Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/323830343a3935633a3a2f33322d3438203d3e203238363534.roa
File:                     323830343a3935633a3a2f33322d3438203d3e203238363534.roa (raw, json)
Hash identifier:          H3BeFRIHicFDSQqMmrNHN1d9uC7LTBIiizHtiDi7L90=
Subject key identifier:   42:88:51:D3:99:49:EA:45:4D:9F:6D:8C:ED:47:9A:E7:20:D2:23:F5
Certificate issuer:       /CN=909BA09D1557C8C734FFC182266E36889410A11D
Certificate serial:       12DE10A857E892281BD5CFC3B267E5A3B33C7FBC
Authority key identifier: 90:9B:A0:9D:15:57:C8:C7:34:FF:C1:82:26:6E:36:88:94:10:A1:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909BA09D1557C8C734FFC182266E36889410A11D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/323830343a3935633a3a2f33322d3438203d3e203238363534.roa
Signing time:             Mon 27 Apr 2026 13:14:38 +0000
ROA not before:           Mon 27 Apr 2026 13:09:38 +0000
ROA not after:            Mon 26 Apr 2027 13:14:38 +0000
asID:                     28654
IP address blocks:        2804:95c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/909BA09D1557C8C734FFC182266E36889410A11D.crl
                          rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/909BA09D1557C8C734FFC182266E36889410A11D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909BA09D1557C8C734FFC182266E36889410A11D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:de:10:a8:57:e8:92:28:1b:d5:cf:c3:b2:67:e5:a3:b3:3c:7f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909BA09D1557C8C734FFC182266E36889410A11D
        Validity
            Not Before: Apr 27 13:09:38 2026 GMT
            Not After : Apr 26 13:14:38 2027 GMT
        Subject: CN=428851D39949EA454D9F6D8CED479AE720D223F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:d9:58:6d:99:09:61:62:c9:c0:ff:97:10:
                    05:e9:0b:da:12:25:07:c1:05:06:45:53:d6:ee:ec:
                    7a:9f:8f:7c:a6:fd:b3:a9:1c:9a:04:df:ab:1d:f5:
                    bc:23:31:b9:60:c6:ba:32:3c:c4:fe:df:41:c9:5a:
                    85:50:74:04:07:94:84:f3:38:71:ff:14:09:35:2a:
                    c9:97:e9:41:4f:bc:88:06:60:8c:ac:0e:34:76:5f:
                    41:14:c7:d8:74:9e:eb:3c:16:78:7b:60:7a:54:ca:
                    99:6f:47:9e:10:0d:6f:3b:c7:2b:b5:d6:8b:36:48:
                    2b:80:0e:de:06:88:8e:d3:2c:06:07:f1:69:94:39:
                    bb:db:20:df:ed:65:88:de:e2:1a:88:42:3b:99:91:
                    e5:38:46:80:69:82:4a:1d:0b:ce:23:89:dd:85:a4:
                    e7:63:87:86:7c:b5:01:3f:01:1c:ea:70:60:f0:af:
                    73:d2:7b:f2:bf:c9:c8:e0:e5:72:59:16:7d:d4:31:
                    0b:72:76:14:36:5e:cb:ba:5d:82:69:ae:a4:df:58:
                    9f:e7:12:bb:a3:b0:46:0c:b7:7e:4c:25:b3:24:d9:
                    75:04:c6:5d:3a:78:d3:47:a2:89:70:22:60:d8:1c:
                    0f:8b:c0:25:29:b2:cd:97:13:b3:a6:4d:30:5a:87:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:88:51:D3:99:49:EA:45:4D:9F:6D:8C:ED:47:9A:E7:20:D2:23:F5
            X509v3 Authority Key Identifier:
                keyid:90:9B:A0:9D:15:57:C8:C7:34:FF:C1:82:26:6E:36:88:94:10:A1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/909BA09D1557C8C734FFC182266E36889410A11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909BA09D1557C8C734FFC182266E36889410A11D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/323830343a3935633a3a2f33322d3438203d3e203238363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:95c::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:cf:be:a7:40:75:d0:43:32:a9:51:6e:1b:9c:41:43:a5:ff:
         0d:24:97:dd:59:0d:3e:86:20:e5:ca:6b:1c:47:9b:9a:c9:8a:
         e5:e7:a8:62:5f:00:30:eb:9a:3a:48:fa:14:f8:4b:c5:ad:08:
         2f:fa:81:5e:bf:79:eb:cd:50:8e:41:29:09:c2:64:0a:15:c9:
         c2:04:fa:ba:80:b6:c7:a5:5f:ca:56:09:6a:93:1f:e3:e2:7b:
         be:e3:68:fd:84:a2:35:da:59:8d:8a:4b:58:22:1d:d7:51:53:
         fe:77:a4:1f:f8:de:8e:e6:ee:71:ae:c2:b0:29:d7:e6:7b:31:
         96:2a:a5:41:fe:b6:ed:e3:b9:06:0e:7f:16:83:2b:af:44:bd:
         80:4c:bb:c7:ec:7f:c1:40:d6:eb:83:88:4a:37:b8:e1:5a:c1:
         7c:4b:95:be:28:ca:65:5b:fc:aa:f0:72:22:a6:66:e1:dd:1a:
         0d:5f:b5:d4:ed:d8:e9:63:30:cf:e0:1e:14:4a:2a:ee:80:fe:
         f8:a1:17:7e:ad:53:6e:06:f7:3d:6e:44:29:82:8e:f1:82:e4:
         1f:28:ec:c5:fd:ee:21:d3:b9:b0:6b:3b:90:1a:a9:1d:8b:21:
         92:e7:79:43:f0:90:df:6b:5c:ad:8e:8e:65:2d:6c:d8:69:93:
         14:78:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:57:28 2026 by rpki-client