Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
File:                     323830343a356338383a3a2f33322d3332203d3e20323638393134.roa (raw, json)
Hash identifier:          aJHUv2nJ+/QmApnaEwgyox/NUHLXruks8sUFRQzaxhQ=
Subject key identifier:   5B:F0:EF:BE:1F:8E:66:8C:91:A0:CB:26:52:0B:1E:07:78:17:C5:EE
Certificate issuer:       /CN=AE9E4F2BB292A290BEF77B152F98994CF79B63AE
Certificate serial:       64783790CE2782BE03A567F08284DFEA8E42B269
Authority key identifier: AE:9E:4F:2B:B2:92:A2:90:BE:F7:7B:15:2F:98:99:4C:F7:9B:63:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
Signing time:             Mon 09 Mar 2026 22:02:48 +0000
ROA not before:           Mon 09 Mar 2026 21:57:48 +0000
ROA not after:            Mon 08 Mar 2027 22:02:48 +0000
asID:                     268914
IP address blocks:        2804:5c88::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:78:37:90:ce:27:82:be:03:a5:67:f0:82:84:df:ea:8e:42:b2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE9E4F2BB292A290BEF77B152F98994CF79B63AE
        Validity
            Not Before: Mar  9 21:57:48 2026 GMT
            Not After : Mar  8 22:02:48 2027 GMT
        Subject: CN=5BF0EFBE1F8E668C91A0CB26520B1E077817C5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:4b:da:80:68:fe:17:a3:6d:49:0d:d6:fd:
                    67:f7:89:d0:b7:b1:36:44:23:43:a6:76:aa:8b:68:
                    33:1c:01:c2:00:48:d1:ec:35:e2:0e:e0:02:c9:3f:
                    04:21:f5:40:4b:03:4e:e2:9a:6a:61:6b:34:d7:09:
                    27:6a:2a:ae:81:1d:8b:63:fb:55:92:5e:9a:76:a7:
                    4a:d9:26:22:ea:fe:51:1d:a4:78:a8:5e:91:15:38:
                    67:a5:90:cc:7b:11:5c:0c:fe:1c:b3:31:65:8a:96:
                    d8:9b:d5:fd:1b:ea:78:b6:14:de:a2:f0:83:65:01:
                    ea:9b:6c:6f:4f:7f:d5:0b:60:f4:5c:cc:e4:4d:9d:
                    75:02:61:79:0a:d8:12:f1:7e:45:b0:bc:ab:18:bc:
                    c0:6c:4d:0a:ea:d6:15:46:a5:db:46:29:21:aa:2a:
                    27:49:88:34:04:96:97:95:4d:6a:aa:84:91:83:b3:
                    72:19:c6:68:27:db:4e:a0:3a:76:f7:1b:ce:89:82:
                    8b:db:0c:a5:34:60:56:96:ed:99:db:96:79:4a:69:
                    46:6a:b1:aa:82:a4:c1:dd:ac:0a:ab:61:d2:aa:0f:
                    e0:b2:fd:23:b7:79:ad:ba:d2:89:9a:37:f2:ba:f6:
                    54:64:eb:88:b0:e4:6e:58:ed:c5:e1:95:f2:c7:83:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:EF:BE:1F:8E:66:8C:91:A0:CB:26:52:0B:1E:07:78:17:C5:EE
            X509v3 Authority Key Identifier:
                keyid:AE:9E:4F:2B:B2:92:A2:90:BE:F7:7B:15:2F:98:99:4C:F7:9B:63:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE9E4F2BB292A290BEF77B152F98994CF79B63AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/3/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:cb:6d:ab:9a:aa:b5:52:ca:46:62:3e:be:de:b3:c1:01:51:
         95:b8:74:84:9f:ed:15:6e:05:15:ae:e4:ba:1d:81:b5:4e:a3:
         6c:ca:ed:d7:6a:67:a0:43:36:06:99:f3:90:f7:23:2a:7c:e5:
         0a:dd:98:05:3b:73:fc:f0:2f:08:07:8c:54:50:66:45:6b:cd:
         27:eb:3a:26:8a:7a:3f:76:20:ff:2e:43:48:1f:cb:a9:3c:31:
         12:62:ed:9b:27:f5:4b:5d:ac:05:90:16:ad:e1:0b:3f:70:bb:
         db:f8:4e:63:79:64:af:8b:16:ed:dd:ba:a1:a6:d1:3b:13:80:
         3d:2f:05:fc:68:79:d3:11:2a:b4:65:65:c5:df:bd:ff:4c:53:
         f7:6f:d9:b0:e8:81:d2:40:51:bd:e5:48:7d:95:b3:7a:f6:78:
         73:90:d1:43:0a:51:94:5c:a1:5f:b1:72:f8:54:3e:4b:ed:d9:
         7d:61:4c:2f:c6:d9:b2:27:94:32:f3:cf:9b:c7:bb:3b:4b:b7:
         38:b2:69:75:fd:ef:0c:6d:fe:5d:2e:25:72:99:7d:b0:da:6f:
         89:86:5b:c2:95:02:41:3b:f6:3a:51:b2:8e:4d:7b:13:f4:2b:
         26:7f:8d:d3:85:d5:fc:7f:64:da:36:17:c3:0c:80:db:55:a3:
         45:51:e8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:22:11 2026 by rpki-client