Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a343030303a3a2f33352d3335203d3e203238323532.roa
File:                     323830343a313534343a343030303a3a2f33352d3335203d3e203238323532.roa (raw, json)
Hash identifier:          HzFhT88ekgAMzQ3erddQq14y7v9BBojh+znZ2KopSGA=
Subject key identifier:   DC:F7:9D:72:54:B0:0D:A0:5D:F0:DA:1C:69:E8:4F:61:88:6F:C6:09
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       24C24EE01524CBC05CDB410393E963DA422B8632
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a343030303a3a2f33352d3335203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:11 +0000
ROA not before:           Wed 11 Mar 2026 19:08:11 +0000
ROA not after:            Wed 10 Mar 2027 19:13:11 +0000
asID:                     28252
IP address blocks:        2804:1544:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c2:4e:e0:15:24:cb:c0:5c:db:41:03:93:e9:63:da:42:2b:86:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:11 2026 GMT
            Not After : Mar 10 19:13:11 2027 GMT
        Subject: CN=DCF79D7254B00DA05DF0DA1C69E84F61886FC609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:12:e8:e0:b3:5f:1a:25:8b:2e:3b:5d:18:df:
                    c2:11:a3:cf:ea:b1:26:94:12:8b:6c:8e:98:c8:ce:
                    b7:d5:be:92:1a:e5:3c:19:7f:31:3f:d7:47:f3:7d:
                    b7:f9:c9:23:a0:cc:6e:97:90:e9:7c:d4:a8:96:42:
                    fd:30:57:84:6c:3e:3f:83:6a:44:21:05:c5:3a:1c:
                    5b:5a:df:c0:b0:a6:6b:bf:4d:88:a6:be:f9:5a:7e:
                    02:9a:00:86:46:c0:03:40:8c:b2:6e:62:96:1e:4e:
                    63:87:ac:75:fe:08:7f:b6:9b:9b:6a:37:7f:28:d6:
                    25:9b:41:c0:0a:ad:79:cd:4a:70:ad:af:21:18:52:
                    e2:43:fa:79:38:40:e4:d4:19:24:ea:09:ff:14:21:
                    fe:35:38:1c:af:00:c5:37:b1:66:7e:20:81:7a:0d:
                    f7:c8:00:45:1e:8a:7b:e7:5a:39:3e:fe:3e:cd:fc:
                    42:ae:d1:e8:a1:f5:10:73:d8:af:7d:85:89:85:d5:
                    07:b4:e5:b6:09:02:e3:97:5e:d3:47:bf:4c:bb:89:
                    1e:1f:6d:25:fd:8c:a9:6f:5c:de:cc:95:0b:f6:58:
                    20:04:10:4b:f4:20:34:9b:f7:12:47:83:22:de:2f:
                    3c:18:a7:8a:c3:08:02:31:c4:1a:8a:2f:79:b5:64:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F7:9D:72:54:B0:0D:A0:5D:F0:DA:1C:69:E8:4F:61:88:6F:C6:09
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a343030303a3a2f33352d3335203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:e4:9f:3e:27:2b:50:2a:b0:f5:d6:06:f4:a3:9a:c0:20:
         c5:8c:d4:be:1d:10:1d:0a:b8:d3:ee:71:28:ee:12:9b:3e:d5:
         37:2e:36:e7:01:ea:5b:4a:2d:73:75:81:72:fb:8e:ee:2f:c6:
         54:99:6f:6d:92:50:b0:e2:f5:c8:b8:9c:52:ab:48:08:7a:14:
         26:cd:d1:09:7e:06:dc:74:5b:e3:5d:cf:b9:46:41:87:bc:fd:
         03:6b:74:cb:88:c7:79:8e:f2:b8:7a:e1:20:be:fc:15:2a:1b:
         bc:c5:36:6b:31:b2:76:a2:e2:0a:2c:87:c8:84:69:18:4a:33:
         61:1c:ce:c7:5d:fe:7a:fa:94:7a:c5:e6:c1:28:3f:70:d0:cd:
         c3:5c:47:c6:5b:1a:98:a0:a5:a5:8a:4e:65:d5:d9:dc:7f:60:
         69:06:84:51:2a:0c:13:e5:c8:06:2a:4f:fa:37:63:0d:57:82:
         c0:f5:99:46:fb:df:f8:60:c8:65:cd:9c:02:7f:db:7a:2b:1f:
         21:77:8c:87:c4:76:70:a8:22:96:ab:c9:8e:53:6b:77:24:0a:
         e5:6f:a2:9a:1a:69:f9:de:f8:f0:ae:e0:1c:fa:54:34:00:36:
         99:22:8f:6c:99:f9:d8:80:d1:fd:e7:bf:9d:e0:8c:0b:2f:52:
         e0:4f:18:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJMJO4BUky8Bc20EDk+lj2kIrhjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MTFaFw0yNzAzMTAxOTEzMTFaMDMxMTAvBgNV
BAMTKERDRjc5RDcyNTRCMDBEQTA1REYwREExQzY5RTg0RjYxODg2RkM2MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwEujgs18aJYsuO10Y38IRo8/q
sSaUEotsjpjIzrfVvpIa5TwZfzE/10fzfbf5ySOgzG6XkOl81KiWQv0wV4RsPj+D
akQhBcU6HFta38Cwpmu/TYimvvlafgKaAIZGwANAjLJuYpYeTmOHrHX+CH+2m5tq
N38o1iWbQcAKrXnNSnCtryEYUuJD+nk4QOTUGSTqCf8UIf41OByvAMU3sWZ+IIF6
DffIAEUeinvnWjk+/j7N/EKu0eih9RBz2K99hYmF1Qe05bYJAuOXXtNHv0y7iR4f
bSX9jKlvXN7MlQv2WCAEEEv0IDSb9xJHgyLeLzwYp4rDCAIxxBqKL3m1ZDhHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3PedclSwDaBd8NocaehPYYhvxgkwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzIzODMwMzQzYTMxMzUzNDM0M2EzNDMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBBVEQDANBgkqhkiG9w0BAQsFAAOC
AQEATqjknz4nK1AqsPXWBvSjmsAgxYzUvh0QHQq40+5xKO4Smz7VNy425wHqW0ot
c3WBcvuO7i/GVJlvbZJQsOL1yLicUqtICHoUJs3RCX4G3HRb413PuUZBh7z9A2t0
y4jHeY7yuHrhIL78FSobvMU2azGydqLiCiyHyIRpGEozYRzOx13+evqUesXmwSg/
cNDNw1xHxlsamKClpYpOZdXZ3H9gaQaEUSoME+XIBipP+jdjDVeCwPWZRvvf+GDI
Zc2cAn/beisfIXeMh8R2cKgilqvJjlNrdyQK5W+imhpp+d748K7gHPpUNAA2mSKP
bJn52IDR/ee/neCMCy9S4E8YAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:12 2026 by rpki-client