Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65Y15QXb9K6uqwHbwkpmZfpFyjiEKbqHvYQnqFV6LGnR/0/323830313a38303a6664303a3a2f34382d3438203d3e20323634323936.roa
File:                     323830313a38303a6664303a3a2f34382d3438203d3e20323634323936.roa (raw, json)
Hash identifier:          r1xY1ZmoSInUPcYgOE3Dl25VuAZdUFNtxnCF1/8rYMY=
Subject key identifier:   33:D0:2B:AB:4E:B0:F8:87:A5:21:E4:9F:1B:1D:6D:90:C6:D3:3A:2D
Certificate issuer:       /CN=51779F64957B582C920AF1D197F4AFAA8086293A
Certificate serial:       1A603FF8C0C8EFCBDCC0D278F0A27D40E0C6A024
Authority key identifier: 51:77:9F:64:95:7B:58:2C:92:0A:F1:D1:97:F4:AF:AA:80:86:29:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51779F64957B582C920AF1D197F4AFAA8086293A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65Y15QXb9K6uqwHbwkpmZfpFyjiEKbqHvYQnqFV6LGnR/0/323830313a38303a6664303a3a2f34382d3438203d3e20323634323936.roa
Signing time:             Sun 22 Mar 2026 16:15:11 +0000
ROA not before:           Sun 22 Mar 2026 16:10:11 +0000
ROA not after:            Sun 21 Mar 2027 16:15:11 +0000
asID:                     264296
IP address blocks:        2801:80:fd0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65Y15QXb9K6uqwHbwkpmZfpFyjiEKbqHvYQnqFV6LGnR/0/51779F64957B582C920AF1D197F4AFAA8086293A.crl
                          rsync://rpki-repo.registro.br/repo/65Y15QXb9K6uqwHbwkpmZfpFyjiEKbqHvYQnqFV6LGnR/0/51779F64957B582C920AF1D197F4AFAA8086293A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51779F64957B582C920AF1D197F4AFAA8086293A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:60:3f:f8:c0:c8:ef:cb:dc:c0:d2:78:f0:a2:7d:40:e0:c6:a0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51779F64957B582C920AF1D197F4AFAA8086293A
        Validity
            Not Before: Mar 22 16:10:11 2026 GMT
            Not After : Mar 21 16:15:11 2027 GMT
        Subject: CN=33D02BAB4EB0F887A521E49F1B1D6D90C6D33A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:5f:24:77:a3:7c:82:40:74:01:28:48:1f:
                    ec:a6:8d:9b:e8:e2:de:63:e2:55:2d:29:3e:57:54:
                    a4:fd:8d:05:62:b7:9e:81:46:6a:11:9e:ca:d9:96:
                    c8:bb:d1:89:9d:d2:7a:78:11:56:5c:d4:29:c2:21:
                    59:86:ab:3e:c4:b4:5c:d5:54:ad:e5:03:68:3c:05:
                    7d:58:e4:07:e7:53:4e:9e:62:f2:67:b4:0e:85:d3:
                    39:a1:01:98:e6:c5:76:4a:bf:b6:84:8f:cd:68:1e:
                    a6:8a:11:44:7f:56:d2:c1:df:16:91:46:89:17:92:
                    f3:da:1a:2a:dd:e9:58:89:1f:63:53:f5:fb:e9:d0:
                    03:3c:1a:84:c6:5a:04:fc:c9:4a:b5:e9:ad:40:b2:
                    c0:ba:5b:e1:b3:93:8e:70:c8:ca:de:f1:9e:8f:9f:
                    4f:8c:12:29:39:11:1e:b2:84:b5:e8:cd:d5:84:64:
                    44:11:ac:f6:5d:10:76:f7:d7:d4:41:61:c5:c4:c2:
                    bb:ae:eb:57:f2:45:ec:81:8a:c3:44:54:61:fb:df:
                    a0:98:1b:ee:f8:56:16:9c:9f:16:08:8a:7a:2e:ec:
                    9c:aa:b6:d8:3e:aa:9e:d3:4c:b2:cf:0f:25:f2:f9:
                    1d:26:34:60:d2:9a:af:59:b3:b7:d2:24:24:62:f7:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D0:2B:AB:4E:B0:F8:87:A5:21:E4:9F:1B:1D:6D:90:C6:D3:3A:2D
            X509v3 Authority Key Identifier:
                keyid:51:77:9F:64:95:7B:58:2C:92:0A:F1:D1:97:F4:AF:AA:80:86:29:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65Y15QXb9K6uqwHbwkpmZfpFyjiEKbqHvYQnqFV6LGnR/0/51779F64957B582C920AF1D197F4AFAA8086293A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51779F64957B582C920AF1D197F4AFAA8086293A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65Y15QXb9K6uqwHbwkpmZfpFyjiEKbqHvYQnqFV6LGnR/0/323830313a38303a6664303a3a2f34382d3438203d3e20323634323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:fd0::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:73:0e:dc:dd:07:59:cb:b8:9c:45:2a:28:8d:e3:fd:ca:
         2d:3a:01:96:61:97:2f:33:92:d1:95:a3:2f:35:33:c8:b6:2d:
         6c:16:fe:b2:ba:a5:1e:91:5f:4a:78:ff:de:1a:f5:99:10:f4:
         86:f0:46:e6:14:6f:a4:96:00:37:4e:47:1a:20:a9:6f:07:c3:
         7d:4b:7f:3d:f4:94:20:31:35:1b:bf:41:62:82:f1:50:bb:8c:
         d7:50:98:03:c1:60:3b:6c:8b:04:36:40:18:ef:69:7c:ad:53:
         10:90:3e:c9:76:3e:d5:5c:77:3d:29:27:6f:4c:4f:78:26:8a:
         c8:ed:25:74:5f:52:82:ad:34:e2:78:d8:b8:26:04:01:c1:96:
         02:8a:6d:e7:89:b8:36:e2:fb:37:c4:1f:4a:9a:0a:41:80:30:
         d1:4b:91:d8:07:26:78:6e:fd:a5:e9:42:55:82:a6:d6:fd:98:
         13:f4:2e:29:97:2d:90:d0:2a:6c:95:74:4d:ff:ec:14:20:7c:
         f4:c4:ff:ac:ab:da:82:e1:b0:a9:09:82:c6:86:5f:c8:61:fc:
         b3:65:2e:32:95:79:f6:be:4b:cd:e3:6c:98:96:e1:f3:ce:97:
         6e:2b:f5:90:f7:ef:bf:c2:7e:b7:26:0a:36:d8:6f:fc:0d:44:
         3d:f2:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:28:45 2026 by rpki-client