Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/323830343a373433633a343030303a3a2f33342d3334203d3e20323730393638.roa
File:                     323830343a373433633a343030303a3a2f33342d3334203d3e20323730393638.roa (raw, json)
Hash identifier:          JdC9RNBeg0sgQw/Y2dUTPPn+33wm9dvRmC3TUsO9270=
Subject key identifier:   77:94:6B:89:5F:77:79:D2:A7:B2:00:84:33:74:B4:7F:0A:BC:02:27
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       6E16A15E093A0464187A09DAA927AA36347F9BD1
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/323830343a373433633a343030303a3a2f33342d3334203d3e20323730393638.roa
Signing time:             Mon 16 Mar 2026 22:03:03 +0000
ROA not before:           Mon 16 Mar 2026 21:58:03 +0000
ROA not after:            Mon 15 Mar 2027 22:03:03 +0000
asID:                     270968
IP address blocks:        2804:743c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:16:a1:5e:09:3a:04:64:18:7a:09:da:a9:27:aa:36:34:7f:9b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Mar 16 21:58:03 2026 GMT
            Not After : Mar 15 22:03:03 2027 GMT
        Subject: CN=77946B895F7779D2A7B200843374B47F0ABC0227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:8f:14:49:0c:b8:5e:35:05:96:b0:8a:7d:
                    b8:63:dd:9c:51:11:b5:f6:f1:cf:5a:18:d6:b6:89:
                    4d:cb:85:0a:96:77:10:9f:59:66:28:5b:0d:66:94:
                    d0:e8:85:f2:b3:ab:66:41:4c:2f:da:00:ab:d5:e2:
                    4c:50:d3:14:70:4d:f4:8d:bf:26:0a:0d:53:ee:6e:
                    4c:3c:ff:8f:53:59:47:a0:61:4d:2c:dc:e0:50:e8:
                    18:32:de:64:ee:33:96:9c:ec:81:86:c8:9b:57:19:
                    cf:9a:c6:2e:be:d9:c8:bf:4a:b7:29:ad:3f:ea:52:
                    66:91:78:53:77:82:35:c5:8e:c7:cb:20:93:13:f6:
                    8a:0b:ad:d3:ba:5f:a3:02:6b:c7:ca:f5:50:d8:1e:
                    05:2e:04:b5:9e:23:5c:91:1f:7f:cd:c6:49:27:0a:
                    e0:16:7a:c2:03:e9:66:ac:79:5f:b7:b4:04:11:fb:
                    f8:9d:f3:6b:78:8a:50:52:6f:07:a4:71:b2:52:17:
                    e7:ef:1c:3c:c4:2f:66:a5:28:49:4e:02:0d:1b:ca:
                    26:8d:08:0e:ce:0e:b1:65:a9:c2:44:8e:46:17:20:
                    8f:97:c4:f2:d5:73:ff:6e:c6:73:9a:09:4a:34:cf:
                    2d:9c:ca:21:5f:3e:7f:3d:e1:ab:6e:c5:66:ad:bc:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:94:6B:89:5F:77:79:D2:A7:B2:00:84:33:74:B4:7F:0A:BC:02:27
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/323830343a373433633a343030303a3a2f33342d3334203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:743c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:68:c3:3c:92:36:27:70:08:dd:20:96:9d:cc:a9:3f:df:15:
         c9:f1:6d:72:bc:60:09:c2:0b:19:98:c5:63:57:57:91:18:a2:
         6c:68:5d:50:c2:3c:c6:73:57:fb:79:e0:ff:f1:dd:c7:40:8a:
         22:96:88:62:83:bf:c4:34:b5:73:48:c2:d8:0c:63:9a:27:3c:
         2b:29:03:19:54:6e:33:e9:e2:84:90:7e:6d:55:97:de:8d:38:
         77:32:af:39:43:e4:9d:85:1d:ac:0c:c7:58:52:15:ba:5d:ae:
         8e:fd:74:74:95:1c:41:c9:15:2d:c2:3a:1f:a0:4a:8b:dd:f4:
         32:72:60:4b:10:be:f5:c5:8a:1a:90:93:7c:ee:ce:1b:14:6b:
         ee:22:df:02:f0:97:ed:bd:01:61:7b:77:c7:bf:0c:d8:ef:01:
         a5:1a:06:3b:7c:77:b5:d2:29:85:e4:91:a2:c4:b3:d8:67:aa:
         43:28:cd:d1:a2:c0:ba:90:a3:6e:38:0b:fb:37:41:62:c4:65:
         48:88:e9:2f:49:6a:b6:a0:31:98:61:73:2e:d6:c8:2b:aa:03:
         78:a3:fa:5b:ca:54:29:5d:1b:f7:96:cc:6d:c2:49:5e:e3:4a:
         53:53:62:24:09:06:3f:9a:42:c1:3b:49:4f:b0:96:aa:a7:4e:
         13:f0:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:11:03 2026 by rpki-client