Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/323830343a393737383a3a2f33322d313238203d3e20323632373534.roa
File:                     323830343a393737383a3a2f33322d313238203d3e20323632373534.roa (raw, json)
Hash identifier:          imhLXJa6fwkMaJR7MOww6wNTAZQy/DpWeG+aySYsf5c=
Subject key identifier:   9B:D7:4B:08:2A:B1:89:86:B8:B2:97:F4:98:4B:5A:42:6A:94:7E:BD
Certificate issuer:       /CN=73DD1509F41E20667158C220C9E64781E7815EC6
Certificate serial:       4D9F3B207E9114CC6E78C982772D102CEAA1F8C1
Authority key identifier: 73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/323830343a393737383a3a2f33322d313238203d3e20323632373534.roa
Signing time:             Thu 30 Apr 2026 14:32:05 +0000
ROA not before:           Thu 30 Apr 2026 14:27:05 +0000
ROA not after:            Thu 29 Apr 2027 14:32:05 +0000
asID:                     262754
IP address blocks:        2804:9778::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/73DD1509F41E20667158C220C9E64781E7815EC6.crl
                          rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/73DD1509F41E20667158C220C9E64781E7815EC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9f:3b:20:7e:91:14:cc:6e:78:c9:82:77:2d:10:2c:ea:a1:f8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DD1509F41E20667158C220C9E64781E7815EC6
        Validity
            Not Before: Apr 30 14:27:05 2026 GMT
            Not After : Apr 29 14:32:05 2027 GMT
        Subject: CN=9BD74B082AB18986B8B297F4984B5A426A947EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:bd:a7:40:c3:e6:22:5b:89:ce:fc:25:00:
                    48:3b:40:f9:2c:1a:3c:da:47:fa:f9:53:ab:34:66:
                    66:b5:21:b1:47:a8:ed:42:3e:d2:8d:89:de:c1:91:
                    9a:31:eb:ca:dd:ad:9f:6c:83:80:08:7b:a4:08:fd:
                    b8:5f:a4:05:be:ec:00:53:24:0d:35:87:c2:c3:e1:
                    b6:9a:94:ad:e0:48:6e:a6:fe:c9:e0:c5:bc:6b:96:
                    39:67:1b:28:67:db:30:ca:7e:e8:36:bb:2d:84:93:
                    24:c1:db:b9:93:4e:25:1f:b5:41:6d:d3:c9:d4:62:
                    c3:25:85:5f:de:b3:a3:cc:98:81:56:e4:4b:2d:1b:
                    58:e7:f1:c3:93:4c:5d:59:82:df:64:32:ad:c2:80:
                    e4:86:df:4c:1a:ac:02:90:1e:61:0f:a6:4a:93:36:
                    13:3b:83:8d:0c:20:46:c8:75:ea:40:88:a4:cf:4f:
                    6b:ef:0f:bb:27:9f:a8:09:d7:63:23:6d:fe:9a:6f:
                    73:1f:02:8f:39:f6:42:b4:41:c4:7f:a0:03:16:e9:
                    26:fb:83:f8:d5:66:19:44:1b:d9:37:bf:de:a8:07:
                    56:0c:14:93:b4:ba:32:a2:cc:03:14:a6:78:d4:34:
                    1e:8d:f4:75:01:b5:dc:ff:d2:98:f4:a4:5c:88:4b:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D7:4B:08:2A:B1:89:86:B8:B2:97:F4:98:4B:5A:42:6A:94:7E:BD
            X509v3 Authority Key Identifier:
                keyid:73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/73DD1509F41E20667158C220C9E64781E7815EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/323830343a393737383a3a2f33322d313238203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9778::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:2e:f9:41:a3:9e:19:fe:c0:0b:90:c8:a8:e5:ec:45:c0:9c:
         f6:9f:52:a3:ea:5e:bb:a8:1f:b6:d0:d1:fb:8c:34:70:cd:f5:
         3b:b1:90:26:45:c9:70:b8:ac:2e:18:a4:89:4a:39:2e:67:7e:
         13:e4:c4:58:1b:eb:24:5d:61:d0:7a:4e:df:fa:b6:8a:26:83:
         aa:b4:78:23:63:65:01:ad:4a:be:ac:09:78:b0:06:77:87:70:
         0a:90:31:39:ab:cc:f2:c7:4f:4b:d1:9f:97:5f:dc:a0:08:bb:
         a9:cf:29:05:9b:6d:e9:46:6d:d0:4f:62:64:97:c2:3f:a4:dd:
         58:b6:2d:4e:b3:fb:b7:62:fc:ba:a7:9f:cd:28:71:61:4a:3a:
         5e:65:4e:c1:9c:85:88:5c:de:a3:3a:8a:2d:48:eb:f8:5e:5e:
         c3:63:64:35:6c:14:8e:75:96:dc:88:72:31:29:2c:72:e2:59:
         57:f9:92:f2:4e:b1:a6:e4:31:9f:9f:3d:62:ac:e0:c5:38:51:
         c1:33:52:3d:9b:b4:cf:fa:bc:39:cd:c0:69:f2:68:51:d8:c5:
         4e:c5:88:7a:80:bc:b7:13:f2:46:95:57:cd:b4:1d:fb:1e:41:
         8e:8f:8d:5e:24:de:30:27:97:9e:6b:d6:bc:40:fc:94:08:cc:
         bc:e8:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:08 2026 by rpki-client