Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa
File:                     323830343a373638343a3a2f33332d3333203d3e20323731313137.roa (raw, json)
Hash identifier:          sDnomINrN8PF1xlBxZ1I5kJjJKde7NY0MU4WM6m3+QA=
Subject key identifier:   BD:3A:FC:29:BC:69:CF:E5:D7:C4:6F:82:B2:24:C1:62:92:71:55:57
Certificate issuer:       /CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
Certificate serial:       2D6EA89513CD2107E4168B465BDA74440CB19DC7
Authority key identifier: FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa
Signing time:             Mon 16 Mar 2026 18:59:57 +0000
ROA not before:           Mon 16 Mar 2026 18:54:57 +0000
ROA not after:            Mon 15 Mar 2027 18:59:57 +0000
asID:                     271117
IP address blocks:        2804:7684::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6e:a8:95:13:cd:21:07:e4:16:8b:46:5b:da:74:44:0c:b1:9d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
        Validity
            Not Before: Mar 16 18:54:57 2026 GMT
            Not After : Mar 15 18:59:57 2027 GMT
        Subject: CN=BD3AFC29BC69CFE5D7C46F82B224C16292715557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:0e:8d:8e:2f:3d:d7:4d:c3:f7:8f:3f:f9:
                    91:6f:be:f0:56:ef:35:67:37:9a:ca:ce:ca:13:90:
                    6a:61:2d:46:1a:67:e7:04:7e:cd:64:64:f5:80:c1:
                    2a:00:41:86:5b:55:65:d6:4f:ab:7e:ce:81:d4:45:
                    20:e6:29:7d:65:4c:d1:06:8b:20:b8:0c:3f:b3:c8:
                    9f:29:ff:88:1d:bb:c4:34:39:cf:77:a3:63:f1:d9:
                    84:0b:0a:70:5f:81:5f:29:eb:a1:c8:36:c6:b7:7f:
                    a7:4a:5f:20:d5:a4:db:95:4c:4d:fa:8d:64:b0:c9:
                    ad:63:b4:85:65:d2:a5:4d:0e:d3:32:bd:a5:c2:22:
                    65:20:22:27:46:9f:bb:4e:3d:ec:a0:b7:7b:c0:88:
                    77:d3:1a:39:85:98:e0:8e:62:d0:c9:48:c8:7d:85:
                    45:0b:b7:f1:af:99:a2:4b:de:97:42:03:86:40:6c:
                    c5:68:9b:ed:28:53:28:79:9f:5f:a6:75:1b:15:8c:
                    79:f6:3a:56:4e:eb:17:73:69:7c:f2:d3:23:da:b3:
                    22:f5:04:64:8a:83:8b:f0:f2:67:83:f7:25:b6:c5:
                    ce:04:f6:72:f4:ec:27:0a:4d:d1:5a:d4:a1:40:74:
                    ea:07:52:66:60:48:04:09:85:13:4d:35:dc:e6:2b:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3A:FC:29:BC:69:CF:E5:D7:C4:6F:82:B2:24:C1:62:92:71:55:57
            X509v3 Authority Key Identifier:
                keyid:FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:8b:4f:da:0c:f9:b8:ec:46:f5:eb:5e:00:8f:96:2e:dd:6f:
         5a:89:c7:2c:aa:4d:3d:44:c2:9a:a0:99:a8:7c:e6:da:a0:d5:
         44:ad:2c:e0:a0:cd:f7:f0:9a:48:df:a7:b8:b1:ca:03:3c:72:
         61:c9:67:81:5f:c6:dc:9d:d3:74:ec:e0:d3:3a:0e:39:be:00:
         5d:2b:21:b4:b2:12:42:a7:a5:24:fb:6d:ef:81:06:19:67:29:
         1a:82:65:87:12:fe:c7:a1:bc:d6:71:81:22:c9:34:ce:92:7c:
         d1:d5:34:af:3d:ca:67:0f:44:04:19:00:ef:1e:a5:27:9f:1e:
         1a:11:b9:a4:ba:b6:5e:b6:89:f9:94:35:05:c4:86:af:a7:d2:
         be:ae:cf:40:53:10:1f:91:5b:e6:ea:a6:b0:a1:61:99:c6:91:
         6a:63:fa:00:f9:60:c1:ca:bf:f9:f1:64:88:35:c7:23:3e:f4:
         14:dc:fe:8a:0b:5c:07:7f:a7:33:f8:52:0a:5f:4f:84:64:a8:
         dc:04:15:d9:2b:89:cf:38:77:28:b4:b6:90:15:e4:17:d0:96:
         d9:84:6f:c4:40:b0:e5:72:2d:2d:2b:e1:d5:22:da:db:86:12:
         14:39:d6:5d:ab:3d:9a:05:8e:3b:26:4b:df:57:06:85:d4:73:
         fd:8d:1d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:33 2026 by rpki-client