Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/323830343a333066303a3238303a3a2f34312d3431203d3e20323634393832.roa
File:                     323830343a333066303a3238303a3a2f34312d3431203d3e20323634393832.roa (raw, json)
Hash identifier:          /VsXttVU+mfIGF9mFQZvIBYTri645g6YK0jkRUe9pxM=
Subject key identifier:   73:48:E5:5B:8F:33:D1:DF:6B:72:65:02:02:92:29:66:F7:A3:C2:FD
Certificate issuer:       /CN=3DE623ACA735E7C30285AC172A3418724D5F1A7B
Certificate serial:       45565F0C6165DFCFED731F0FAC368A3FC8BA274D
Authority key identifier: 3D:E6:23:AC:A7:35:E7:C3:02:85:AC:17:2A:34:18:72:4D:5F:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/323830343a333066303a3238303a3a2f34312d3431203d3e20323634393832.roa
Signing time:             Thu 12 Mar 2026 20:56:44 +0000
ROA not before:           Thu 12 Mar 2026 20:51:44 +0000
ROA not after:            Thu 11 Mar 2027 20:56:44 +0000
asID:                     264982
IP address blocks:        2804:30f0:280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.crl
                          rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:56:5f:0c:61:65:df:cf:ed:73:1f:0f:ac:36:8a:3f:c8:ba:27:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DE623ACA735E7C30285AC172A3418724D5F1A7B
        Validity
            Not Before: Mar 12 20:51:44 2026 GMT
            Not After : Mar 11 20:56:44 2027 GMT
        Subject: CN=7348E55B8F33D1DF6B72650202922966F7A3C2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:5f:78:66:2c:42:28:fb:e2:e1:01:32:0d:
                    cc:2f:1f:68:e1:5d:eb:04:f9:0a:04:e0:76:65:21:
                    ea:22:c4:9f:4f:8f:9c:c2:df:83:c9:95:af:4a:0a:
                    ed:d9:3c:1f:7b:f8:55:8d:03:b6:25:46:9c:11:ae:
                    78:8b:42:bc:7d:2d:81:e1:e6:f3:f2:74:57:dc:09:
                    63:bd:c1:44:d5:21:71:d9:38:94:0a:ae:a8:80:9a:
                    c7:dd:59:99:6d:55:12:ee:8e:96:13:58:77:7d:9f:
                    08:6f:35:16:6c:e9:5a:5a:f3:b4:b1:1d:8d:c2:7b:
                    81:5b:e4:28:0c:11:2f:d7:6d:6b:36:3b:5c:f9:87:
                    f7:0f:88:cb:82:fb:fb:df:92:36:44:2b:3e:b6:77:
                    2f:ef:ad:80:46:df:6d:39:49:2b:ec:32:f4:df:89:
                    f9:13:fa:53:6f:48:29:13:ab:3d:26:4a:e9:f0:b6:
                    f4:42:4d:09:be:37:94:0b:6d:5e:7b:e4:e1:8a:61:
                    4e:73:85:cd:ff:39:83:c9:7b:5c:e2:84:40:38:79:
                    6a:a6:a6:72:18:01:34:75:ba:21:fc:ce:ba:d4:7f:
                    cb:0a:52:43:c9:42:0d:5f:a3:a9:a6:5e:92:16:25:
                    46:c5:c1:5f:5a:6f:99:c8:be:64:5b:e4:06:d6:87:
                    c1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:48:E5:5B:8F:33:D1:DF:6B:72:65:02:02:92:29:66:F7:A3:C2:FD
            X509v3 Authority Key Identifier:
                keyid:3D:E6:23:AC:A7:35:E7:C3:02:85:AC:17:2A:34:18:72:4D:5F:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/323830343a333066303a3238303a3a2f34312d3431203d3e20323634393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30f0:280::/41

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:c1:5d:90:af:ec:43:f8:5a:ba:30:fe:bc:58:d1:14:36:
         ed:32:f8:ee:d8:b9:0e:1a:92:d8:21:70:b4:d4:c5:a9:23:ba:
         48:73:42:f3:1c:e6:2f:5b:a9:3f:9b:d3:00:d8:0e:75:a0:85:
         0c:11:8d:7c:e5:ba:14:6f:24:56:89:64:bc:70:0f:af:e9:a9:
         41:b2:2f:6b:37:68:e4:51:62:4b:15:be:3d:5e:af:19:7e:af:
         35:0c:e5:d7:a8:b5:f5:52:a7:1c:6f:e2:82:77:03:dc:ed:3f:
         a3:34:eb:de:c3:06:d4:0b:46:cd:53:5d:8a:a5:26:d5:2c:10:
         0b:02:11:3c:a6:28:fa:9d:18:c2:9e:d7:b8:ac:ba:34:82:a7:
         ea:74:11:28:bf:83:c5:05:dc:8c:5d:87:ae:40:0f:b0:3a:56:
         b6:3e:73:64:5a:c9:4f:fd:59:3e:55:ea:90:9f:a4:06:81:3e:
         da:f8:ec:8d:34:2d:b3:67:a9:86:71:bf:ff:b5:9e:e5:2b:a1:
         21:8f:d3:8e:3d:7c:d8:5e:f2:57:7e:2b:5f:d6:3d:bc:5d:ff:
         02:9e:03:d7:4b:9f:b8:e7:74:96:35:69:4a:25:8b:64:01:e4:
         d8:b6:a4:06:17:83:50:0f:eb:1e:3c:8d:95:0e:cc:37:c8:c9:
         93:45:8b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:16 2026 by rpki-client