Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/323830343a316139303a3a2f33322d3438203d3e203631383638.roa
File:                     323830343a316139303a3a2f33322d3438203d3e203631383638.roa (raw, json)
Hash identifier:          5RMjqXzbK8n6PLdVrrLf9Z1kwgX+ZpdUBnAmW6bLuH4=
Subject key identifier:   18:D5:3E:34:CB:FF:6D:3A:2B:AD:E6:CE:5D:BD:A9:89:1E:D2:17:2F
Certificate issuer:       /CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
Certificate serial:       270767F04233714E95267184D00CAA9C68851447
Authority key identifier: C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/323830343a316139303a3a2f33322d3438203d3e203631383638.roa
Signing time:             Mon 09 Mar 2026 18:03:12 +0000
ROA not before:           Mon 09 Mar 2026 17:58:12 +0000
ROA not after:            Mon 08 Mar 2027 18:03:12 +0000
asID:                     61868
IP address blocks:        2804:1a90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl
                          rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:07:67:f0:42:33:71:4e:95:26:71:84:d0:0c:aa:9c:68:85:14:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
        Validity
            Not Before: Mar  9 17:58:12 2026 GMT
            Not After : Mar  8 18:03:12 2027 GMT
        Subject: CN=18D53E34CBFF6D3A2BADE6CE5DBDA9891ED2172F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:d9:e7:b0:72:78:b6:16:af:24:21:17:be:
                    07:85:c8:a0:85:a4:31:5d:a5:31:a0:d7:e4:e4:28:
                    e0:e3:43:b6:76:d8:94:9b:97:dc:55:5f:c1:81:ef:
                    b5:a2:14:91:66:65:11:77:81:6e:ca:a1:89:e8:c1:
                    65:d5:0c:45:8c:b3:26:11:34:f9:69:a5:13:4b:0b:
                    8f:1c:fb:73:ee:67:ce:2b:56:6d:5e:bd:f3:6d:62:
                    6c:c0:c6:bf:66:5f:16:a8:07:b0:af:25:1c:e6:5e:
                    bb:b6:96:16:cf:0a:7b:a0:72:e2:8f:c0:3b:a8:ae:
                    2b:f4:2c:d3:33:b4:24:f4:2b:62:fb:32:3d:20:4a:
                    f0:58:63:10:64:eb:67:75:91:e8:ed:f6:57:c8:d0:
                    22:7a:c1:9a:95:e7:5b:fa:37:19:26:8f:ae:f6:6a:
                    e8:9c:3f:0f:12:6f:6d:3a:db:42:7e:9f:eb:ea:48:
                    91:5f:5c:44:7c:45:0d:11:bc:d2:e7:e0:f2:39:66:
                    b6:11:8e:88:b7:a6:ee:ed:b4:0f:c3:7f:c1:a8:b6:
                    75:97:1d:1c:40:c7:c9:bd:a9:56:85:f9:dc:7e:f5:
                    fd:77:d1:ed:b7:e6:78:53:f1:a5:90:37:91:8b:e4:
                    7b:f2:1a:3d:4c:78:30:26:e8:35:91:67:99:1c:ae:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D5:3E:34:CB:FF:6D:3A:2B:AD:E6:CE:5D:BD:A9:89:1E:D2:17:2F
            X509v3 Authority Key Identifier:
                keyid:C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/323830343a316139303a3a2f33322d3438203d3e203631383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:21:91:18:92:39:42:a0:5b:08:c9:71:e3:28:da:9b:af:
         fc:88:6a:ad:2d:af:6a:dc:3a:eb:a6:7b:68:c9:d4:1f:02:33:
         28:7d:8e:5c:03:39:9d:14:a3:9a:2a:df:ba:3e:5d:c3:7c:45:
         6d:1e:f9:f0:4f:59:a8:df:3c:73:4c:d6:40:b6:9f:1a:1a:69:
         30:ed:bd:15:ac:c1:73:78:65:f8:42:38:60:9c:df:c3:b6:15:
         c5:e4:38:c8:c8:48:5f:ec:a8:6f:30:91:a8:68:da:3f:63:b5:
         82:ba:60:fc:5c:78:17:18:ea:60:ad:c6:06:f7:c2:8c:e1:ef:
         6c:01:4c:ca:40:ff:b3:d1:04:c2:37:96:71:a4:b7:cf:d3:9a:
         b4:15:45:4d:62:b8:1f:77:a3:fa:36:71:80:7c:a0:33:25:f1:
         76:8c:06:70:06:20:40:da:17:05:69:e7:b9:db:38:2f:19:c9:
         70:f0:e7:e8:12:9f:0e:18:07:2e:d2:7f:12:bd:cd:f4:d4:d1:
         33:30:af:f1:49:b2:a3:fc:41:63:9e:8f:67:2a:5a:c2:f7:9e:
         7c:7e:cc:c8:b9:3e:e8:94:6e:28:fc:8e:67:6d:ca:29:64:4d:
         0d:d3:df:e7:b7:3e:1c:59:b7:e3:52:c1:83:e4:4e:ea:af:a3:
         46:96:a7:b3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJwdn8EIzcU6VJnGE0AyqnGiFFEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzczNDY4MkIwQ0MxRjhGQ0JEREZGQTk2ODVGRjEyOUZC
N0Y0NjI0MTAeFw0yNjAzMDkxNzU4MTJaFw0yNzAzMDgxODAzMTJaMDMxMTAvBgNV
BAMTKDE4RDUzRTM0Q0JGRjZEM0EyQkFERTZDRTVEQkRBOTg5MUVEMjE3MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatdnnsHJ4thavJCEXvgeFyKCF
pDFdpTGg1+TkKODjQ7Z22JSbl9xVX8GB77WiFJFmZRF3gW7KoYnowWXVDEWMsyYR
NPlppRNLC48c+3PuZ84rVm1evfNtYmzAxr9mXxaoB7CvJRzmXru2lhbPCnugcuKP
wDuoriv0LNMztCT0K2L7Mj0gSvBYYxBk62d1kejt9lfI0CJ6wZqV51v6Nxkmj672
auicPw8Sb20620J+n+vqSJFfXER8RQ0RvNLn4PI5ZrYRjoi3pu7ttA/Df8GotnWX
HRxAx8m9qVaF+dx+9f130e235nhT8aWQN5GL5HvyGj1MeDAm6DWRZ5kcrjxfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUGNU+NMv/bTorrebOXb2piR7SFy8wHwYDVR0j
BBgwFoAUxzRoKwzB+Py93/qWhf8Sn7f0YkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEZUbk5NcWZmM0pVem5Rd1kxNTJnQlNtb2ZCUndDelk3WWZ5Y0tCTWo3
aEcvMC9DNzM0NjgyQjBDQzFGOEZDQkRERkZBOTY4NUZGMTI5RkI3RjQ2MjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3MzQ2ODJCMENDMUY4RkNC
RERGRkE5Njg1RkYxMjlGQjdGNDYyNDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRGVG5OTXFmZjNKVXpuUXdZMTUyZ0JTbW9mQlJ3Q3pZN1lmeWNLQk1qN2hHLzAv
MzIzODMwMzQzYTMxNjEzOTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4
MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGpAwDQYJKoZIhvcNAQELBQADggEBAIS1IZEYkjlC
oFsIyXHjKNqbr/yIaq0tr2rcOuume2jJ1B8CMyh9jlwDOZ0Uo5oq37o+XcN8RW0e
+fBPWajfPHNM1kC2nxoaaTDtvRWswXN4ZfhCOGCc38O2FcXkOMjISF/sqG8wkaho
2j9jtYK6YPxceBcY6mCtxgb3wozh72wBTMpA/7PRBMI3lnGkt8/TmrQVRU1iuB93
o/o2cYB8oDMl8XaMBnAGIEDaFwVp57nbOC8ZyXDw5+gSnw4YBy7SfxK9zfTU0TMw
r/FJsqP8QWOej2cqWsL3nnx+zMi5PuiUbij8jmdtyilkTQ3T3+e3PhxZt+NSwYPk
Tuqvo0aWp7M=
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:46:33 2026 by rpki-client