Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa
File:                     323830343a386338383a3a2f33322d3438203d3e20323733333131.roa (raw, json)
Hash identifier:          xS4F0eS2C4/VxjsLEn53JECJIhj1kjrsztDbsMXdoIs=
Subject key identifier:   2F:86:BB:48:33:6D:F4:F9:08:B3:FE:EE:0E:6B:9C:6A:ED:A0:44:B5
Certificate issuer:       /CN=7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC
Certificate serial:       5DFEC7C9E5FC19C1FF3513D7804553592CF815ED
Authority key identifier: 7C:AC:37:E6:C6:FC:F7:5A:76:DF:74:19:7F:7A:73:55:E0:CF:B0:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa
Signing time:             Mon 09 Mar 2026 16:44:01 +0000
ROA not before:           Mon 09 Mar 2026 16:39:01 +0000
ROA not after:            Mon 08 Mar 2027 16:44:01 +0000
asID:                     273311
IP address blocks:        2804:8c88::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.crl
                          rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fe:c7:c9:e5:fc:19:c1:ff:35:13:d7:80:45:53:59:2c:f8:15:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC
        Validity
            Not Before: Mar  9 16:39:01 2026 GMT
            Not After : Mar  8 16:44:01 2027 GMT
        Subject: CN=2F86BB48336DF4F908B3FEEE0E6B9C6AEDA044B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:8b:27:ad:73:41:f4:56:cb:04:33:a6:0f:
                    c6:e5:c2:b1:a5:c1:50:f8:2c:82:56:4f:70:8b:df:
                    a5:5f:ec:8c:b9:3e:a3:74:de:2e:e4:80:9b:07:b0:
                    a5:7c:18:53:14:cb:28:d7:16:ab:f7:93:f2:26:db:
                    c5:bd:3e:30:78:a2:4d:09:8d:18:6a:98:b6:15:64:
                    19:65:b5:3d:27:93:03:df:cb:1d:44:fa:ba:06:0a:
                    25:bc:f7:e3:b2:a7:57:e5:ee:18:c2:2b:18:16:7a:
                    c9:19:f5:1b:95:3a:f0:48:f3:4e:08:39:85:56:83:
                    3e:24:db:92:ab:2b:84:ad:21:95:b0:a3:0e:a3:90:
                    63:b7:14:41:63:0d:64:48:14:cf:94:1d:7f:c6:9d:
                    14:d1:ea:70:a6:28:3e:69:6c:ce:f3:e7:ba:4f:7e:
                    12:90:f9:ac:cc:7e:90:bf:24:6a:a3:3c:57:a9:68:
                    d6:d6:f0:0c:5c:0f:94:d0:20:51:02:03:a8:0c:fe:
                    ca:2e:2d:9b:4b:38:0a:b6:11:2b:a7:9d:f9:0d:d3:
                    fa:fc:a1:af:f1:5f:fa:f5:1d:4b:ed:2a:ff:87:1b:
                    50:8d:5d:54:c0:30:91:f2:26:f9:49:34:02:a7:d6:
                    8c:ca:f8:d8:d1:c2:c8:5b:ff:7d:40:11:b0:2f:07:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:BB:48:33:6D:F4:F9:08:B3:FE:EE:0E:6B:9C:6A:ED:A0:44:B5
            X509v3 Authority Key Identifier:
                keyid:7C:AC:37:E6:C6:FC:F7:5A:76:DF:74:19:7F:7A:73:55:E0:CF:B0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:c5:59:0a:f5:7c:49:a3:be:30:78:fd:c5:c3:64:0f:18:
         13:c1:57:c1:5a:46:c1:dc:eb:76:61:ef:d0:3b:10:dc:c9:e6:
         54:be:a0:e2:cd:e5:70:33:bb:ea:cb:8d:70:13:c6:8e:4a:40:
         84:b8:0e:bc:07:77:ad:d4:a1:6b:4a:3e:ef:27:b3:01:c1:40:
         ad:2d:cd:74:e2:b0:ae:63:39:ae:d2:80:44:1f:14:9a:0c:19:
         3e:5d:74:83:20:10:15:98:bd:48:ec:f4:e0:9e:d9:ff:dc:82:
         c7:a7:15:11:43:06:b5:2d:1a:e7:4f:92:cf:71:1d:d9:fe:4d:
         fb:3a:91:11:22:29:e9:e2:28:8a:78:00:34:85:c3:45:a2:46:
         57:fb:28:4c:21:7a:86:dc:f6:a3:4e:b4:02:67:75:1c:56:97:
         37:6a:5f:e9:5c:ec:6e:d0:bc:56:99:05:7d:47:80:ed:aa:93:
         aa:ba:d5:c9:a0:10:cd:dd:63:b8:51:5d:13:67:34:ea:dc:bf:
         ff:8f:b5:66:84:e7:b3:2e:22:bd:95:66:25:ed:05:a2:3f:db:
         d7:0a:89:ca:a2:28:fc:42:6a:33:a9:c0:28:24:fb:2c:85:14:
         16:7e:6f:3b:a6:b0:3f:a1:ee:82:5f:57:e4:6d:eb:53:50:0c:
         82:0c:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:19 2026 by rpki-client