Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/323830343a366534343a3a2f33322d3430203d3e20323730353835.roa
File:                     323830343a366534343a3a2f33322d3430203d3e20323730353835.roa (raw, json)
Hash identifier:          lAzBJ1bMPuQJ9FbDEhYDUXPJBu66t7GW4c+CrUD6njM=
Subject key identifier:   05:DD:7F:B3:07:C9:30:FA:2C:7A:ED:8F:BA:CB:2D:A1:23:2D:D3:29
Certificate issuer:       /CN=8AA3F421F78BAA3CE733941452880E102D4611B2
Certificate serial:       7F893B26B8C0C7CBE039450819BD4C1F2A84F64D
Authority key identifier: 8A:A3:F4:21:F7:8B:AA:3C:E7:33:94:14:52:88:0E:10:2D:46:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA3F421F78BAA3CE733941452880E102D4611B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/323830343a366534343a3a2f33322d3430203d3e20323730353835.roa
Signing time:             Wed 22 Apr 2026 12:02:44 +0000
ROA not before:           Wed 22 Apr 2026 11:57:44 +0000
ROA not after:            Wed 21 Apr 2027 12:02:44 +0000
asID:                     270585
IP address blocks:        2804:6e44::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/8AA3F421F78BAA3CE733941452880E102D4611B2.crl
                          rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/8AA3F421F78BAA3CE733941452880E102D4611B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA3F421F78BAA3CE733941452880E102D4611B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:89:3b:26:b8:c0:c7:cb:e0:39:45:08:19:bd:4c:1f:2a:84:f6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AA3F421F78BAA3CE733941452880E102D4611B2
        Validity
            Not Before: Apr 22 11:57:44 2026 GMT
            Not After : Apr 21 12:02:44 2027 GMT
        Subject: CN=05DD7FB307C930FA2C7AED8FBACB2DA1232DD329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:74:4c:d6:38:80:71:2c:4e:cd:2f:46:11:
                    c1:60:a7:15:4f:9e:65:34:a2:65:28:4e:9d:ce:63:
                    09:f6:0c:5c:44:7f:a7:39:49:fa:df:e5:45:1b:84:
                    60:07:35:cd:b3:47:40:75:31:95:68:42:01:0a:e4:
                    4f:61:24:e6:fb:cc:d0:70:15:33:e9:15:9e:15:9a:
                    2d:ee:b1:fb:e2:60:d3:06:6f:19:02:71:3c:cf:ec:
                    b2:3d:d8:ac:24:05:88:9b:66:30:64:e1:c5:cd:b8:
                    00:7a:b6:48:98:05:30:66:49:ca:05:a1:68:ea:b4:
                    c2:be:d3:70:42:91:ab:dc:b5:48:a1:17:60:95:a9:
                    e6:26:a1:5d:c2:d5:d9:7a:fb:d5:e6:cf:44:83:8a:
                    67:a7:72:f6:c0:31:f9:ca:2c:bc:e2:e3:ef:e1:7e:
                    24:02:4d:22:77:02:a3:6d:fc:9c:1e:6b:d9:d0:ce:
                    01:af:94:d8:9d:df:9d:6d:e6:6c:51:72:e7:64:dc:
                    8c:ce:31:e0:cb:91:7a:f3:79:76:6f:50:f1:3e:88:
                    d4:c0:da:32:6e:79:cb:6a:a6:14:40:1f:b8:5e:a3:
                    4f:0e:7e:56:93:66:6a:b4:3b:33:ef:d0:af:30:b6:
                    69:a9:e0:f3:16:5f:60:3b:10:5e:5c:97:f5:9a:47:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DD:7F:B3:07:C9:30:FA:2C:7A:ED:8F:BA:CB:2D:A1:23:2D:D3:29
            X509v3 Authority Key Identifier:
                keyid:8A:A3:F4:21:F7:8B:AA:3C:E7:33:94:14:52:88:0E:10:2D:46:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/8AA3F421F78BAA3CE733941452880E102D4611B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA3F421F78BAA3CE733941452880E102D4611B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/323830343a366534343a3a2f33322d3430203d3e20323730353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:97:9b:3b:23:e3:17:d1:26:33:bf:a7:78:44:01:63:5c:
         8f:31:73:67:e0:f9:97:17:91:91:b2:67:86:06:a6:4a:d8:96:
         6a:c1:24:66:5a:e3:cf:ad:6b:0a:dc:c5:80:83:38:1a:41:39:
         85:b7:b2:02:91:de:2d:b3:30:0b:d4:f9:ad:90:04:29:3e:01:
         d5:1d:4a:82:23:f6:5a:87:bd:3b:cf:be:60:f9:89:8a:e1:dd:
         df:d9:59:2b:be:44:c2:a2:4f:26:1e:5f:2a:58:37:37:1e:a9:
         48:33:83:f2:19:68:2a:89:d1:3b:fd:1d:30:5c:0a:94:13:a6:
         6e:c5:a4:d9:f5:44:23:1a:0d:8f:b5:91:3e:8d:c6:e4:fd:b7:
         bf:4f:52:29:23:ff:ce:0c:7a:60:4c:f5:b3:1e:07:36:b0:6c:
         07:bb:c5:b0:b9:55:3a:ee:5e:21:c5:52:02:4b:b6:fb:87:5e:
         26:cd:b7:ad:cd:39:9f:c0:84:bb:29:06:0d:d7:96:4b:11:a0:
         60:99:ca:f6:3a:a3:99:59:5d:8f:b6:31:9a:de:54:c5:a3:5b:
         a4:0e:18:b7:f2:f1:74:1a:f4:4d:0d:dd:7d:3d:5d:3e:44:c1:
         96:fe:1d:ff:d8:44:bb:62:04:05:20:47:ec:87:f9:f1:ce:9b:
         aa:18:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:33:07 2026 by rpki-client