Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33332d3333203d3e20323638363738.roa
File:                     323830343a353465633a3a2f33332d3333203d3e20323638363738.roa (raw, json)
Hash identifier:          1CXkZ1IBQHew1DRFYR0OXTrJICg8z6pn7Dv/24/55Mc=
Subject key identifier:   29:E5:E7:74:70:B8:94:0B:AB:14:D5:94:9C:AA:DE:27:72:D8:92:12
Certificate issuer:       /CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
Certificate serial:       30589DA0A34778B80CB7A6BAC610B7C22D48D4FE
Authority key identifier: 13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33332d3333203d3e20323638363738.roa
Signing time:             Tue 05 May 2026 13:56:13 +0000
ROA not before:           Tue 05 May 2026 13:51:13 +0000
ROA not after:            Tue 04 May 2027 13:56:13 +0000
asID:                     268678
IP address blocks:        2804:54ec::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 May 2026 18:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:58:9d:a0:a3:47:78:b8:0c:b7:a6:ba:c6:10:b7:c2:2d:48:d4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
        Validity
            Not Before: May  5 13:51:13 2026 GMT
            Not After : May  4 13:56:13 2027 GMT
        Subject: CN=29E5E77470B8940BAB14D5949CAADE2772D89212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:0a:da:ce:71:a8:de:40:a5:a2:5d:b9:2c:
                    6c:a1:68:d4:cc:85:6f:7c:33:81:31:3e:e9:0c:9b:
                    35:5d:92:78:dd:a3:4e:c3:bf:f8:54:57:03:d4:af:
                    b6:b9:6d:db:4f:70:27:7e:33:51:79:b8:02:90:0a:
                    79:25:e6:fa:2d:16:06:ae:be:d8:34:4f:68:13:28:
                    e6:32:00:7e:32:d2:22:3c:0b:1e:3a:0e:7f:a0:90:
                    ff:38:c1:26:24:5e:13:1a:da:59:76:9f:a3:a0:d8:
                    e2:35:7c:4f:87:a4:96:54:f2:38:de:af:b4:b6:fa:
                    00:a3:ca:e3:d6:c2:3c:88:c7:a4:ae:32:1a:94:f6:
                    b0:75:0b:ad:d1:81:e6:81:52:9f:87:99:0d:e1:ea:
                    8f:1d:c4:01:b9:e0:3a:87:fa:af:99:3e:4b:a3:90:
                    70:a1:2b:5c:0e:52:63:2d:71:38:49:7e:5d:7a:47:
                    ea:37:6b:d1:d5:95:43:3b:b6:16:53:10:9b:1f:b8:
                    af:74:a8:19:2c:fa:34:4a:e3:3d:50:a2:c6:b6:4a:
                    02:b2:e7:f4:31:67:ff:05:d9:3e:8b:f2:be:85:bf:
                    1c:8b:e4:c7:06:48:bb:38:a6:b7:74:84:50:9d:f9:
                    4f:00:be:6c:26:d9:9e:8f:d9:bd:d5:0e:63:4d:68:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E5:E7:74:70:B8:94:0B:AB:14:D5:94:9C:AA:DE:27:72:D8:92:12
            X509v3 Authority Key Identifier:
                keyid:13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33332d3333203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:86:2b:b7:53:d5:e7:4a:49:1b:56:5d:f7:a9:d8:43:83:f3:
         d4:b9:4f:d2:85:7c:06:f4:cd:4f:ba:94:a8:f3:fd:48:99:1d:
         61:07:f9:5f:d5:5c:15:48:55:9f:e3:a1:f3:72:c1:08:fb:8e:
         d7:43:42:99:bd:8d:b2:06:cf:6e:8a:0f:29:ef:a6:2f:8c:b4:
         51:52:f4:39:4b:3d:61:4f:19:f1:25:ed:38:e6:53:f3:ce:eb:
         f4:ee:ea:a8:e6:75:69:c0:dc:9e:fe:3a:22:2b:c5:bc:68:b7:
         08:1c:45:52:c1:2b:61:7f:7b:5f:21:33:89:bd:06:f5:0d:e4:
         25:92:db:a3:89:a4:6c:ab:0c:44:4e:a5:4a:0b:8e:03:e6:dd:
         29:01:ae:6c:44:a9:e9:f5:ee:d2:89:df:d7:72:1e:17:ec:5c:
         d9:08:83:9b:f1:17:a5:c7:b4:22:f2:6e:d9:7a:1d:6a:a0:56:
         0c:bd:10:0c:42:94:56:f9:be:a8:fe:ad:ac:71:22:64:07:2b:
         4f:bf:fe:74:2e:3b:3c:5b:1e:44:d0:e1:9b:ac:12:1e:70:83:
         71:f6:9b:cd:88:e3:3f:02:bc:97:8f:5c:83:5c:72:eb:24:c0:
         e5:b9:37:e4:89:ff:ab:3c:70:77:4e:ff:b5:af:91:32:db:0b:
         b6:bf:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:26:42 2026 by rpki-client