Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33322d3332203d3e20323733363631.roa
File:                     323830343a386135303a3a2f33322d3332203d3e20323733363631.roa (raw, json)
Hash identifier:          BS1k0/BF5jesyPqvtXqdKEEUlJ0D5D9Lg8oH74+D/TU=
Subject key identifier:   1E:47:09:BC:C1:B9:46:97:09:53:F8:36:57:5E:D5:DD:8B:E1:50:3B
Certificate issuer:       /CN=EC16989271AECFBCCDD833A215EAEB55D69686C3
Certificate serial:       7D4D8454D308948698EAFDA7B1FC8F9CFB695B5F
Authority key identifier: EC:16:98:92:71:AE:CF:BC:CD:D8:33:A2:15:EA:EB:55:D6:96:86:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC16989271AECFBCCDD833A215EAEB55D69686C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33322d3332203d3e20323733363631.roa
Signing time:             Fri 08 May 2026 18:31:16 +0000
ROA not before:           Fri 08 May 2026 18:26:16 +0000
ROA not after:            Fri 07 May 2027 18:31:16 +0000
asID:                     273661
IP address blocks:        2804:8a50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/EC16989271AECFBCCDD833A215EAEB55D69686C3.crl
                          rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/EC16989271AECFBCCDD833A215EAEB55D69686C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC16989271AECFBCCDD833A215EAEB55D69686C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4d:84:54:d3:08:94:86:98:ea:fd:a7:b1:fc:8f:9c:fb:69:5b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC16989271AECFBCCDD833A215EAEB55D69686C3
        Validity
            Not Before: May  8 18:26:16 2026 GMT
            Not After : May  7 18:31:16 2027 GMT
        Subject: CN=1E4709BCC1B946970953F836575ED5DD8BE1503B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f8:34:4d:b3:1f:95:31:52:20:80:b7:31:69:
                    ed:18:dd:df:5c:e0:67:34:41:f2:39:07:26:30:82:
                    aa:95:aa:6c:7a:5f:fe:e2:da:fe:0a:f8:46:bc:cd:
                    92:75:36:46:08:ab:47:14:a0:3d:95:65:9d:f1:f1:
                    3d:d7:f2:ac:fa:78:df:a3:aa:b2:dc:12:c1:c0:29:
                    5a:3b:74:e8:15:f3:c7:14:a2:37:1d:c9:42:92:53:
                    2c:5e:b6:14:ea:93:cc:3f:59:8a:ec:57:39:2f:f0:
                    db:3d:ed:9f:c7:e3:af:51:f0:e7:aa:43:ac:29:f2:
                    50:33:f2:9e:04:0a:7e:a0:ab:9b:12:87:cf:50:c8:
                    43:a3:a6:71:8a:54:23:88:4b:59:7b:4f:cc:78:6a:
                    02:5d:b0:3a:c5:52:b5:c2:8d:75:bb:7e:78:f4:ef:
                    21:3a:4f:9a:64:ca:68:74:ec:52:06:77:08:75:c4:
                    ab:1a:88:25:6c:22:c6:73:6c:d8:c5:5c:fb:fb:d5:
                    a0:74:35:e5:fc:d4:85:18:0b:68:fb:88:84:ab:09:
                    06:e2:35:b4:1b:1f:31:94:1f:f0:6c:11:1b:ad:d7:
                    f3:c9:07:ee:0e:55:8a:fb:4e:dd:6c:aa:c5:a5:a6:
                    bd:3f:5d:6f:49:2f:1b:e2:d1:bc:17:6c:91:fb:b0:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:47:09:BC:C1:B9:46:97:09:53:F8:36:57:5E:D5:DD:8B:E1:50:3B
            X509v3 Authority Key Identifier:
                keyid:EC:16:98:92:71:AE:CF:BC:CD:D8:33:A2:15:EA:EB:55:D6:96:86:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/EC16989271AECFBCCDD833A215EAEB55D69686C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC16989271AECFBCCDD833A215EAEB55D69686C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33322d3332203d3e20323733363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:3f:77:e8:f7:2d:75:a3:6a:6b:5b:f7:d3:2d:d5:33:13:
         1b:e3:16:e2:be:81:aa:5e:54:74:9f:5f:cf:de:e7:19:33:35:
         5b:5b:f9:20:b9:57:84:ab:76:21:33:e8:73:c6:31:b3:87:ba:
         2a:b8:75:16:d8:35:74:13:d6:c9:e3:3a:c7:ba:b7:33:a1:cd:
         86:49:de:fe:ba:8b:9d:8e:7a:64:21:cc:f9:41:7a:8d:3d:1d:
         db:00:a7:8a:77:81:46:3c:df:b2:14:7f:f3:69:1f:a8:52:36:
         2a:7c:e9:27:2b:ae:b5:46:05:cb:bc:50:50:0e:31:73:c6:b5:
         78:a0:d5:48:9d:8d:91:05:f5:39:33:b4:c7:e8:ba:1d:8a:25:
         7a:08:21:5a:eb:c1:df:5b:ad:15:9c:0a:76:22:84:b7:ab:32:
         d2:7e:ed:fd:98:a0:32:df:81:95:f8:c2:db:6c:73:ee:3d:de:
         3b:ef:a9:a0:6c:39:a9:fd:49:db:fb:66:24:04:17:70:28:27:
         dd:9b:5c:0e:bc:07:2e:09:c2:38:5d:01:cd:52:3f:59:ee:4f:
         b1:7c:69:d8:7d:a6:83:6f:ac:d9:22:7f:2e:5c:ae:db:6a:75:
         92:8e:01:32:27:ee:64:a3:d6:3a:77:d6:a3:2f:41:cb:4a:94:
         8e:77:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:32:17 2026 by rpki-client