Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
File:                     323830343a3261633a3a2f33322d3634203d3e203238333030.roa (raw, json)
Hash identifier:          0kxJID5UM1VJk2EG4bcwF3uM+qo8IFpYlZk8VbTAtQI=
Subject key identifier:   6E:95:8F:C9:28:1F:4A:76:D1:48:3B:9C:63:54:A4:70:B9:8A:1B:89
Certificate issuer:       /CN=AD2A9EAA0D8113E73A6CFCE555B59055FBE53065
Certificate serial:       5C39720AB1DF10845BE2ED431730DEBA7D0CAD54
Authority key identifier: AD:2A:9E:AA:0D:81:13:E7:3A:6C:FC:E5:55:B5:90:55:FB:E5:30:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
Signing time:             Thu 12 Mar 2026 00:40:48 +0000
ROA not before:           Thu 12 Mar 2026 00:35:48 +0000
ROA not after:            Thu 11 Mar 2027 00:40:48 +0000
asID:                     28300
IP address blocks:        2804:2ac::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.crl
                          rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 23:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:39:72:0a:b1:df:10:84:5b:e2:ed:43:17:30:de:ba:7d:0c:ad:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2A9EAA0D8113E73A6CFCE555B59055FBE53065
        Validity
            Not Before: Mar 12 00:35:48 2026 GMT
            Not After : Mar 11 00:40:48 2027 GMT
        Subject: CN=6E958FC9281F4A76D1483B9C6354A470B98A1B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:62:28:92:3a:a5:97:41:ae:03:c2:e8:e7:
                    d2:1a:ae:76:55:12:9b:87:83:8d:de:59:cb:db:9e:
                    70:96:e7:f9:42:c7:a0:7a:fe:ca:51:28:f3:54:88:
                    52:9f:68:17:17:2e:1f:1c:e4:17:88:95:96:48:e3:
                    55:a2:cb:92:90:24:11:ff:3d:f5:90:83:4d:8e:a1:
                    3d:83:97:84:eb:31:78:31:eb:cf:84:c3:1f:d3:48:
                    8e:29:61:47:eb:7e:51:9b:fc:2f:4f:04:d7:fb:36:
                    30:59:29:36:e6:2d:8b:01:50:52:cb:5d:22:46:95:
                    37:16:05:7c:a2:4a:f8:93:d7:89:8d:81:46:1c:9f:
                    1d:41:50:0c:8d:4c:52:fd:81:46:96:5c:29:97:57:
                    5e:6f:cb:2b:9e:88:00:d7:1d:67:f4:26:13:08:05:
                    9f:98:15:c5:54:d2:fc:4c:77:4b:1d:5e:93:2d:5e:
                    2f:91:67:44:8e:99:0a:51:28:72:43:cc:3d:5e:df:
                    b3:78:8b:34:0e:c3:d9:d9:8f:f9:2b:45:c1:35:99:
                    09:cd:fd:96:8c:07:bb:91:e2:5b:04:f2:f5:6c:bc:
                    0f:d6:07:e1:ec:96:83:3a:d3:21:5b:9c:c3:ef:ce:
                    17:d2:c7:21:25:02:8d:c9:03:17:6e:cf:57:d0:e4:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:8F:C9:28:1F:4A:76:D1:48:3B:9C:63:54:A4:70:B9:8A:1B:89
            X509v3 Authority Key Identifier:
                keyid:AD:2A:9E:AA:0D:81:13:E7:3A:6C:FC:E5:55:B5:90:55:FB:E5:30:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2A9EAA0D8113E73A6CFCE555B59055FBE53065.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/323830343a3261633a3a2f33322d3634203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:da:99:79:8d:03:21:ec:5a:67:fc:af:76:72:38:35:e6:34:
         14:9e:63:3b:83:a1:45:48:9d:a9:16:4a:cf:f2:d3:c3:67:6d:
         5a:75:18:55:7a:83:b5:14:ec:f6:32:f0:42:df:32:aa:fc:19:
         4d:55:4c:1c:17:a3:5c:2a:54:8a:36:b5:31:36:58:4d:98:59:
         52:31:3a:47:ac:9e:2f:0a:1d:f7:9c:1c:91:3a:22:70:fa:3d:
         61:5a:71:dc:01:4f:2e:a5:50:e4:28:fe:0e:a1:91:9a:67:5b:
         25:99:47:ef:64:fb:a6:f9:9f:81:95:39:f9:13:b0:49:37:32:
         a3:50:76:d6:31:99:9d:20:2e:d6:bb:6c:9c:a5:94:57:cc:ca:
         81:d3:31:db:3b:47:48:40:f1:cc:25:9b:33:f1:dc:49:a9:a1:
         92:d5:af:a2:40:12:d8:e0:33:75:5a:8c:e1:e7:71:f6:65:07:
         e5:58:67:9f:c1:59:65:df:43:28:52:63:a1:b5:0a:eb:71:1c:
         d6:4b:ac:30:34:30:ee:4b:80:50:91:8e:2a:37:fb:fa:66:3e:
         f2:f8:7c:90:70:da:14:e6:ee:41:72:5a:8d:af:4f:59:90:15:
         4d:31:5a:47:e8:f4:bf:a5:94:5e:c4:c1:2e:bd:61:44:4e:c4:
         0d:73:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:23:51 2026 by rpki-client