Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          q1bdZUNN0pNpja/3Y8JhArHpV/oSS3szkWpZISQibDE=
Subject key identifier:   96:BE:39:90:0A:79:88:87:DA:DA:CA:C0:93:BB:97:F4:E2:C2:37:DC
Certificate issuer:       /CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
Certificate serial:       56AECF289996CA42BF7A142F3556AC36E72E29EC
Authority key identifier: FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Mon 16 Mar 2026 19:00:19 +0000
ROA not before:           Mon 16 Mar 2026 18:55:19 +0000
ROA not after:            Mon 15 Mar 2027 19:00:19 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ae:cf:28:99:96:ca:42:bf:7a:14:2f:35:56:ac:36:e7:2e:29:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
        Validity
            Not Before: Mar 16 18:55:19 2026 GMT
            Not After : Mar 15 19:00:19 2027 GMT
        Subject: CN=96BE39900A798887DADACAC093BB97F4E2C237DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:dc:b8:db:07:f6:67:72:0b:62:a5:21:41:
                    08:dd:f3:7c:1c:31:e9:b3:1a:33:e6:72:87:0e:02:
                    7b:ba:b6:04:19:7a:75:35:91:a2:dc:a9:60:da:6e:
                    c9:94:6f:49:83:12:0b:8b:0f:d9:8d:5c:42:09:8f:
                    83:b5:73:9e:e2:e1:fa:c3:b0:e9:e1:0d:41:63:9d:
                    28:0d:66:0d:7f:f2:b2:53:04:4f:2b:15:5b:21:f6:
                    21:db:ce:2d:e4:e0:a8:fc:0d:93:ac:4b:e1:e3:b3:
                    f8:20:fd:de:c8:78:92:b1:c8:d7:94:52:41:49:bb:
                    02:db:b9:8d:df:63:ac:42:c0:29:10:49:3a:ac:ba:
                    f4:74:e2:dc:25:13:f5:4e:ec:92:4b:80:9f:da:82:
                    af:e7:da:f0:f7:3d:fb:d5:04:74:72:09:4b:f6:cb:
                    5e:6c:aa:9f:2b:63:ea:b5:ce:aa:8b:b6:30:42:6f:
                    46:82:88:31:f8:4a:20:36:84:ae:65:c8:2d:2d:f6:
                    7f:f4:c0:dc:9e:10:df:a0:41:75:d2:2a:6a:5d:cb:
                    de:28:00:38:0a:1c:f2:ae:11:0a:8f:d6:b0:33:4a:
                    34:da:53:3c:96:e2:fd:d5:6f:53:ca:c6:4d:96:78:
                    59:a3:1d:33:ff:a2:82:6b:5b:06:32:6d:90:56:50:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BE:39:90:0A:79:88:87:DA:DA:CA:C0:93:BB:97:F4:E2:C2:37:DC
            X509v3 Authority Key Identifier:
                keyid:FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:45:55:fb:a0:f5:58:7c:55:83:c0:dc:6c:ae:4b:f3:71:26:
         ff:24:22:c4:6d:80:88:b4:04:48:ba:ce:ef:b7:c5:ea:03:f5:
         23:d5:3c:34:f9:e0:2a:92:84:77:a3:e1:3a:6f:7f:11:da:bc:
         79:c1:a7:49:fa:d3:98:1b:80:3f:54:71:60:5e:48:a0:c2:7e:
         55:2c:e9:f5:b4:b2:14:f2:c0:c5:27:a0:77:bd:01:91:40:6f:
         59:4a:fa:04:8f:8b:31:cb:b4:ea:d1:74:02:33:08:42:21:94:
         4c:04:fe:65:7c:48:66:92:dd:84:20:b6:e5:7f:58:7f:4a:bb:
         10:91:39:91:9d:82:7f:91:20:b9:eb:5b:f2:bc:df:30:43:b9:
         01:79:e7:ac:a4:5c:ef:6a:19:ad:6c:ef:14:cf:2f:f4:20:b4:
         a8:4b:79:0f:56:48:fe:2b:a2:d5:24:7d:0e:73:9f:4c:af:8a:
         a1:d6:74:db:47:f9:97:ef:77:0c:39:e0:ef:a4:1a:00:0d:3d:
         1f:71:22:9e:ab:87:af:44:ec:c5:8d:6a:82:13:ca:81:ee:b3:
         42:d2:7d:12:35:8c:15:b0:1a:77:ff:aa:e5:56:82:98:35:f5:
         7e:ea:bd:e2:97:da:6c:d1:e7:e0:ab:b9:e6:c3:69:28:a2:90:
         2f:52:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:57:45 2026 by rpki-client