Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33332d3333203d3e20323638313331.roa
File:                     323830343a353837383a3a2f33332d3333203d3e20323638313331.roa (raw, json)
Hash identifier:          MZZDRWSpFnhcz/nkWmp95FdZ3YiVg09zOQ2pARkYae0=
Subject key identifier:   C0:E7:19:6B:BD:D9:CC:C8:6E:CC:13:68:4F:5D:59:67:E8:3E:D4:3E
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       7AA3F4DA8F3C88E5C3710A3927745D2CC8DBBD25
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33332d3333203d3e20323638313331.roa
Signing time:             Tue 05 May 2026 17:09:35 +0000
ROA not before:           Tue 05 May 2026 17:04:35 +0000
ROA not after:            Tue 04 May 2027 17:09:35 +0000
asID:                     268131
IP address blocks:        2804:5878::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a3:f4:da:8f:3c:88:e5:c3:71:0a:39:27:74:5d:2c:c8:db:bd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: May  5 17:04:35 2026 GMT
            Not After : May  4 17:09:35 2027 GMT
        Subject: CN=C0E7196BBDD9CCC86ECC13684F5D5967E83ED43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:fc:62:1d:10:7e:10:08:c7:ba:c0:62:a0:
                    9d:e2:10:0e:7d:1a:ea:2d:55:93:d6:27:44:2b:ac:
                    02:2d:28:39:7a:e2:52:fe:49:ab:2d:f9:17:8b:6a:
                    e2:c6:df:21:0e:de:75:b4:3e:39:f9:32:f7:01:58:
                    40:1d:6f:07:47:0a:07:71:32:41:89:f0:50:94:2d:
                    c2:c6:18:6c:6e:f0:45:68:b4:50:37:97:61:00:26:
                    1d:99:6c:5f:7e:59:00:94:bb:51:01:1d:ee:61:d0:
                    6f:7e:02:0f:1e:6f:a0:79:33:a0:3b:96:78:0f:c3:
                    e7:70:25:6f:bb:76:eb:14:9c:96:11:f7:f8:ed:bf:
                    24:15:e1:cb:5e:cf:7d:7f:a9:1d:83:47:7b:17:b1:
                    91:6b:4e:11:10:08:87:90:b4:67:31:49:37:4c:4a:
                    ee:7b:a7:26:70:67:1c:21:6b:bf:df:a1:20:cb:bb:
                    bf:f8:c4:5b:3d:7b:ad:95:d9:fd:51:f7:5c:9c:99:
                    35:0e:06:4b:46:32:b9:ed:49:d5:30:95:d5:2c:ba:
                    5a:81:d2:7f:ce:eb:91:77:5f:00:5a:61:c5:2a:31:
                    01:61:f6:ce:47:ee:73:97:16:d3:c2:3e:94:e9:14:
                    0c:1e:7b:a6:26:bf:5b:d7:a3:2d:97:44:30:a7:af:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E7:19:6B:BD:D9:CC:C8:6E:CC:13:68:4F:5D:59:67:E8:3E:D4:3E
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33332d3333203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:f0:45:69:f3:c9:1c:99:53:e4:73:7f:97:88:61:01:69:
         77:32:e4:45:9e:71:c9:71:d1:21:e6:bd:80:63:ad:5d:cf:38:
         32:49:94:1c:a4:63:3a:31:be:c9:1c:b6:87:59:37:85:68:ba:
         96:9e:93:c3:af:88:98:d4:ed:fc:2c:e9:9e:bd:e9:21:22:2f:
         44:7b:28:33:14:bd:18:f1:ad:5e:9d:d7:77:94:47:82:e9:33:
         f3:b3:7b:33:5a:42:b0:ab:63:dd:e0:f5:50:85:fe:75:72:f8:
         d1:95:0f:3b:d2:35:a6:88:f7:cc:ba:f6:5e:cc:dc:a0:9c:06:
         2c:56:ae:5f:d7:de:76:5b:d4:42:df:e2:c2:e9:24:63:08:52:
         2e:f2:26:e3:a3:ae:d0:f5:7e:22:53:25:3a:58:74:4a:a6:3f:
         fa:ea:a0:8a:85:c3:4f:69:6f:e2:1c:99:62:ff:33:23:d4:26:
         c3:c9:5f:1b:7b:89:ec:2b:67:b5:03:0f:d3:59:fb:7d:05:84:
         71:25:d5:d5:d0:8a:73:10:13:16:b3:4b:0f:be:69:ed:c3:a4:
         d0:69:10:61:3c:8c:64:28:2d:4f:ef:51:e1:62:dd:7e:b0:d4:
         a1:41:d5:24:36:99:bf:63:8b:c0:02:05:ae:2a:7f:7c:1e:5f:
         59:e5:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:38:46 2026 by rpki-client