Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/323830343a343231303a3a2f33322d3334203d3e20323637343735.roa
File:                     323830343a343231303a3a2f33322d3334203d3e20323637343735.roa (raw, json)
Hash identifier:          kBE2eQ4AZaGPrLV5QqmavJsB82q6svIQPTVDdDTMPgU=
Subject key identifier:   23:3D:D7:2E:9B:80:67:BB:D1:C7:2D:B1:18:8E:C7:52:31:89:EF:7D
Certificate issuer:       /CN=27431F298D6DFE8179639FE397D34A2A47E96D15
Certificate serial:       179A54A086A78A2FB72E9EC6E490E907BFC2CABA
Authority key identifier: 27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/323830343a343231303a3a2f33322d3334203d3e20323637343735.roa
Signing time:             Mon 04 May 2026 14:54:02 +0000
ROA not before:           Mon 04 May 2026 14:49:02 +0000
ROA not after:            Mon 03 May 2027 14:54:02 +0000
asID:                     267475
IP address blocks:        2804:4210::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl
                          rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9a:54:a0:86:a7:8a:2f:b7:2e:9e:c6:e4:90:e9:07:bf:c2:ca:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27431F298D6DFE8179639FE397D34A2A47E96D15
        Validity
            Not Before: May  4 14:49:02 2026 GMT
            Not After : May  3 14:54:02 2027 GMT
        Subject: CN=233DD72E9B8067BBD1C72DB1188EC7523189EF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:57:ae:8d:9c:af:57:78:d9:0e:db:e8:f3:
                    d6:88:78:df:2a:a2:0a:74:4a:a4:14:f8:98:6d:77:
                    53:8c:9b:3a:2c:23:f9:70:9e:b3:4a:eb:3a:91:40:
                    48:20:0d:59:2f:7e:f9:08:09:06:78:9f:5b:99:1e:
                    30:a5:41:0c:1f:82:ef:c2:51:0d:d5:7a:a1:52:46:
                    b8:8c:f4:98:29:2e:0b:18:7b:1c:b9:4d:70:84:05:
                    74:6a:09:ff:5a:ab:16:6c:19:12:3c:ff:b9:0b:ce:
                    e9:47:55:fd:5c:48:a5:58:0d:80:3a:10:24:00:02:
                    df:80:dd:fe:30:1e:3a:5f:cb:53:13:13:f9:24:c4:
                    9f:ff:c1:14:ee:82:44:f8:85:3a:7f:c7:28:c1:5a:
                    7f:2e:b6:44:4b:43:2b:77:b8:b1:93:e9:55:c3:32:
                    06:91:c5:6b:c0:64:f8:1a:07:c7:1a:86:3c:be:54:
                    15:a4:f4:47:11:78:f8:5a:a2:0e:8d:0d:98:95:b4:
                    03:dc:d4:38:3e:58:68:f0:cd:f6:6f:1f:e2:65:b4:
                    21:2e:de:0a:c3:df:ad:2f:ab:f2:f0:df:78:25:62:
                    84:25:3b:af:18:fc:e3:3a:af:a6:83:1a:8e:1f:b1:
                    58:27:be:41:1c:8b:fe:49:c3:4c:5f:cf:60:44:72:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3D:D7:2E:9B:80:67:BB:D1:C7:2D:B1:18:8E:C7:52:31:89:EF:7D
            X509v3 Authority Key Identifier:
                keyid:27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/323830343a343231303a3a2f33322d3334203d3e20323637343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4210::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:18:10:60:6b:82:aa:09:54:05:cf:aa:54:59:7f:8c:99:7f:
         3c:f9:8e:17:ba:b4:a1:87:b7:21:2e:1b:7a:e1:ed:2e:ad:19:
         ed:6c:f6:34:dd:ef:53:46:8a:23:85:c4:b4:db:07:62:d9:d4:
         eb:3d:93:f5:61:af:d3:1d:d8:77:49:54:4d:13:0c:b0:1c:da:
         95:53:df:83:3e:b0:65:0a:67:cf:5c:60:6c:62:31:fa:90:af:
         ad:99:a5:27:a7:29:99:d5:22:c6:00:87:95:52:0c:b1:84:1e:
         b3:5d:19:9f:27:60:be:51:b1:77:ab:9f:86:52:93:15:5a:e1:
         09:a2:b1:9e:37:56:18:b1:83:ce:f0:53:10:0d:c3:7c:69:8a:
         b9:b0:b2:c9:10:82:32:00:43:2d:00:67:d4:0e:7a:83:20:f5:
         11:3c:86:02:98:1f:f1:01:26:47:f1:36:3c:69:d1:e2:06:be:
         8d:4a:6c:59:43:4e:33:ba:a8:10:86:37:e9:1d:ee:88:6e:30:
         d8:3d:2a:07:fd:59:57:12:1e:bb:73:b7:7f:d8:b9:8c:12:a7:
         c8:ff:26:4f:85:f1:22:70:e1:8c:9e:9a:d0:7c:22:46:46:3b:
         0c:73:00:38:73:74:0e:eb:d0:f9:f1:e1:9d:92:c1:b5:fc:85:
         07:d8:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:41:20 2026 by rpki-client