Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa
File:                     323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa (raw, json)
Hash identifier:          PcOZFZ6EL2WYUggyzoAkLch4e5HvdQK9pplNmCjV6Y0=
Subject key identifier:   66:A6:17:A4:97:6D:F5:E4:33:68:A0:29:44:68:AF:F2:48:AA:40:5B
Certificate issuer:       /CN=315DDEA82F4151678E22C7DE6D37282137387EEA
Certificate serial:       40B5AB3EB06E07E2FAA351BB242B30E04FAE6E48
Authority key identifier: 31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa
Signing time:             Wed 29 Apr 2026 16:21:33 +0000
ROA not before:           Wed 29 Apr 2026 16:16:33 +0000
ROA not after:            Wed 28 Apr 2027 16:21:33 +0000
asID:                     271298
IP address blocks:        2804:7950:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl
                          rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b5:ab:3e:b0:6e:07:e2:fa:a3:51:bb:24:2b:30:e0:4f:ae:6e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315DDEA82F4151678E22C7DE6D37282137387EEA
        Validity
            Not Before: Apr 29 16:16:33 2026 GMT
            Not After : Apr 28 16:21:33 2027 GMT
        Subject: CN=66A617A4976DF5E43368A0294468AFF248AA405B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:bb:ac:e8:cb:df:55:79:63:f7:23:60:e6:
                    21:af:b5:bd:7c:01:89:67:77:57:7e:a3:4f:29:d8:
                    43:da:ad:c1:c0:5a:c1:15:f6:2c:85:b4:92:ef:98:
                    60:bd:6e:b8:ba:21:6c:1e:33:8d:7e:d7:fa:d3:6d:
                    23:4c:b0:03:60:ef:dd:48:aa:ca:fc:26:1b:f6:2c:
                    5c:d5:bd:5f:68:51:13:1d:ea:1a:ee:9d:49:0c:ca:
                    b6:34:c1:6f:66:a9:98:c2:4b:b3:8e:4d:eb:8e:d4:
                    fa:3c:b0:8a:3a:95:ee:0b:1c:03:d4:18:e6:2e:a6:
                    a8:7e:d1:4f:53:b5:99:98:bc:e3:6a:c3:6f:db:7e:
                    97:f4:7e:b2:c6:4a:cb:d0:6c:33:b5:71:7b:9a:b8:
                    89:f2:07:37:5b:dd:9d:31:b6:27:c0:42:15:f1:ab:
                    a4:ea:01:cd:72:6a:2e:b1:da:76:fb:44:cb:59:a2:
                    f7:e0:32:f0:81:e2:d4:3e:fd:ac:6e:b7:f2:07:74:
                    fe:d1:a0:b5:a0:4b:df:95:f8:75:f8:c5:9c:87:7b:
                    5a:71:70:ea:c5:82:a0:6d:b6:04:e3:69:35:cf:f8:
                    3c:3f:51:53:5f:3c:8e:50:22:af:53:50:aa:24:3c:
                    df:c7:21:9e:ab:08:91:96:42:5c:e0:80:0e:17:f8:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A6:17:A4:97:6D:F5:E4:33:68:A0:29:44:68:AF:F2:48:AA:40:5B
            X509v3 Authority Key Identifier:
                keyid:31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:e0:6a:36:3b:7f:22:bb:64:ea:33:b6:77:18:30:50:a4:e5:
         2c:c7:b3:db:fe:5d:ea:be:e5:fe:6a:67:55:1d:8a:56:3f:92:
         15:87:8f:9b:6a:26:8d:72:8e:25:86:7e:a9:f4:e6:fa:60:9c:
         53:a5:10:9d:33:db:c7:53:e1:70:f4:24:08:74:f1:c5:ff:d9:
         3e:0c:97:fe:cc:01:1f:d2:99:12:23:60:81:6b:a9:23:cd:80:
         ce:02:de:d2:de:b7:7d:03:33:73:16:5d:79:03:c4:2f:6e:5c:
         0e:1f:f7:01:94:19:b9:44:51:fa:c5:1f:cc:c3:94:e3:51:a9:
         f1:18:d4:9a:06:08:ba:0d:82:ae:7d:e7:2c:28:6b:ab:9a:76:
         00:fc:61:6c:fe:a9:19:80:5e:87:7a:33:e9:59:b8:d0:a3:bb:
         4d:11:9c:08:ba:70:69:68:e6:c3:89:6e:6d:8c:43:5c:85:78:
         79:ee:f8:31:50:21:1e:bd:48:fe:95:6b:56:49:79:4e:97:e0:
         c0:c2:b8:1b:bd:33:0a:63:a4:33:aa:b0:39:83:84:13:75:39:
         f6:ff:88:5c:78:a1:3d:c1:75:45:4e:32:79:ac:70:a1:80:d7:
         9a:68:9f:d1:ee:a9:2a:0a:18:ea:c1:59:6a:b8:d2:4b:ba:8b:
         fc:d3:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:45:29 2026 by rpki-client