Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/323830343a363532343a343030303a3a2f34302d3430203d3e20323639343731.roa
File:                     323830343a363532343a343030303a3a2f34302d3430203d3e20323639343731.roa (raw, json)
Hash identifier:          IHCcdJHmK0uDqDY5atgymN1EVyt5Mw/EcbYmOHTF49g=
Subject key identifier:   CD:B7:A9:A6:4F:4C:0C:4D:C7:FD:27:3D:09:5A:81:16:03:B6:A1:93
Certificate issuer:       /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
Certificate serial:       5C503C9E6D94A275CA1E8779AD5B94B4BA0D7DCA
Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/323830343a363532343a343030303a3a2f34302d3430203d3e20323639343731.roa
Signing time:             Fri 13 Mar 2026 08:36:08 +0000
ROA not before:           Fri 13 Mar 2026 08:31:08 +0000
ROA not after:            Fri 12 Mar 2027 08:36:08 +0000
asID:                     269471
IP address blocks:        2804:6524:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl
                          rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:50:3c:9e:6d:94:a2:75:ca:1e:87:79:ad:5b:94:b4:ba:0d:7d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
        Validity
            Not Before: Mar 13 08:31:08 2026 GMT
            Not After : Mar 12 08:36:08 2027 GMT
        Subject: CN=CDB7A9A64F4C0C4DC7FD273D095A811603B6A193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:91:d5:56:b1:4c:c5:64:cd:77:b4:45:db:
                    10:fd:4d:c6:3d:64:cd:c9:93:ae:0b:60:8c:16:bf:
                    2b:c9:c6:88:2c:53:d5:64:5b:c0:0f:bb:fe:90:6e:
                    a6:cb:e7:08:b4:93:4d:15:d2:19:f9:f4:8f:7c:32:
                    d1:2b:41:3c:99:18:87:88:a1:e6:b0:39:72:0b:14:
                    02:ee:bb:be:09:e5:27:47:37:0f:8a:71:a1:a0:63:
                    3a:a9:02:44:c5:c7:41:49:e8:3d:b2:47:17:c4:bf:
                    02:7a:1d:d3:4b:9b:b2:b3:a2:c3:50:94:0b:24:ce:
                    8c:88:52:ac:51:d4:23:4c:d6:3d:25:9a:fc:ef:b8:
                    1b:2b:52:d2:56:3c:2b:0d:fe:f9:28:6b:16:b5:3f:
                    75:16:53:e9:0d:c2:eb:38:7f:0a:a9:69:7f:f8:20:
                    39:79:04:98:9f:71:be:c4:16:1e:7c:d4:c4:23:95:
                    27:8e:f7:d4:ef:aa:a2:b2:0f:5f:2f:64:e7:4e:8e:
                    b1:63:31:30:2e:d1:96:bd:a0:f1:ba:db:f4:e1:52:
                    8f:ce:21:e4:5f:bf:f4:3b:4b:85:00:bb:59:26:24:
                    2d:a6:f9:80:9f:bb:eb:a4:cc:de:bc:6f:6b:bb:07:
                    7b:89:33:24:56:ad:6c:c8:66:ae:c9:b8:7d:8a:41:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B7:A9:A6:4F:4C:0C:4D:C7:FD:27:3D:09:5A:81:16:03:B6:A1:93
            X509v3 Authority Key Identifier:
                keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/323830343a363532343a343030303a3a2f34302d3430203d3e20323639343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6524:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:23:03:09:9b:83:e3:07:62:2a:77:76:ea:20:3f:6d:41:
         01:b3:43:19:12:3b:38:cd:9c:6a:cd:35:3b:8f:4a:c0:6a:6c:
         33:58:a0:11:0a:69:58:7a:9c:45:03:29:b4:c8:2c:1f:92:4b:
         31:db:e4:fb:be:c3:5a:0c:d9:b4:6f:44:a2:ec:c9:ce:57:3e:
         fc:42:1b:02:b7:de:a0:2c:4d:6f:18:46:49:87:4d:52:0f:60:
         bb:51:e0:26:35:fd:23:83:c6:e9:54:e6:2b:aa:de:5a:e2:02:
         82:95:25:56:06:ff:7a:ef:96:39:56:8f:a1:94:ce:e4:f1:2f:
         6f:21:7d:df:ed:23:a5:b7:98:e3:50:c0:61:6c:05:5b:b4:55:
         3a:9c:39:8c:a3:3f:3e:3a:bc:8d:b0:f9:52:0c:90:9b:b8:51:
         c9:7c:cf:54:a0:a0:fa:c0:e0:eb:f2:cd:95:fc:e9:35:dc:f3:
         73:1d:b4:48:28:47:42:11:50:65:e0:b7:30:74:52:2c:55:e2:
         a7:32:b3:dd:a2:00:e0:86:cd:26:7a:22:d8:5e:55:63:fa:a4:
         ec:af:6d:d0:11:71:91:7d:4e:34:eb:38:4c:a1:a4:e2:9e:c6:
         64:ec:64:38:a5:0e:7f:6f:bc:37:96:1e:16:c3:cd:c6:d9:f8:
         d9:26:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:20:10 2026 by rpki-client