Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          QUYQcw6PvrRlw1xmvZmfspnhittUDW6nCmSu6uj3Fak=
Subject key identifier:   F5:29:BC:25:24:03:55:4E:81:B3:8F:CC:BE:29:B2:2A:0E:02:F6:0B
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       4CE991A0A8AD7A5C540320A35BD70CC4C7F00131
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 17 Mar 2026 19:11:43 +0000
ROA not before:           Tue 17 Mar 2026 19:06:43 +0000
ROA not after:            Tue 16 Mar 2027 19:11:43 +0000
asID:                     61923
IP address blocks:        2804:1834::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e9:91:a0:a8:ad:7a:5c:54:03:20:a3:5b:d7:0c:c4:c7:f0:01:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 17 19:06:43 2026 GMT
            Not After : Mar 16 19:11:43 2027 GMT
        Subject: CN=F529BC252403554E81B38FCCBE29B22A0E02F60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:8f:87:20:a6:26:8a:78:e0:87:f3:59:96:
                    bc:08:a8:12:f5:49:94:28:23:50:d6:57:ac:6f:30:
                    82:f4:ec:54:e3:fe:cd:84:ac:d4:53:38:c2:77:0e:
                    0b:e5:3a:89:d4:63:83:37:a3:2d:ad:4e:97:7f:0d:
                    96:99:77:73:81:95:51:e0:bd:2f:98:10:62:1c:b2:
                    d3:f7:34:8b:49:06:92:80:39:a4:4e:dd:17:7a:06:
                    31:29:62:66:bf:43:f1:fe:70:7c:d9:a4:ab:71:e5:
                    a0:b8:e6:ba:28:7a:c9:fc:b0:a0:d8:cb:74:59:89:
                    c3:79:39:3c:a4:48:44:7f:36:fe:63:9a:18:e1:13:
                    ed:37:ec:67:3e:94:6c:3b:6a:5e:90:dd:20:92:d6:
                    7b:47:b5:57:e6:d5:76:69:8d:45:32:a3:b1:a6:81:
                    0a:a3:36:fe:d5:1e:7e:2d:e4:a3:8f:b0:1e:e5:26:
                    65:ac:be:2b:e9:17:54:1d:9e:b2:7f:8e:d8:f9:4e:
                    ca:98:6d:97:e2:fb:cc:e1:e6:e1:9f:61:ff:ef:7b:
                    12:e9:86:a8:9b:38:c0:30:61:bd:b7:cf:c3:41:cf:
                    f9:50:cf:c6:33:96:b7:e5:0e:08:e0:a2:cf:ba:6f:
                    8d:db:c3:ae:af:54:00:7f:d6:ed:0a:44:57:ef:c0:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:29:BC:25:24:03:55:4E:81:B3:8F:CC:BE:29:B2:2A:0E:02:F6:0B
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:c1:ef:ec:e4:46:2f:4a:78:a6:aa:94:b8:93:18:10:fb:
         a8:eb:0e:8e:28:8d:96:4f:a0:09:0c:dd:f9:34:33:a1:22:3c:
         f6:05:f9:8d:b7:f7:0f:4e:dc:d4:6a:4a:72:4a:67:aa:05:fe:
         e8:f6:bb:22:9c:61:ee:d7:25:f0:31:31:29:ed:ad:56:c1:32:
         e4:e2:1f:09:91:d4:ea:f8:10:b7:91:b1:f7:eb:46:60:0a:d7:
         17:2e:27:6d:fe:4b:7f:eb:49:67:01:10:23:ea:12:50:c4:25:
         ff:6b:12:d8:b3:3b:04:60:39:f8:c0:e5:1b:b0:43:7b:32:e4:
         0f:5d:a4:3b:f5:80:00:d0:2b:db:cb:ec:ce:4e:7f:82:72:d1:
         0e:22:9f:e3:85:ac:bd:e1:39:6d:bc:f9:bd:88:f0:c8:1f:1e:
         62:83:3d:d0:2d:dd:bd:e9:4d:32:03:ac:d4:ce:e6:38:6d:49:
         fd:09:1c:9a:ad:a3:8f:40:67:46:d5:05:bf:cb:59:17:07:1a:
         26:98:b1:e3:49:2f:18:60:34:3f:4a:ee:9c:8d:86:a2:44:d5:
         30:10:61:b1:b3:4c:ba:f7:aa:81:d7:a7:75:04:c3:9a:95:07:
         f9:57:b6:0c:d2:c9:b4:8d:c4:bd:9b:c2:3b:db:12:14:8a:ab:
         6e:28:db:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:15:17 2026 by rpki-client