Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/323830343a333766303a3a2f33322d3438203d3e20323636343435.roa
File:                     323830343a333766303a3a2f33322d3438203d3e20323636343435.roa (raw, json)
Hash identifier:          1ATjmvo3uBqMTcGOkpio1ydbi1JCBhnE2wA5k/X6hjY=
Subject key identifier:   D5:AA:38:C5:58:4C:F3:E1:ED:AD:11:35:F2:04:1E:41:67:AF:59:97
Certificate issuer:       /CN=7F6FA8E3283DF0A70669D93FD9B84155B89C4685
Certificate serial:       25EECE8983FD841AB981D89ABD9BBE7486A467E6
Authority key identifier: 7F:6F:A8:E3:28:3D:F0:A7:06:69:D9:3F:D9:B8:41:55:B8:9C:46:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/323830343a333766303a3a2f33322d3438203d3e20323636343435.roa
Signing time:             Mon 23 Mar 2026 12:53:35 +0000
ROA not before:           Mon 23 Mar 2026 12:48:35 +0000
ROA not after:            Mon 22 Mar 2027 12:53:35 +0000
asID:                     266445
IP address blocks:        2804:37f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.crl
                          rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 17:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ee:ce:89:83:fd:84:1a:b9:81:d8:9a:bd:9b:be:74:86:a4:67:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F6FA8E3283DF0A70669D93FD9B84155B89C4685
        Validity
            Not Before: Mar 23 12:48:35 2026 GMT
            Not After : Mar 22 12:53:35 2027 GMT
        Subject: CN=D5AA38C5584CF3E1EDAD1135F2041E4167AF5997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:4a:fe:c2:dd:ce:83:9f:3a:95:27:41:a5:
                    1f:41:f3:19:eb:39:06:69:e6:ef:39:aa:b7:1e:da:
                    e4:3c:af:a3:ad:6e:49:7c:0d:e2:b3:06:d0:d7:7c:
                    2f:87:c9:0c:7d:4a:ae:4c:a2:59:a0:0d:54:6e:fe:
                    98:22:16:07:c6:c0:ea:64:0c:49:39:9c:49:bb:ab:
                    d6:29:88:a8:71:fb:f4:6a:a5:a1:dd:17:9e:23:a7:
                    7a:2c:cf:32:b3:f2:c2:78:5c:61:e8:1f:0b:2f:1f:
                    4f:b7:75:07:3b:18:1d:88:57:e0:e3:9c:52:07:fb:
                    73:19:f6:37:40:44:92:9b:68:be:aa:10:bc:db:0b:
                    ea:35:a3:c6:98:fd:9d:fb:1f:62:55:cf:99:2c:20:
                    7d:b6:f9:5f:25:25:a8:2a:68:ce:4c:79:cc:ce:79:
                    4a:a3:d1:f9:80:a4:67:ff:78:5d:dd:4d:39:6a:5a:
                    25:24:e1:f4:0a:bb:35:e3:74:eb:11:59:90:cd:f9:
                    d8:c3:f2:08:23:35:f6:f4:89:5a:1a:fd:2c:7d:70:
                    59:cc:0a:6a:5d:ea:66:78:ac:4e:2a:79:5d:e4:c5:
                    53:ae:1f:77:54:ea:a9:f8:c7:43:c3:6e:c4:9d:5a:
                    e4:5c:ca:f5:ce:59:55:b4:b1:0e:22:76:1e:fc:ed:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AA:38:C5:58:4C:F3:E1:ED:AD:11:35:F2:04:1E:41:67:AF:59:97
            X509v3 Authority Key Identifier:
                keyid:7F:6F:A8:E3:28:3D:F0:A7:06:69:D9:3F:D9:B8:41:55:B8:9C:46:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FA8E3283DF0A70669D93FD9B84155B89C4685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/323830343a333766303a3a2f33322d3438203d3e20323636343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:78:37:24:35:17:92:54:d2:ef:7c:08:00:2f:1a:a0:32:4f:
         6e:36:a3:0b:83:92:5a:2e:e9:9b:f3:f5:9f:79:6a:19:a1:c1:
         14:b8:5d:5d:2e:df:a6:d0:a0:62:b9:46:3a:5c:ef:ab:ff:c5:
         f7:7c:0a:db:f6:a1:4b:d3:eb:77:b5:de:6b:71:0b:1f:fb:42:
         19:6e:c3:5b:9f:df:e1:a3:2d:e0:42:c0:9d:9a:08:de:3b:b0:
         cd:af:e0:df:88:c2:a7:22:dd:7d:0e:be:df:93:fe:e3:14:cf:
         e9:f1:0d:c7:c2:46:6b:2c:7e:ae:6d:2c:03:29:b7:a3:c7:54:
         ef:9d:bf:a3:5d:bc:17:3a:ea:5f:d8:5c:8f:ef:bf:d0:ce:be:
         3c:7f:12:35:42:bc:de:da:2d:25:cc:03:d4:08:8e:8a:76:1b:
         c5:b7:3b:48:86:ee:bc:86:51:cf:6d:99:47:33:7e:4a:93:6f:
         e8:6b:cf:da:5f:ee:dc:34:d8:97:9f:3e:ed:06:4c:87:d1:00:
         b8:a3:54:a1:ed:b4:58:6d:25:98:2a:c1:41:ea:76:60:b4:19:
         5d:20:b6:3a:fc:a3:27:47:04:32:69:1e:ba:2a:67:0f:66:bd:
         65:42:02:b0:c0:8b:bc:8f:a6:b2:63:94:ff:5b:30:1b:c3:32:
         fa:49:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:56:12 2026 by rpki-client