Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a333030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a333030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          WnC40A3ZZYO15P8O5pIe0P/YVSGNPThOhVth8IQgQHA=
Subject key identifier:   1E:8E:2C:D7:8C:E5:E3:D5:C3:4C:18:D8:1E:8F:95:DA:C3:F8:44:A9
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       4338B11DA7E6FEE22A3C2CD8DCDBFBA0986FE4EE
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a333030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 17 Mar 2026 19:11:43 +0000
ROA not before:           Tue 17 Mar 2026 19:06:43 +0000
ROA not after:            Tue 16 Mar 2027 19:11:43 +0000
asID:                     61923
IP address blocks:        2804:1834:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:38:b1:1d:a7:e6:fe:e2:2a:3c:2c:d8:dc:db:fb:a0:98:6f:e4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 17 19:06:43 2026 GMT
            Not After : Mar 16 19:11:43 2027 GMT
        Subject: CN=1E8E2CD78CE5E3D5C34C18D81E8F95DAC3F844A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:f9:d3:6d:5e:23:65:2b:c6:8e:11:6a:3a:
                    f3:29:61:c3:67:0b:4b:01:21:17:96:dc:ca:c7:56:
                    c1:13:de:fd:67:68:52:9f:75:71:24:2f:5b:4e:cd:
                    6f:80:b3:10:88:57:30:6a:db:b2:ab:6e:97:a3:ae:
                    4d:02:43:7f:c6:9a:e6:3a:bf:cb:ce:3a:98:35:5f:
                    a4:1c:5b:58:f0:ba:8a:ba:cf:88:71:62:8a:06:fd:
                    c3:be:f3:35:fa:ae:3f:3d:59:7a:da:e6:f1:24:6a:
                    08:1a:a3:a4:b9:d6:28:bb:b4:03:8d:de:51:24:55:
                    74:7a:11:75:65:26:f6:9a:a3:9b:69:66:57:67:18:
                    88:5c:cb:5c:08:db:9b:1b:d6:bc:7f:af:e7:6a:c0:
                    ce:98:0f:da:6c:c3:17:f2:c7:35:d5:6c:4e:e8:14:
                    ee:e0:c7:7e:21:2b:1d:35:19:b1:69:84:d2:04:ea:
                    4e:c5:be:e3:e0:d4:da:47:4d:9d:45:8f:ac:3b:fd:
                    c4:3b:50:67:f5:23:5b:ea:5f:eb:43:0f:c2:cb:5b:
                    b9:e3:5e:6a:d1:40:49:04:8a:22:ed:82:12:0e:bb:
                    b4:ee:a9:6d:1e:32:66:76:42:e5:dc:e9:71:eb:90:
                    5f:3c:03:06:45:66:aa:11:1d:be:c6:d5:d8:c8:57:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8E:2C:D7:8C:E5:E3:D5:C3:4C:18:D8:1E:8F:95:DA:C3:F8:44:A9
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a333030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:14:e7:b0:29:d7:31:9f:a2:fa:14:c4:9d:2b:bb:f3:5f:
         90:aa:65:aa:82:ee:ec:36:e2:b1:11:2a:ff:c6:1f:c3:ac:12:
         be:42:ed:eb:2e:c7:8a:19:a6:cf:a3:e4:12:83:30:92:58:39:
         82:3f:a9:0a:85:19:1b:9f:b1:83:7f:b7:31:11:ca:41:fb:51:
         ce:eb:68:5e:84:f9:09:52:66:d0:ea:83:5e:70:bc:a2:59:d8:
         ae:e7:d0:7d:45:81:50:52:32:38:95:14:c1:b3:b3:d5:c6:00:
         e7:20:0c:2a:ff:de:c6:1f:04:48:06:62:d4:4e:13:ab:f9:0b:
         34:ea:55:c4:da:8f:cd:5f:82:a5:1d:ca:1a:40:d4:9d:b5:06:
         63:40:1c:31:34:b7:38:93:f7:dc:bd:a3:13:04:55:b7:91:01:
         85:50:a3:62:db:0c:c5:c4:fc:05:cd:33:b7:b1:73:2c:4d:3d:
         c2:7e:8a:49:9d:39:6f:90:c6:09:33:18:f5:c6:4b:3c:90:63:
         85:39:2b:2f:aa:3c:96:2b:25:84:ac:32:bc:b5:5d:af:11:4c:
         88:53:a5:b3:5b:56:69:9c:c8:bc:ea:7d:78:b6:d5:00:dc:7a:
         ee:60:ad:9b:1e:74:ed:93:dc:da:36:53:4c:51:07:76:43:f0:
         e6:71:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:54:30 2026 by rpki-client