Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa
File:                     323830343a373337303a3a2f33322d313238203d3e20323730393135.roa (raw, json)
Hash identifier:          98cqXdcboGIRYOBebQeZLklY/KZu5Hn6/f5lyPYNVbU=
Subject key identifier:   63:B1:0B:26:2C:32:E3:8E:DD:AE:79:A5:E4:A9:B4:D6:0C:84:37:A6
Certificate issuer:       /CN=C937518393EB538612A5266582E32D1178E5D342
Certificate serial:       125B329D2AEBC63C11A703F8A6DE7D4793292FA7
Authority key identifier: C9:37:51:83:93:EB:53:86:12:A5:26:65:82:E3:2D:11:78:E5:D3:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C937518393EB538612A5266582E32D1178E5D342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa
Signing time:             Thu 07 May 2026 14:03:35 +0000
ROA not before:           Thu 07 May 2026 13:58:35 +0000
ROA not after:            Thu 06 May 2027 14:03:35 +0000
asID:                     270915
IP address blocks:        2804:7370::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/C937518393EB538612A5266582E32D1178E5D342.crl
                          rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/C937518393EB538612A5266582E32D1178E5D342.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C937518393EB538612A5266582E32D1178E5D342.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5b:32:9d:2a:eb:c6:3c:11:a7:03:f8:a6:de:7d:47:93:29:2f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C937518393EB538612A5266582E32D1178E5D342
        Validity
            Not Before: May  7 13:58:35 2026 GMT
            Not After : May  6 14:03:35 2027 GMT
        Subject: CN=63B10B262C32E38EDDAE79A5E4A9B4D60C8437A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:f3:bf:6b:03:e6:39:8b:dd:bc:c8:c2:c7:
                    80:4b:26:fb:bd:87:db:54:be:f5:78:49:d3:0d:1e:
                    65:3c:92:34:33:08:93:15:f3:6d:08:5a:bb:37:d7:
                    eb:57:39:39:96:a8:a8:9c:23:7a:c9:ae:db:11:a7:
                    74:b1:9b:3e:0d:dd:09:e4:60:c6:23:5d:95:4a:25:
                    af:fc:e6:9a:c6:7b:64:bb:94:79:8f:e1:80:b0:0a:
                    8b:62:3b:9b:b0:c4:2a:68:db:15:11:29:56:1e:d4:
                    fc:55:27:f3:49:51:e5:b9:8f:85:d6:e4:1a:21:fd:
                    a7:b3:88:a3:40:bd:ab:d9:5a:c2:bc:6d:11:8a:68:
                    e0:7f:53:60:5e:8c:ff:72:ad:cf:81:d3:8c:26:97:
                    4c:fc:99:01:59:58:36:5f:c5:ec:30:69:15:ed:4b:
                    ad:5e:86:9f:a7:af:c1:69:8b:db:c1:8f:d7:73:d6:
                    d7:cc:4f:1f:38:dd:8e:19:f0:3f:42:c4:bc:d1:e8:
                    e3:13:18:66:90:ee:6f:6e:53:50:96:c7:60:34:d7:
                    c3:0f:55:52:c1:d9:26:b5:3c:04:75:e2:83:08:23:
                    13:4f:86:b2:fe:cc:f8:7f:87:15:76:96:d5:74:01:
                    f2:6e:48:1b:d2:66:32:28:08:16:7d:b0:24:bc:5b:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B1:0B:26:2C:32:E3:8E:DD:AE:79:A5:E4:A9:B4:D6:0C:84:37:A6
            X509v3 Authority Key Identifier:
                keyid:C9:37:51:83:93:EB:53:86:12:A5:26:65:82:E3:2D:11:78:E5:D3:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/C937518393EB538612A5266582E32D1178E5D342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C937518393EB538612A5266582E32D1178E5D342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7370::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:c2:d4:3e:30:2b:35:68:7b:85:eb:92:71:52:40:78:9e:f1:
         bd:88:ab:4a:27:a4:26:91:6d:ce:39:c9:86:9a:86:a8:2a:6f:
         07:bc:e2:29:5d:a8:96:47:d9:dc:ee:32:52:a5:38:b4:6f:12:
         fd:4d:9e:bd:dc:f7:ae:88:25:ad:29:69:d3:91:93:25:63:81:
         5b:30:3f:d1:65:39:f1:86:67:21:77:e3:7b:74:d5:c9:1b:2d:
         3b:0f:a3:20:5b:73:be:df:52:07:a4:fb:f3:da:4b:67:25:43:
         63:f9:7d:c1:2f:db:3b:59:a1:f8:fa:80:d2:da:aa:03:0b:df:
         b0:39:5e:25:f5:1a:88:c0:84:e8:5f:da:22:26:fb:b9:2e:08:
         50:8f:ef:c3:68:e7:34:59:e9:ab:19:17:39:4e:11:93:64:cd:
         6e:8a:0e:b5:67:fa:ed:c0:06:a4:92:3b:83:df:6c:e6:ea:b1:
         0c:26:48:e3:2e:2d:f7:49:6e:eb:c8:b1:bf:04:23:ef:b3:11:
         b9:42:2b:2f:5c:fc:42:79:60:a8:e3:6c:2f:32:12:a1:3c:f0:
         78:17:f2:d1:27:59:4b:d8:8b:b1:71:e9:ff:43:24:8b:c1:34:
         bd:98:70:4c:9e:bc:aa:1a:9b:f2:bd:01:b8:a3:1f:f2:c0:89:
         c4:7a:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:49:10 2026 by rpki-client