Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32332d3233203d3e20323731323430.roa
File:                     3137392e34382e34382e302f32332d3233203d3e20323731323430.roa (raw, json)
Hash identifier:          LgaBDNtKRE/f2ZLFyzAfdSzK4gge+c2OsCfDk8hyCas=
Subject key identifier:   2D:3F:6A:77:7C:CC:38:FD:70:6D:3B:76:E1:62:10:04:73:2A:26:92
Certificate issuer:       /CN=FAA40B03A41A50E038CADE96AD798F2AFB27B32A
Certificate serial:       45DF16EDD936C3A5568250DCA742D562E8DBAC28
Authority key identifier: FA:A4:0B:03:A4:1A:50:E0:38:CA:DE:96:AD:79:8F:2A:FB:27:B3:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32332d3233203d3e20323731323430.roa
Signing time:             Mon 23 Mar 2026 14:02:22 +0000
ROA not before:           Mon 23 Mar 2026 13:57:22 +0000
ROA not after:            Mon 22 Mar 2027 14:02:22 +0000
asID:                     271240
IP address blocks:        179.48.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.crl
                          rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:df:16:ed:d9:36:c3:a5:56:82:50:dc:a7:42:d5:62:e8:db:ac:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA40B03A41A50E038CADE96AD798F2AFB27B32A
        Validity
            Not Before: Mar 23 13:57:22 2026 GMT
            Not After : Mar 22 14:02:22 2027 GMT
        Subject: CN=2D3F6A777CCC38FD706D3B76E1621004732A2692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:71:d5:2f:c6:54:f5:a2:1c:40:4d:ef:79:
                    c6:c0:fb:30:e0:bf:d5:78:fc:85:67:79:2b:0d:b2:
                    c8:fa:50:4e:35:ce:ce:73:f6:e7:d6:92:ca:ba:17:
                    9a:a4:d3:5e:6d:99:2f:ed:54:62:a9:b3:8e:af:06:
                    9e:ee:5a:01:47:d6:a3:46:77:7c:b1:2f:8e:79:e0:
                    39:fb:c2:d5:a3:31:5e:b5:bb:16:5b:1d:32:7d:5e:
                    97:77:69:70:e8:de:57:ab:6e:5a:cd:45:2b:1b:75:
                    c2:58:30:bd:24:1f:a5:50:c6:c7:ce:f9:9b:82:8b:
                    57:39:64:9b:ca:04:3d:4b:20:86:99:52:ac:ea:16:
                    68:fa:43:69:0e:a3:b5:2a:52:3d:86:dd:7e:fc:f0:
                    84:5e:a3:bb:79:f9:f0:3b:46:63:52:a4:7c:88:e6:
                    e1:cb:95:f8:2e:34:1c:e8:ee:4e:95:8f:de:48:76:
                    4a:3e:74:a0:52:4b:f0:0a:6a:91:19:51:1c:26:06:
                    46:b6:3f:6a:c5:3a:5a:03:de:4b:de:32:1c:25:d8:
                    03:d2:0d:ba:25:09:b0:47:7c:bf:29:3c:c0:8f:17:
                    50:bd:d5:3a:46:29:d7:ee:44:22:ad:17:70:83:57:
                    b8:00:b3:2a:e4:06:c7:60:6f:82:22:63:4d:e2:14:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3F:6A:77:7C:CC:38:FD:70:6D:3B:76:E1:62:10:04:73:2A:26:92
            X509v3 Authority Key Identifier:
                keyid:FA:A4:0B:03:A4:1A:50:E0:38:CA:DE:96:AD:79:8F:2A:FB:27:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA40B03A41A50E038CADE96AD798F2AFB27B32A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32332d3233203d3e20323731323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:9d:ac:a9:12:64:a6:25:e3:06:34:8b:78:e3:de:ff:b3:6c:
         65:d5:b2:21:ea:8f:a6:e2:87:e7:dd:58:e7:10:6b:01:1b:a4:
         de:5c:13:86:65:42:86:05:85:21:7b:33:d7:a4:56:75:d4:f7:
         44:06:19:cd:d0:1c:67:84:02:f8:b4:d4:65:9a:12:8c:b8:09:
         ce:73:56:69:fa:a6:50:d1:29:51:ce:e7:e5:94:92:56:82:9e:
         02:c0:3e:d8:c4:17:0e:5f:dc:50:ee:c0:5d:d9:69:71:03:82:
         d0:fe:f0:99:a0:00:ca:72:af:ee:25:e8:83:3e:dc:86:26:81:
         dd:32:57:49:c5:9d:e0:04:8a:1a:3f:32:9f:36:d4:e5:ff:21:
         15:9c:09:5b:9f:c0:dc:38:9b:06:07:3e:24:32:80:1d:f2:19:
         f7:d0:8d:31:99:b3:a0:b6:7c:3b:a6:1b:6e:c4:92:bf:1c:8f:
         03:e5:8a:09:6c:45:b5:bc:f6:7b:03:13:50:8d:65:0d:41:f7:
         b6:bc:f5:d3:d0:31:04:73:88:a3:f0:1f:13:de:93:6a:2e:6a:
         18:78:c4:7b:81:bd:1f:14:64:79:73:a5:9d:e9:01:48:42:3e:
         5d:ee:f4:ee:d1:50:ea:69:2a:8f:7c:3c:90:24:5f:af:37:b0:
         f7:15:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:23:53 2026 by rpki-client