Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/323830343a343161633a3a2f33322d313238203d3e20323637343439.roa
File:                     323830343a343161633a3a2f33322d313238203d3e20323637343439.roa (raw, json)
Hash identifier:          ZdtGzjBqyt2WSq58xHIibyD9OjUCIB0EIJC3e10UsHs=
Subject key identifier:   DF:39:AE:26:B4:A6:90:B9:97:E6:DA:4C:48:F6:AA:B7:5E:31:17:A3
Certificate issuer:       /CN=73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D
Certificate serial:       14236AB831AB621AE2FB82F4E67317ACDB46B563
Authority key identifier: 73:E6:92:B6:D2:C4:B4:C4:E4:5C:9E:CC:BD:AD:DE:3F:8E:F0:B0:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/323830343a343161633a3a2f33322d313238203d3e20323637343439.roa
Signing time:             Mon 27 Apr 2026 18:14:05 +0000
ROA not before:           Mon 27 Apr 2026 18:09:05 +0000
ROA not after:            Mon 26 Apr 2027 18:14:05 +0000
asID:                     267449
IP address blocks:        2804:41ac::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.crl
                          rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:23:6a:b8:31:ab:62:1a:e2:fb:82:f4:e6:73:17:ac:db:46:b5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D
        Validity
            Not Before: Apr 27 18:09:05 2026 GMT
            Not After : Apr 26 18:14:05 2027 GMT
        Subject: CN=DF39AE26B4A690B997E6DA4C48F6AAB75E3117A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:98:30:ce:89:78:9b:9c:6b:99:90:78:62:
                    32:55:55:08:a5:34:4f:14:73:65:11:2a:91:16:5c:
                    14:19:28:f5:41:d6:ed:ce:1c:ef:e5:d5:09:88:29:
                    f8:2d:11:ef:02:09:ac:2f:46:7d:ec:d5:71:8d:48:
                    1f:87:ec:7f:f1:c0:98:d5:54:28:f0:21:ff:3a:ed:
                    c8:58:0d:49:2c:cf:c5:ed:65:33:63:83:b0:30:a5:
                    12:fb:23:b6:65:00:fb:95:e0:0e:83:5e:16:34:1c:
                    ba:af:57:2c:52:a4:73:ae:aa:39:5c:e0:ea:55:cc:
                    92:23:3c:9c:f8:b3:f4:e8:36:0c:27:bd:da:5c:e4:
                    6e:b3:d2:5f:64:09:23:16:b3:18:8f:fc:b5:a5:b3:
                    60:98:96:e3:5c:47:39:29:80:90:d9:20:23:8a:61:
                    2e:bc:8c:2f:4a:71:84:48:27:16:fb:16:1a:27:1c:
                    b3:cd:06:a0:ac:e6:0d:08:3a:e8:d5:df:5e:0c:15:
                    fc:35:55:2e:3b:2f:5c:9c:3a:b5:fb:c1:32:0e:c2:
                    80:20:c6:30:cc:f0:27:c3:ca:83:eb:2a:a1:c4:c6:
                    eb:25:10:fd:4e:5f:b2:36:31:f1:5f:59:f0:61:55:
                    cc:cc:57:37:30:2e:c3:68:b2:66:0c:b2:3c:f8:83:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:39:AE:26:B4:A6:90:B9:97:E6:DA:4C:48:F6:AA:B7:5E:31:17:A3
            X509v3 Authority Key Identifier:
                keyid:73:E6:92:B6:D2:C4:B4:C4:E4:5C:9E:CC:BD:AD:DE:3F:8E:F0:B0:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/323830343a343161633a3a2f33322d313238203d3e20323637343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:42:16:5d:e1:11:9d:36:10:84:8b:6e:a1:fd:f8:75:a9:8f:
         23:4a:57:29:da:30:22:aa:83:5a:72:81:33:e1:47:33:db:ac:
         a2:08:fb:92:af:ce:05:cb:20:2f:c5:1b:15:e0:80:20:97:a0:
         92:c6:96:b3:dd:b8:8b:e2:ab:e0:dc:14:4c:f8:46:16:6a:a2:
         62:b3:17:93:85:6b:3e:e0:a9:c5:c7:93:05:34:31:d6:9b:d5:
         7e:3d:82:a6:2b:b7:cf:01:32:85:66:3f:ae:85:58:0c:40:d3:
         25:52:25:0c:30:c3:17:8c:77:c4:ba:2f:3d:58:3d:60:3a:5f:
         7a:f7:f6:23:c7:39:de:02:b0:3d:ca:d2:0e:5e:23:32:5d:b0:
         66:e6:36:f6:3a:38:63:aa:17:2d:c7:73:d5:57:67:94:43:f0:
         9e:ba:41:4f:b3:7a:c2:37:fc:4d:51:2e:b9:6c:63:98:93:da:
         dd:7f:5f:67:4b:aa:2b:24:9d:f9:c7:9e:43:b3:ae:c7:9d:e7:
         79:bc:4c:60:fe:83:32:d6:1e:56:91:62:ca:1d:0e:63:25:1e:
         eb:4f:5d:3b:78:f8:ab:d8:2f:e6:92:23:75:9c:f2:e0:9f:d1:
         2d:ab:be:a0:6c:6a:23:b9:43:f6:b9:81:f6:5d:8e:c2:bb:d7:
         8e:23:76:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:39:40 2026 by rpki-client