Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a343030303a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a343030303a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          4Or6iaaIe/iuUv6hz5TstyjvcZl7H5qGD00xMMVIBsU=
Subject key identifier:   E4:66:A0:58:AD:FD:F0:23:99:42:53:3C:0D:3E:90:99:E5:ED:B3:4E
Certificate issuer:       /CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
Certificate serial:       6AFD5DBA79346A554F3CC98D2F9872C8FA3B84EF
Authority key identifier: 53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a343030303a3a2f33362d3336203d3e203631373736.roa
Signing time:             Tue 03 Mar 2026 22:03:10 +0000
ROA not before:           Tue 03 Mar 2026 21:58:10 +0000
ROA not after:            Tue 02 Mar 2027 22:03:10 +0000
asID:                     61776
IP address blocks:        2804:192c:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:5d:ba:79:34:6a:55:4f:3c:c9:8d:2f:98:72:c8:fa:3b:84:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
        Validity
            Not Before: Mar  3 21:58:10 2026 GMT
            Not After : Mar  2 22:03:10 2027 GMT
        Subject: CN=E466A058ADFDF0239942533C0D3E9099E5EDB34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:07:e2:36:74:03:51:85:e8:44:c6:15:f7:
                    64:75:27:12:06:c3:ab:4e:31:eb:8d:4a:7c:5a:32:
                    d4:e4:b6:23:f8:18:b8:61:bb:50:a7:b1:20:01:47:
                    aa:74:ea:af:c7:ed:90:e3:f1:08:ad:90:bc:61:02:
                    86:62:eb:d7:6c:cb:df:51:9a:01:16:8b:99:9c:c9:
                    61:f2:5e:7b:b0:d7:8a:3d:dc:40:c6:6b:98:3d:8d:
                    18:e1:98:44:29:db:1f:c7:58:a7:60:d4:57:6b:0b:
                    73:9e:f4:3e:8c:15:0a:70:f6:2b:d7:cb:e6:23:d3:
                    fb:b3:9e:33:2b:86:71:bb:7f:73:90:9c:19:e1:3c:
                    e2:30:5f:81:25:51:4e:6f:69:d5:92:66:c3:34:f3:
                    11:fa:44:50:fa:1b:7e:67:8a:17:6c:4c:bf:b1:cf:
                    b7:bd:52:19:78:08:7d:f9:61:3a:e2:39:7e:f0:7b:
                    38:93:24:64:90:63:a7:5a:fc:c8:09:26:53:58:ce:
                    22:14:7b:c7:ab:f5:5e:44:b0:e9:ec:fe:ff:c8:2c:
                    c8:a5:5a:f8:d6:56:cc:5b:7f:10:0b:00:c7:28:4d:
                    98:3c:3d:f0:e2:a9:cb:9f:23:dc:1e:3c:f5:d1:81:
                    64:66:db:3b:3b:79:53:2e:ce:9f:de:39:38:dd:9c:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:66:A0:58:AD:FD:F0:23:99:42:53:3C:0D:3E:90:99:E5:ED:B3:4E
            X509v3 Authority Key Identifier:
                keyid:53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a343030303a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:92:52:33:17:e5:50:49:85:05:2f:fe:e5:75:57:74:a7:31:
         c0:ab:92:29:b4:42:d8:20:52:f0:24:83:bb:15:fb:15:7f:c1:
         13:59:80:20:fe:99:79:0f:f8:70:02:45:43:33:b8:a8:7f:1f:
         36:90:60:b8:4b:68:c3:62:0a:35:5f:8a:ba:64:bf:97:a1:e9:
         5c:0d:b5:e7:13:d0:7b:af:eb:24:af:23:e3:74:92:3b:ff:7c:
         0d:eb:4f:76:7e:a0:0b:f1:7c:d6:31:65:3d:dc:5d:f7:77:8e:
         75:59:4f:bd:29:13:a3:c7:2b:1f:e9:a7:11:bb:87:0c:5c:54:
         ae:9e:98:dd:63:a2:16:d4:de:80:27:ff:b3:be:27:38:78:6b:
         0b:be:df:81:d9:7e:00:a9:5b:9e:94:8e:7c:95:45:31:db:49:
         15:d4:f9:84:7f:49:22:b5:f7:23:c1:15:84:6b:cf:11:a2:1a:
         9d:58:21:b0:4a:12:8a:35:77:d0:37:13:8e:4f:c0:84:83:b1:
         46:0c:ee:06:5c:33:cb:84:cf:00:7a:05:1c:fd:a1:85:78:1c:
         61:14:c4:c7:51:c6:3e:b1:de:cb:2f:d8:ff:15:05:a9:5b:8f:
         9a:a5:73:5a:eb:22:57:5c:b2:ed:50:98:65:ce:12:c2:e1:c3:
         01:ea:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:41 2026 by rpki-client