Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383030303a3a2f33342d3334203d3e20323731323938.roa
File:                     323830343a373935303a383030303a3a2f33342d3334203d3e20323731323938.roa (raw, json)
Hash identifier:          RNt1CaRsnhPkcFB1DLZZ3/Jb/w5YK0ci/ZIF1WeObJ8=
Subject key identifier:   1A:FA:2C:89:A6:DB:66:FB:AB:B2:8C:A6:02:CD:00:C6:12:4A:6C:34
Certificate issuer:       /CN=315DDEA82F4151678E22C7DE6D37282137387EEA
Certificate serial:       05BDC9829EDFE40DF7FEC5E478C4BDF133EF1EA4
Authority key identifier: 31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383030303a3a2f33342d3334203d3e20323731323938.roa
Signing time:             Wed 11 Mar 2026 19:20:20 +0000
ROA not before:           Wed 11 Mar 2026 19:15:20 +0000
ROA not after:            Wed 10 Mar 2027 19:20:20 +0000
asID:                     271298
IP address blocks:        2804:7950:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl
                          rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bd:c9:82:9e:df:e4:0d:f7:fe:c5:e4:78:c4:bd:f1:33:ef:1e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315DDEA82F4151678E22C7DE6D37282137387EEA
        Validity
            Not Before: Mar 11 19:15:20 2026 GMT
            Not After : Mar 10 19:20:20 2027 GMT
        Subject: CN=1AFA2C89A6DB66FBABB28CA602CD00C6124A6C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:17:5c:4a:81:9a:dd:7c:ee:68:89:32:6f:37:
                    b7:9e:58:ad:cb:ff:a8:93:6c:0e:84:cf:d5:ec:19:
                    1f:29:03:7e:52:92:92:b4:7d:84:32:06:8b:cc:2a:
                    a3:41:c5:57:de:6b:41:ed:fa:6c:95:69:5f:63:87:
                    d1:24:32:02:4f:ae:4c:49:bf:04:c5:fd:c2:0e:e4:
                    9f:50:ff:8c:36:d4:e4:6d:bc:7d:1c:69:bb:16:b3:
                    d2:5d:c3:c0:6c:ca:28:3a:67:4e:bf:23:b4:6d:70:
                    3f:e5:51:b3:5d:61:47:09:1a:e3:39:11:e0:e8:da:
                    64:cf:6e:e3:20:b3:cd:b5:a4:2e:c2:48:67:71:68:
                    52:5c:a8:86:c2:87:19:c7:34:97:d5:c7:da:f4:5f:
                    02:5a:fc:45:a0:d6:f1:b2:86:a5:07:ee:96:d1:fa:
                    36:58:73:51:f9:cf:d4:96:48:21:73:de:0b:25:9b:
                    c5:e8:0c:61:8d:df:53:1d:7a:9e:26:81:a1:b7:6b:
                    18:dc:bb:cb:16:7a:1d:47:e9:ba:04:d9:2f:35:16:
                    c0:40:f6:6f:a2:23:84:9a:8a:f1:d4:52:3f:ac:d2:
                    82:66:8a:25:03:00:11:07:97:cc:01:f7:36:7d:80:
                    ed:7f:79:2d:0b:bd:c5:80:bf:31:4f:e1:fc:49:44:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FA:2C:89:A6:DB:66:FB:AB:B2:8C:A6:02:CD:00:C6:12:4A:6C:34
            X509v3 Authority Key Identifier:
                keyid:31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383030303a3a2f33342d3334203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:90:76:0a:02:db:16:54:57:7d:61:42:b9:3d:50:d1:64:
         99:a7:c6:61:dc:46:13:57:3a:2f:46:81:31:2a:ab:8f:5d:b0:
         76:95:b4:9e:48:b5:85:bb:d1:19:74:9c:f2:b2:e2:ad:dd:2a:
         c9:73:88:8f:43:2a:28:35:d3:ad:38:81:33:7d:aa:3a:84:d2:
         27:5b:57:06:8d:ea:d9:3c:ff:98:3e:7c:2a:11:ea:04:ce:cd:
         0e:e7:a8:41:7f:c0:4c:20:7f:fe:79:c5:11:2c:7b:36:7a:bb:
         03:48:e0:a4:8c:54:e6:cf:78:f1:97:e8:88:24:7b:91:e1:0d:
         a2:5f:35:f0:cc:55:ab:42:5e:73:68:0a:12:34:45:16:b9:5c:
         d2:e4:2c:72:59:fd:13:d6:a7:d0:6c:41:ba:4f:1f:e6:e1:36:
         3d:3e:d3:bb:7f:9b:cd:0a:39:81:b8:f4:e3:7f:b1:e0:0d:7c:
         f6:62:d5:19:18:f5:4e:49:9b:cd:bb:58:89:2b:c4:0d:49:79:
         4d:9f:02:fb:d1:9c:eb:19:e7:d0:c0:11:14:2f:74:a1:bd:73:
         c9:cd:02:f4:9d:e9:b5:50:f3:a6:4d:b0:4c:f2:fe:a9:c0:0b:
         da:17:de:b7:14:94:e9:ee:d3:66:32:77:11:df:27:76:a1:82:
         1e:17:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:52:42 2026 by rpki-client