Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33332d3333203d3e20323637363038.roa
File:                     323830343a343433303a3a2f33332d3333203d3e20323637363038.roa (raw, json)
Hash identifier:          +6Mm6Qemhg4FodnEufI/PmNZo3BG2WmHK7cSBF3Fcvc=
Subject key identifier:   41:2A:F0:A8:D3:F6:6D:34:FC:8C:F8:EF:26:30:51:68:CE:4F:A1:B7
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       66995B96BE0E7431EE9788166D4414B7424261B6
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33332d3333203d3e20323637363038.roa
Signing time:             Sat 02 May 2026 00:03:20 +0000
ROA not before:           Fri 01 May 2026 23:58:20 +0000
ROA not after:            Sat 01 May 2027 00:03:20 +0000
asID:                     267608
IP address blocks:        2804:4430::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:99:5b:96:be:0e:74:31:ee:97:88:16:6d:44:14:b7:42:42:61:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May  1 23:58:20 2026 GMT
            Not After : May  1 00:03:20 2027 GMT
        Subject: CN=412AF0A8D3F66D34FC8CF8EF26305168CE4FA1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:71:84:2b:67:35:e0:79:4a:7b:3c:64:52:
                    fe:a2:66:0f:69:68:5a:d1:d6:56:b7:4f:36:33:1f:
                    ba:1d:27:77:4e:7c:e3:08:26:3d:15:49:e5:ab:67:
                    5a:ed:45:36:c2:ba:8a:f4:37:b5:52:fc:17:74:66:
                    f7:88:64:bc:2a:a9:e7:2f:94:0d:90:40:31:17:e5:
                    8e:4f:fc:eb:79:73:8f:2e:6f:d6:42:c8:f2:bf:cc:
                    c6:0b:bd:6e:13:11:b4:6f:85:80:70:a5:90:71:83:
                    9c:d2:bf:ca:5c:04:38:6c:97:9b:82:40:65:db:83:
                    5c:3a:7f:18:37:e8:43:95:db:0c:d6:54:54:d4:9a:
                    c3:52:79:bd:e9:e1:30:59:5c:11:99:2b:87:17:08:
                    17:53:1f:2d:03:f5:38:1c:fb:b5:ef:df:e4:68:8d:
                    19:95:b7:09:3f:48:ce:14:36:97:c1:4e:e3:0f:8c:
                    c8:a5:1f:fa:a8:aa:dd:d8:34:e5:c1:1c:36:d5:03:
                    63:a7:38:69:06:c5:e7:65:1e:28:96:f0:43:51:1c:
                    b8:fe:82:f2:fe:e4:87:13:0a:69:49:71:0b:c3:d3:
                    0d:ba:3b:c8:ca:71:32:37:8a:d0:e1:8a:ca:dd:a0:
                    05:8c:a2:0f:39:95:08:4e:ed:54:e6:4d:dd:4d:c0:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2A:F0:A8:D3:F6:6D:34:FC:8C:F8:EF:26:30:51:68:CE:4F:A1:B7
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33332d3333203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4430::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:87:13:b9:24:88:5f:59:da:a3:30:7c:41:8a:61:d7:c9:a8:
         32:8a:b5:d1:38:da:c5:e5:3f:ff:9c:d3:3f:a2:ef:05:e0:97:
         f7:bc:7d:2f:9a:67:da:71:f8:1f:33:d5:e3:e3:1c:01:d4:f8:
         0d:37:21:5c:55:f2:67:1d:26:b6:4e:1e:54:26:05:7a:1f:9d:
         10:e2:98:3d:15:75:10:ec:54:da:eb:c5:54:37:ee:98:3f:de:
         af:9a:74:a1:01:c6:bd:ad:64:d1:3e:94:be:c5:32:94:60:5c:
         0e:8d:96:98:fb:41:ae:70:be:e4:a6:1c:40:e9:ed:e1:72:8d:
         64:74:a1:33:18:02:35:b0:75:e5:cf:60:4f:e3:ea:ca:a1:2e:
         c5:b3:a9:9f:a7:b1:a3:93:86:45:c0:3b:44:f3:6b:54:b0:62:
         c4:46:39:f4:19:4c:58:95:df:ec:ab:29:c4:f7:cc:cc:9e:46:
         92:68:b3:9c:9c:42:44:e7:0a:cf:b5:0b:af:f5:32:c9:ce:a2:
         06:a1:65:fd:09:fc:09:1d:86:5c:cc:c6:2d:d5:dd:6f:48:27:
         10:73:d6:9c:24:64:d7:d0:a0:e3:1a:23:35:2f:c5:be:e4:f5:
         51:1a:4b:9c:dc:54:2c:60:45:4d:1c:2c:69:12:b1:52:f5:fd:
         5b:45:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:44:48 2026 by rpki-client