b:
                    eb:bd:91:14:6a:98:5a:00:75:d7:88:3a:5b:82:db:
                    fe:df:56:89:fb:d8:40:26:5e:de:46:13:a6:bd:f1:
                    9e:6d:c9:e6:3e:ac:2c:0b:cf:4e:cd:ce:94:ed:f2:
                    ab:1a:82:2d:31:44:ff:bb:4a:ed:fe:73:66:87:6e:
                    3e:4d:a2:a3:0b:92:ef:15:37:3c:ae:02:45:4d:12:
                    48:04:25:48:53:58:c9:88:a6:7a:83:70:ec:b5:a9:
                    f8:92:15:a8:25:03:ca:6b:27:8b:e7:80:ce:56:10:
                    51:22:e5:77:90:6c:fe:3b:79:11:05:21:e0:03:5a:
                    5a:8f:2e:32:0f:2c:65:d3:5d:2b:93:68:78:09:de:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:4B:F6:C4:A2:D2:E1:CA:CB:E7:BE:38:96:AF:2D:58:DF:29:74
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33332d3333203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d6c::/33

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:64:90:11:d9:47:2c:3a:c4:6c:26:03:a4:2e:93:4b:1a:
         21:8c:fa:ae:00:a6:ee:4d:1e:eb:d9:79:ba:00:9e:f7:c0:1c:
         fd:c3:9c:ca:62:67:66:98:39:57:08:50:61:d0:db:65:a5:eb:
         fe:6c:9c:f5:4a:e7:35:0f:ff:1a:1f:0a:7e:c6:27:c2:1c:3f:
         84:a6:cd:98:53:60:b7:4d:0d:f2:cc:cb:66:27:6f:56:07:f7:
         16:fd:50:d3:f1:46:87:23:f7:5f:f0:a9:51:30:09:f8:76:e5:
         c4:2a:9c:98:c3:ea:68:5d:31:cf:f0:e9:b1:4d:ab:29:16:fb:
         0c:51:96:8d:8a:51:7f:02:69:e3:06:ef:7d:79:3a:b6:8e:e1:
         d9:19:e4:ec:a7:a1:2d:3c:ae:37:8e:c0:e1:08:60:eb:9c:89:
         f0:8a:c5:b5:9f:58:c4:1e:fb:50:78:f7:ba:6b:bb:d1:a4:3b:
         b9:a0:8e:3c:f0:ad:3b:60:15:8d:7f:a1:17:85:e1:bc:16:8f:
         34:fc:aa:94:d3:91:f9:5f:03:93:c6:da:6b:4c:74:53:36:e3:
         e9:01:7a:76:99:fc:dd:c6:07:23:f5:5c:b4:7e:a3:43:03:6a:
         ed:2a:d6:9e:5b:22:5d:8a:b4:ac:99:bf:ba:f2:99:e5:ba:d4:
         3f:78:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:06:50 2026 by rpki-client