Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/323830343a353634383a3a2f33332d3333203d3e20323637393838.roa
File:                     323830343a353634383a3a2f33332d3333203d3e20323637393838.roa (raw, json)
Hash identifier:          OJ89blxRXjolU9AlZuPc+2uD5gWAQs3cBAQz0FUPEIM=
Subject key identifier:   B0:52:11:97:38:B8:68:7A:0B:71:37:B2:83:5D:89:48:96:63:70:C4
Certificate issuer:       /CN=73CDB88FDB601C8E995F621637B4D0A09C0500F1
Certificate serial:       0A83B5A700784DED21A44E243909D3A13C8EFE83
Authority key identifier: 73:CD:B8:8F:DB:60:1C:8E:99:5F:62:16:37:B4:D0:A0:9C:05:00:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73CDB88FDB601C8E995F621637B4D0A09C0500F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/323830343a353634383a3a2f33332d3333203d3e20323637393838.roa
Signing time:             Thu 19 Mar 2026 15:11:54 +0000
ROA not before:           Thu 19 Mar 2026 15:06:54 +0000
ROA not after:            Thu 18 Mar 2027 15:11:54 +0000
asID:                     267988
IP address blocks:        2804:5648::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/73CDB88FDB601C8E995F621637B4D0A09C0500F1.crl
                          rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/73CDB88FDB601C8E995F621637B4D0A09C0500F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73CDB88FDB601C8E995F621637B4D0A09C0500F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:83:b5:a7:00:78:4d:ed:21:a4:4e:24:39:09:d3:a1:3c:8e:fe:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73CDB88FDB601C8E995F621637B4D0A09C0500F1
        Validity
            Not Before: Mar 19 15:06:54 2026 GMT
            Not After : Mar 18 15:11:54 2027 GMT
        Subject: CN=B052119738B8687A0B7137B2835D8948966370C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:b6:ce:20:66:e7:35:0d:7d:f9:b8:a1:c0:
                    36:9d:0d:d2:1e:4f:62:a4:af:5c:bc:56:fd:c1:bc:
                    84:59:6a:41:8a:71:96:5e:3e:4c:71:85:f9:2e:d0:
                    99:fb:49:cd:cc:f8:4e:7e:25:0b:df:fc:07:a5:bb:
                    e7:68:7e:0e:46:b0:03:2d:ba:72:25:75:5d:e4:21:
                    73:fc:bc:4d:24:c9:14:a2:42:d1:96:64:c3:57:ff:
                    f6:ef:47:96:9d:bf:05:08:44:5b:f9:7f:8d:6c:36:
                    d9:43:ba:4e:65:40:83:ad:e1:e7:f8:62:1e:d4:e4:
                    68:e6:2b:db:e9:e6:7e:1c:a9:8e:87:cd:d4:82:25:
                    90:d4:00:e7:c6:37:34:25:37:3a:1d:fd:a9:a2:e7:
                    73:b9:e4:b2:8e:08:c7:f2:a1:fd:e4:ef:f9:ed:36:
                    ac:d5:3b:94:d1:75:54:65:d4:af:bf:84:b4:87:ac:
                    9f:53:5e:75:3b:e2:78:24:6c:5c:0c:b1:71:55:b3:
                    21:ed:de:0a:bb:4f:75:fc:08:84:ea:06:71:c7:43:
                    6d:7a:c9:48:97:e1:4d:f4:2a:0f:c7:7e:1d:23:75:
                    9c:ab:fc:5c:f8:bb:ce:b1:d1:e1:e1:a2:9d:68:52:
                    61:0c:dd:43:be:f4:3f:79:4c:70:6c:7e:42:0b:ba:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:52:11:97:38:B8:68:7A:0B:71:37:B2:83:5D:89:48:96:63:70:C4
            X509v3 Authority Key Identifier:
                keyid:73:CD:B8:8F:DB:60:1C:8E:99:5F:62:16:37:B4:D0:A0:9C:05:00:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/73CDB88FDB601C8E995F621637B4D0A09C0500F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73CDB88FDB601C8E995F621637B4D0A09C0500F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/323830343a353634383a3a2f33332d3333203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5648::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:46:19:4f:5a:7e:80:36:f5:1b:1f:06:84:32:0b:87:1b:66:
         91:54:45:0e:f6:6c:ac:a7:16:af:9b:6b:9b:d8:a3:dd:9d:07:
         0e:da:5a:5f:78:da:9b:38:d3:38:f1:54:ff:87:25:21:34:1b:
         29:68:83:aa:28:e5:ea:d4:f6:36:ad:5e:68:17:9c:40:ce:96:
         eb:8e:5f:21:57:1a:1e:a5:17:68:91:6c:2c:ab:30:b6:39:ca:
         f2:12:bc:a2:7a:dc:c5:43:67:c8:d9:10:e3:82:6b:d4:23:8d:
         aa:dd:6b:ba:b8:38:f9:52:f0:f6:f7:89:ca:6d:5d:d4:c9:0b:
         71:5a:94:14:00:3b:66:4d:a3:39:f6:9c:cf:d5:a9:e4:63:73:
         f7:ca:94:5e:9c:9d:2c:5c:2c:08:91:fc:a2:e7:2e:ab:ce:00:
         98:9c:33:c8:3d:de:bb:20:93:db:b6:37:f6:22:91:f9:3a:6f:
         e4:71:82:7e:d7:3c:d7:43:1e:c6:90:21:71:09:eb:00:bf:b9:
         b2:24:b4:7b:9e:93:f7:76:d2:aa:70:6a:38:f2:25:d9:0a:83:
         ed:05:82:3a:f2:fc:c9:b7:06:8d:5d:b7:c6:25:84:44:99:8a:
         d2:5b:4b:d7:9d:2d:0b:e2:48:a0:f5:24:b2:7b:d6:9f:97:ec:
         ec:c5:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:25 2026 by rpki-client