Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33322d313238203d3e20323635343336.roa
File:                     323830343a333431633a3a2f33322d313238203d3e20323635343336.roa (raw, json)
Hash identifier:          n77lNHSacPsbiD6wNmlnHmDm434o8/4rqC9T0/GQvRc=
Subject key identifier:   AD:25:E1:D1:0F:E2:50:BF:24:4D:A6:75:3E:51:B4:50:84:B1:12:BB
Certificate issuer:       /CN=63D93741B2DC284D5D73204257F31ACEAB448E8E
Certificate serial:       1BE6355CA390F75D548667DC029C80775FD32AE2
Authority key identifier: 63:D9:37:41:B2:DC:28:4D:5D:73:20:42:57:F3:1A:CE:AB:44:8E:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D93741B2DC284D5D73204257F31ACEAB448E8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33322d313238203d3e20323635343336.roa
Signing time:             Fri 20 Mar 2026 19:14:31 +0000
ROA not before:           Fri 20 Mar 2026 19:09:31 +0000
ROA not after:            Fri 19 Mar 2027 19:14:31 +0000
asID:                     265436
IP address blocks:        2804:341c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/63D93741B2DC284D5D73204257F31ACEAB448E8E.crl
                          rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/63D93741B2DC284D5D73204257F31ACEAB448E8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D93741B2DC284D5D73204257F31ACEAB448E8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e6:35:5c:a3:90:f7:5d:54:86:67:dc:02:9c:80:77:5f:d3:2a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D93741B2DC284D5D73204257F31ACEAB448E8E
        Validity
            Not Before: Mar 20 19:09:31 2026 GMT
            Not After : Mar 19 19:14:31 2027 GMT
        Subject: CN=AD25E1D10FE250BF244DA6753E51B45084B112BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:78:0a:47:47:c1:87:dc:b9:71:03:cd:f9:
                    27:9f:b0:8e:60:a7:37:ba:95:3a:42:4f:da:cd:8e:
                    5e:0b:f1:3e:72:af:8f:0c:b5:12:b3:e2:3e:15:49:
                    49:88:96:44:e3:39:e3:8d:19:ee:0d:42:54:cd:05:
                    31:ee:13:0f:05:af:eb:ce:15:05:aa:0f:10:a0:34:
                    e9:86:76:71:ca:73:0c:b9:b1:84:96:66:6e:3f:50:
                    57:ad:97:bd:a6:29:32:5b:98:b6:98:87:fa:65:6a:
                    2a:a5:f3:f9:db:11:f4:58:41:0c:ba:b0:41:92:51:
                    3b:cb:62:d7:1d:cf:a9:43:59:d2:58:1b:72:86:29:
                    c9:50:a9:34:8f:f9:b3:70:c6:3c:bd:c1:f1:82:51:
                    5f:bc:39:7c:35:c7:8d:d5:50:f3:bc:a7:05:05:28:
                    cd:cd:a3:fa:a9:cc:f2:98:94:82:fe:69:a4:e3:85:
                    3d:94:eb:0e:d8:f0:7d:2f:10:a9:24:9f:73:83:2a:
                    26:3c:c4:12:77:b1:a9:f2:40:a6:42:10:67:88:3f:
                    aa:6f:6b:f0:75:e4:e8:32:4f:3c:03:c9:dd:2c:e1:
                    9f:98:e5:ab:50:3d:3d:e3:a7:f2:57:e0:43:87:46:
                    46:2e:21:fa:0b:41:4e:e1:96:ad:05:a4:2b:a1:30:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:25:E1:D1:0F:E2:50:BF:24:4D:A6:75:3E:51:B4:50:84:B1:12:BB
            X509v3 Authority Key Identifier:
                keyid:63:D9:37:41:B2:DC:28:4D:5D:73:20:42:57:F3:1A:CE:AB:44:8E:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/63D93741B2DC284D5D73204257F31ACEAB448E8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D93741B2DC284D5D73204257F31ACEAB448E8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33322d313238203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:341c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:79:7a:7a:fb:cb:13:c4:1b:cb:47:0e:d1:cd:21:2a:1f:4d:
         c2:66:f3:d4:2b:15:66:0a:46:20:af:7e:d7:7a:6b:f0:49:aa:
         2c:8c:2f:ae:61:f2:da:8b:30:a4:82:7b:6d:c6:d0:e9:34:0a:
         cf:0a:af:45:7a:c1:31:56:d6:d4:d3:6e:97:f2:2a:5a:11:52:
         6b:f4:48:66:c2:c2:9e:2d:45:63:51:c1:2b:47:03:b2:88:08:
         8e:69:de:3b:5a:a0:d7:71:76:0c:dc:ca:b8:16:e5:57:31:6a:
         90:43:71:87:fe:64:06:71:f4:c2:e4:84:3c:2e:82:63:e6:c7:
         91:97:98:72:10:3f:42:d4:11:d1:0c:12:40:24:a7:66:48:da:
         b2:d7:7a:c3:a1:2d:46:b3:db:25:ee:df:57:51:a2:ef:94:f1:
         cd:81:bb:c9:ed:5b:f3:a8:4d:fb:53:98:8c:a0:9a:64:b6:f2:
         79:08:89:f2:40:90:16:81:1e:71:50:39:34:49:33:64:26:8e:
         ce:1e:0f:bb:fd:f0:a6:fd:44:cb:6d:9b:b5:5a:c6:d5:52:0a:
         4c:f9:f2:c2:9a:21:1f:df:d6:d9:10:27:52:2d:04:6c:01:d8:
         35:6e:37:15:9a:27:20:de:29:8c:6a:7e:b5:20:b1:42:7f:d0:
         d3:75:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:38 2026 by rpki-client