Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          u5ix7KuEVvrxPt5LGbgcCDBrMZZHawRZHpYwfqejJok=
Subject key identifier:   E8:DD:11:6A:C3:D9:53:98:40:7B:8B:F8:FE:16:25:6D:84:C7:6A:AA
Certificate issuer:       /CN=B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3
Certificate serial:       6B7FE6734D9EA5AEBCCBDD88D586363FED34914F
Authority key identifier: B3:B8:F6:2F:D3:5A:D7:5B:ED:6D:EB:D3:23:E8:ED:53:C0:99:0A:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 10 Mar 2026 11:03:44 +0000
ROA not before:           Tue 10 Mar 2026 10:58:44 +0000
ROA not after:            Tue 09 Mar 2027 11:03:44 +0000
asID:                     264936
IP address blocks:        2804:3034:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 15:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7f:e6:73:4d:9e:a5:ae:bc:cb:dd:88:d5:86:36:3f:ed:34:91:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3
        Validity
            Not Before: Mar 10 10:58:44 2026 GMT
            Not After : Mar  9 11:03:44 2027 GMT
        Subject: CN=E8DD116AC3D95398407B8BF8FE16256D84C76AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:7a:1e:a9:0a:85:04:9d:0a:73:ed:29:44:
                    ca:28:c1:44:49:f0:35:1f:31:fa:0d:0b:e2:55:b0:
                    1c:75:82:a0:db:c3:8c:2c:2d:59:6b:68:6f:8a:73:
                    89:2d:db:02:44:88:d5:3e:39:1c:9f:9f:0f:6a:2b:
                    63:5e:cb:cc:e7:ad:04:22:85:57:f3:2c:bb:fd:1a:
                    f3:ba:85:ac:6b:c4:92:46:bd:3d:c9:a9:c7:89:4c:
                    13:6a:91:fb:b5:e6:45:6c:7a:4c:4f:d8:2d:79:30:
                    4e:6e:db:d7:04:a9:ca:f3:94:af:d1:6f:9a:17:80:
                    a5:b6:ac:b2:c5:fa:61:56:91:10:10:8c:50:b9:0f:
                    7f:5e:b4:2b:f8:dc:bd:69:24:a5:75:cc:23:07:27:
                    34:a5:0b:45:61:e2:88:81:97:4a:e9:61:15:8b:42:
                    52:67:1b:32:a1:af:a5:38:e4:25:ad:e6:29:38:c9:
                    84:ef:c9:a3:8a:e0:26:a6:c2:b9:36:05:8b:c4:4b:
                    38:47:cb:23:54:7c:1e:69:80:5f:56:0f:97:dd:02:
                    63:f4:0f:f4:fe:79:96:74:91:0f:03:d3:0e:ac:74:
                    76:4f:c0:20:25:f5:1e:1d:98:f8:ca:bd:f2:0c:96:
                    d2:25:2a:fc:68:0b:bd:e3:9e:33:1f:cb:99:39:a6:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DD:11:6A:C3:D9:53:98:40:7B:8B:F8:FE:16:25:6D:84:C7:6A:AA
            X509v3 Authority Key Identifier:
                keyid:B3:B8:F6:2F:D3:5A:D7:5B:ED:6D:EB:D3:23:E8:ED:53:C0:99:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:00:07:44:7c:c6:8b:f3:cf:ac:df:cc:98:a7:9a:3e:10:37:
         ab:32:55:47:0a:2b:be:2e:fc:68:97:dc:07:e2:37:e0:88:51:
         76:75:a2:82:95:94:11:bc:6f:65:a4:31:62:15:a7:82:29:c4:
         a3:30:c3:2b:a7:5b:81:5d:79:36:94:b1:c9:29:15:28:c7:5a:
         cd:ee:3d:e7:fd:b9:a6:f6:29:d3:73:9a:64:18:48:36:8b:c0:
         a9:42:7f:d6:39:e8:8d:ea:83:d1:88:16:31:a9:5d:d8:ae:58:
         fb:27:0c:91:0d:79:94:56:83:af:eb:52:37:da:5c:cc:74:41:
         27:54:3c:0a:51:00:a8:e1:f0:ef:64:72:06:6b:e8:a4:39:61:
         8d:98:05:8c:d8:d1:1e:5c:a9:be:28:f0:e1:a5:79:df:1f:83:
         3c:9c:1f:08:07:f5:dc:03:5f:cd:d8:29:56:5c:84:26:50:fd:
         ad:96:61:b1:4f:56:8c:f8:d1:5e:74:08:2a:fe:8a:07:2a:2b:
         c4:c0:a3:6a:fb:49:71:cc:0d:4b:bc:6d:08:26:74:ea:32:f0:
         f7:b3:06:c8:db:bc:59:72:cb:3c:d3:1d:80:0e:e9:98:de:31:
         5a:2a:4a:b8:b9:5b:df:88:d2:75:9e:87:84:99:4b:bb:e3:23:
         04:59:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:59:06 2026 by rpki-client