Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/323830343a393136343a3a2f33322d313238203d3e20323734363338.roa
File:                     323830343a393136343a3a2f33322d313238203d3e20323734363338.roa (raw, json)
Hash identifier:          kGsvIB7D6AJW6Fa2a3pSf1bykglUtNwBUHTvn3XRnq8=
Subject key identifier:   99:85:68:D8:82:E9:6B:6B:29:9F:53:89:EF:0D:8C:D2:5E:05:5F:61
Certificate issuer:       /CN=B0A119AF43EBF0B035FDCB223219CFDDD3124F76
Certificate serial:       7553A02045187DC7117E1DCCC8DD90C44D98ABA0
Authority key identifier: B0:A1:19:AF:43:EB:F0:B0:35:FD:CB:22:32:19:CF:DD:D3:12:4F:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/323830343a393136343a3a2f33322d313238203d3e20323734363338.roa
Signing time:             Mon 11 May 2026 16:30:47 +0000
ROA not before:           Mon 11 May 2026 16:25:47 +0000
ROA not after:            Mon 10 May 2027 16:30:47 +0000
asID:                     274638
IP address blocks:        2804:9164::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.crl
                          rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:53:a0:20:45:18:7d:c7:11:7e:1d:cc:c8:dd:90:c4:4d:98:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A119AF43EBF0B035FDCB223219CFDDD3124F76
        Validity
            Not Before: May 11 16:25:47 2026 GMT
            Not After : May 10 16:30:47 2027 GMT
        Subject: CN=998568D882E96B6B299F5389EF0D8CD25E055F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:fb:45:1a:91:cc:27:ed:de:57:49:ad:e0:
                    6a:e1:06:a8:d3:b9:b7:fc:9a:54:6e:7b:d0:01:de:
                    fc:dd:e4:95:94:0a:47:5a:09:10:01:3c:4f:6f:79:
                    d0:68:89:86:be:96:24:bc:fe:87:74:8e:31:bb:fa:
                    3d:69:85:40:0c:75:ca:37:2e:0d:0d:24:34:a4:b3:
                    4b:75:dc:b6:28:c0:51:21:6f:2e:9e:aa:ef:b8:cc:
                    f9:a0:be:6e:c9:87:7f:ee:09:7f:27:36:45:01:ae:
                    d1:72:d1:25:5c:7c:c4:c2:ae:05:87:1e:8a:1a:95:
                    38:04:a3:78:c9:68:f1:a3:e2:40:bc:a2:03:13:c1:
                    d6:eb:ef:49:cb:fb:90:43:27:d4:a5:d9:0a:4d:9f:
                    a1:27:4b:ab:cd:d4:a0:7f:b2:75:9f:ee:f4:26:ec:
                    3c:58:d2:35:b5:b4:b0:db:2a:f3:f5:0f:96:b7:02:
                    22:4d:74:ae:bc:8d:e7:61:66:8b:a2:ef:de:11:0c:
                    43:46:7e:57:aa:05:02:9e:98:10:b1:79:15:17:c1:
                    c4:e0:42:32:c9:2c:76:c4:10:ce:52:dd:d2:c5:34:
                    ef:5b:ae:1c:11:ae:b5:72:39:3a:d6:ee:65:e4:0b:
                    2b:fc:f9:5a:30:b7:12:4f:20:bd:08:e6:15:fa:6e:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:85:68:D8:82:E9:6B:6B:29:9F:53:89:EF:0D:8C:D2:5E:05:5F:61
            X509v3 Authority Key Identifier:
                keyid:B0:A1:19:AF:43:EB:F0:B0:35:FD:CB:22:32:19:CF:DD:D3:12:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/323830343a393136343a3a2f33322d313238203d3e20323734363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9164::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:58:32:9f:64:3e:5f:d6:a9:d0:f8:6f:03:21:21:91:b2:3d:
         05:81:f3:f0:ea:49:88:0d:3d:14:fc:e2:ca:ff:6f:42:42:62:
         d0:e2:df:15:ff:d7:b5:3d:d9:05:ca:a8:9d:5d:97:f3:de:75:
         b6:42:fe:52:32:19:4c:60:0f:f5:68:59:68:b1:24:cd:60:de:
         ca:7f:9d:2d:ac:da:df:dd:83:e6:34:a1:10:b0:41:cd:59:bd:
         cb:87:09:14:92:b7:25:b2:db:18:ba:d0:51:f1:78:6f:ea:fc:
         74:f6:47:bb:3a:7f:d9:29:1a:13:41:9f:2e:07:b9:a5:32:7c:
         cd:4a:ee:40:6f:7b:1b:05:09:2b:cb:31:43:86:55:a5:7d:66:
         52:7e:3f:e8:dc:f5:11:54:61:88:6b:4d:2e:bb:bb:6a:44:5b:
         cd:79:cf:98:cd:c4:42:89:f8:00:41:5e:56:5c:1f:9f:79:87:
         77:ca:47:83:f7:93:02:a4:cb:50:e3:5b:4c:c2:35:d8:19:fd:
         c7:7d:30:07:50:0c:26:6f:a2:aa:a2:4f:48:48:fe:a1:97:16:
         95:ea:17:84:a0:50:36:57:92:2f:79:9d:83:3e:c6:1a:ee:47:
         7a:57:66:93:72:63:02:4b:fc:84:02:3c:83:78:f8:42:c5:97:
         7f:3c:c5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:40:18 2026 by rpki-client