Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa (raw, json)
Hash identifier:          zPDPjwoduvIcpGOuvKzQ03yGkkrG3A09yEpsZMRniZw=
Subject key identifier:   E3:18:DD:8A:5F:94:4B:85:95:85:C0:24:2B:7E:C7:B1:5A:61:65:E7
Certificate issuer:       /CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
Certificate serial:       7B0C4352B99D02092C728CA981F6438E1DFE5B77
Authority key identifier: FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa
Signing time:             Mon 16 Mar 2026 19:00:16 +0000
ROA not before:           Mon 16 Mar 2026 18:55:16 +0000
ROA not after:            Mon 15 Mar 2027 19:00:16 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0c:43:52:b9:9d:02:09:2c:72:8c:a9:81:f6:43:8e:1d:fe:5b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
        Validity
            Not Before: Mar 16 18:55:16 2026 GMT
            Not After : Mar 15 19:00:16 2027 GMT
        Subject: CN=E318DD8A5F944B859585C0242B7EC7B15A6165E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:62:b3:15:5b:a5:1f:d5:88:00:87:c6:24:
                    4f:d4:23:97:c7:c6:3b:ae:82:5a:4a:e9:45:84:e1:
                    7c:04:5a:8f:a3:96:80:32:df:db:98:56:52:aa:90:
                    46:cd:9d:2e:ba:87:52:36:d1:30:46:cc:38:0e:7d:
                    e3:55:d8:e3:a1:30:ce:49:44:18:91:0b:75:a0:69:
                    14:ad:a9:d9:44:96:b4:a8:11:1b:24:05:69:2e:a8:
                    bd:e3:8e:9d:55:5a:ab:46:e4:e8:8f:86:75:af:98:
                    54:93:66:24:a8:68:7b:1a:21:b5:73:c6:73:ea:69:
                    5f:04:e8:95:92:0f:9f:70:69:2c:f7:56:e8:84:94:
                    d6:6c:e1:2b:4c:99:ba:be:1d:ba:8e:bb:5d:fb:bd:
                    5c:12:48:8b:d5:84:cb:0e:f6:8c:ee:23:45:3c:fe:
                    47:77:b6:df:31:08:6a:d6:fa:b6:2e:05:d9:af:f8:
                    9b:80:60:9a:62:c2:5f:fb:c8:85:b4:5a:bb:81:48:
                    89:4c:2a:cb:e0:32:4f:6a:63:a5:e6:c1:43:c3:71:
                    a5:50:c3:85:ef:5d:a4:58:88:47:e8:7a:30:a1:f6:
                    76:d1:33:b5:a0:51:6d:b7:f2:a7:24:81:8a:1a:34:
                    38:c0:8f:50:c4:9b:0b:9a:a0:09:67:6f:d8:62:3f:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:18:DD:8A:5F:94:4B:85:95:85:C0:24:2B:7E:C7:B1:5A:61:65:E7
            X509v3 Authority Key Identifier:
                keyid:FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:dc:66:8f:7f:78:0d:ff:4a:9a:1b:bc:a4:65:37:af:94:
         81:aa:a6:04:13:58:a6:83:34:4b:a0:20:86:2e:26:96:96:63:
         6a:3a:43:22:ac:df:f3:77:70:43:a6:6c:cc:a5:42:32:ab:6c:
         91:6e:16:f9:f3:e1:08:b7:cf:ec:98:9d:a7:21:ee:dd:90:da:
         a2:d2:b9:3c:05:8f:68:05:31:58:ca:a3:04:fc:f9:76:10:66:
         c8:b4:97:14:cb:cb:0a:4c:b9:b5:33:10:fb:e5:11:a5:45:82:
         3c:9c:1b:ae:bd:aa:1f:35:ac:a2:68:14:15:51:a8:6e:75:12:
         b1:b8:6d:e7:44:a1:2a:b1:02:aa:72:cf:3c:12:6b:6b:5c:96:
         de:7e:a1:97:ea:58:0f:21:be:ab:ad:f6:03:17:d0:74:e3:52:
         7a:3b:b1:b4:3a:98:af:b6:aa:f7:dc:a1:de:e0:2d:38:d4:2a:
         92:49:7d:1b:e1:e2:e3:ee:83:0c:a2:a7:eb:b8:a8:76:36:92:
         26:1d:1d:7f:15:c9:64:f8:4b:71:8d:91:c9:c9:9c:1d:95:55:
         b0:80:33:8a:2d:09:2e:c3:7a:0c:8b:c4:cd:87:93:5e:56:14:
         3f:b0:1f:9b:81:b4:23:9f:72:50:63:1e:37:dd:89:74:d5:67:
         d9:d4:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:56:41 2026 by rpki-client