Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa
File:                     323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa (raw, json)
Hash identifier:          tj2mN68qt8Qi8q+DM2aIdXSbBN3tEqGU4GS6jCJPwAc=
Subject key identifier:   A8:34:D1:C2:5B:99:39:8B:78:E9:51:EF:E8:70:F3:9B:0B:17:B3:5A
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       93FD4F5621C933387FB5C236D89BA56B5EAC78
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa
Signing time:             Sat 09 May 2026 02:47:12 +0000
ROA not before:           Sat 09 May 2026 02:42:12 +0000
ROA not after:            Sat 08 May 2027 02:47:12 +0000
asID:                     267350
IP address blocks:        2804:4c1c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            93:fd:4f:56:21:c9:33:38:7f:b5:c2:36:d8:9b:a5:6b:5e:ac:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: May  9 02:42:12 2026 GMT
            Not After : May  8 02:47:12 2027 GMT
        Subject: CN=A834D1C25B99398B78E951EFE870F39B0B17B35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3b:a5:ba:7e:ca:45:5e:96:04:c3:98:ca:a6:
                    9d:d3:6c:a6:8b:f9:56:98:67:23:70:11:d8:38:7c:
                    64:a9:5d:0b:89:36:1e:b8:4b:7d:9e:92:7e:b3:4b:
                    56:e1:66:e9:87:f4:0e:0b:1a:f9:14:72:35:d7:e9:
                    6b:4a:b3:ac:87:fe:cc:31:52:a7:e7:fd:b3:23:c1:
                    4d:d3:c0:19:f0:15:fc:80:cf:a8:39:23:3e:7d:5b:
                    1a:d0:24:f7:99:26:8e:8d:48:6e:a8:95:74:e4:31:
                    3a:df:37:3c:60:4a:72:72:e6:3f:55:c3:7b:86:59:
                    36:cf:e9:13:6a:0d:4e:bb:66:80:82:97:07:4c:1a:
                    3a:82:0a:9f:9a:ca:ee:34:22:17:9f:e0:23:7f:21:
                    60:ef:f7:51:60:2a:34:a6:2d:22:16:3f:3c:02:d8:
                    50:f7:79:a4:30:85:7d:41:f0:04:38:f2:24:00:58:
                    ba:ca:4d:79:ea:e7:47:d7:81:1a:75:fd:4a:6c:db:
                    05:81:26:e7:6a:d9:89:c2:50:2b:99:d0:99:00:88:
                    09:d9:68:ec:48:b7:27:ec:c2:58:1f:be:01:b8:7d:
                    9d:35:5b:a6:2a:ee:a8:29:41:40:e2:4a:d9:0f:ef:
                    d4:36:49:13:76:6f:33:bd:ab:91:2c:a1:a0:bf:f9:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:34:D1:C2:5B:99:39:8B:78:E9:51:EF:E8:70:F3:9B:0B:17:B3:5A
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c1c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:60:c6:e0:15:b8:47:41:4b:54:93:a2:bb:3e:33:b2:91:a0:
         3c:92:3c:17:8a:0d:81:74:d1:0d:3c:c1:a8:e8:b0:73:a5:3d:
         ad:b1:d7:6e:b5:5d:01:1f:8a:44:b6:f0:ce:7a:07:9a:84:d5:
         d7:1f:b8:99:39:9b:e0:3f:75:5b:03:d9:99:92:e6:2f:4a:89:
         84:1e:77:d2:45:dc:52:2c:af:05:ae:e7:d3:b7:da:27:12:1c:
         42:5d:73:22:19:f0:a6:f3:68:5c:dd:2c:e7:23:97:a2:28:70:
         ae:e7:6c:1d:d3:35:1b:b9:22:d3:3a:1b:2c:e0:b1:0b:08:3f:
         64:6d:69:e3:15:67:65:ae:b2:24:32:0a:cf:9f:f8:41:a4:09:
         96:a9:60:4a:b7:9c:8f:d9:9b:34:10:35:fb:6c:32:3b:f0:7f:
         95:72:5a:1e:49:69:e5:df:38:c7:dc:d1:a8:14:68:9f:65:1d:
         54:dc:9c:05:0f:1b:0a:0d:60:99:30:11:06:a7:a5:9e:2f:d5:
         1c:40:3f:d2:1f:69:3c:57:3f:46:72:c1:ce:ab:16:e6:e0:29:
         cb:4c:b8:81:dc:e2:54:b7:63:f3:69:31:98:cb:39:37:c3:5e:
         84:c3:07:fc:e8:5f:ba:f1:c8:5a:81:36:c3:4b:d1:08:5e:bf:
         f9:be:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:46:31 2026 by rpki-client