Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a383030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a383030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          TDOfdfC5AcMnoUWP32r4bxW2zk9ni6jAZkHZeAnJAkA=
Subject key identifier:   3C:95:F4:35:96:EC:38:56:CF:51:D1:A4:71:EE:1D:EA:8B:94:D1:B0
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       749D4F8FB9893AFB5ADE2074C572F21E7F56682E
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a383030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 17 Mar 2026 19:11:45 +0000
ROA not before:           Tue 17 Mar 2026 19:06:45 +0000
ROA not after:            Tue 16 Mar 2027 19:11:45 +0000
asID:                     61923
IP address blocks:        2804:1834:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9d:4f:8f:b9:89:3a:fb:5a:de:20:74:c5:72:f2:1e:7f:56:68:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 17 19:06:45 2026 GMT
            Not After : Mar 16 19:11:45 2027 GMT
        Subject: CN=3C95F43596EC3856CF51D1A471EE1DEA8B94D1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:39:88:56:bf:1b:fd:d6:83:77:ee:82:e1:
                    a6:f0:aa:72:6f:e8:70:86:11:41:e5:4a:6e:3e:4e:
                    b8:4c:31:e1:68:8f:07:ee:6c:40:a7:b1:79:b8:4b:
                    79:2c:0a:71:f3:47:d9:b0:57:20:90:c6:9e:a0:ff:
                    9b:6f:43:31:d0:8f:18:ec:62:38:14:4b:a8:8b:b9:
                    ff:9a:0e:3a:b1:ec:0d:a7:73:d0:6e:4a:3a:4d:21:
                    b1:6f:86:e6:e3:23:97:f8:6b:9c:30:34:0f:92:a7:
                    9a:1f:b6:9b:ea:97:86:b1:e4:a3:df:c5:cb:64:f1:
                    83:7b:78:c3:7a:21:3d:8d:b7:42:95:f1:a4:57:2c:
                    39:de:8e:2a:2d:8d:eb:41:4d:d7:94:b8:81:1f:25:
                    b8:a9:ef:5f:fe:73:56:b6:d9:c8:03:cb:9f:bc:47:
                    ef:5e:57:5c:07:41:d1:e6:3c:9f:8d:8c:fb:48:26:
                    f1:85:5f:84:da:d2:c6:33:f7:cd:cc:85:75:a9:6d:
                    6f:0f:ff:41:d7:41:2a:12:48:7f:d1:f7:02:70:41:
                    80:cd:01:c6:e5:ee:8b:05:39:b6:cc:da:ce:d3:08:
                    6b:55:15:16:7e:97:f1:87:9d:c5:3f:0e:06:7f:87:
                    b4:83:63:15:52:08:72:77:21:7e:88:f4:09:80:b5:
                    85:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:F4:35:96:EC:38:56:CF:51:D1:A4:71:EE:1D:EA:8B:94:D1:B0
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a383030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:0b:6f:72:4b:14:78:14:b0:be:f1:84:27:b3:b0:95:f4:
         f6:8e:50:23:1b:a5:a6:7f:d9:02:54:4d:b5:2d:30:b0:06:2d:
         65:92:da:d4:14:1c:8c:8a:25:c3:80:ca:59:70:29:b5:8f:eb:
         22:a3:18:11:d2:98:cf:4a:03:d6:e8:8a:9a:c1:53:89:f0:29:
         89:84:35:c3:03:ee:15:dc:35:a2:8b:f9:b4:6b:cc:ff:9c:97:
         d9:7f:28:8b:75:82:f9:17:eb:a8:c5:da:44:c0:a6:8a:72:d2:
         65:6e:48:e8:23:3e:27:3d:aa:63:f8:0a:3c:26:c4:96:75:c4:
         3e:82:35:eb:b8:6a:2a:84:56:29:cd:55:4b:e1:49:1d:81:9b:
         3a:ac:ec:03:27:8a:d3:6e:fd:ec:9d:76:3a:ac:d2:17:18:8d:
         c2:18:ad:48:3d:1d:25:ef:8e:3b:58:b0:dd:c0:ab:82:5b:23:
         57:c5:b9:70:07:dd:f4:c0:ea:77:48:27:ed:33:91:1a:07:dd:
         e1:6e:b8:e3:d4:74:9a:31:06:04:38:85:64:2f:bc:c6:ef:65:
         0d:d4:cf:01:41:8c:3f:42:7e:93:27:dc:0b:25:c9:bd:81:53:
         83:e4:e4:69:92:8a:bc:38:3e:32:dc:53:2f:1e:4c:2c:80:d3:
         c9:3f:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:54:23 2026 by rpki-client