Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33342d3334203d3e20323637363038.roa
File:                     323830343a343433303a3a2f33342d3334203d3e20323637363038.roa (raw, json)
Hash identifier:          3WDPEg2LUiq/7m5AAdxCHKGRmSh8armH8199E9RS4rQ=
Subject key identifier:   16:92:5F:58:C9:2C:DD:A3:61:5E:34:26:72:B0:FC:5C:13:32:F7:13
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       0C8F24E3BF5D3B5B72C012C93B77F8FE84828ABD
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33342d3334203d3e20323637363038.roa
Signing time:             Sat 02 May 2026 00:03:20 +0000
ROA not before:           Fri 01 May 2026 23:58:20 +0000
ROA not after:            Sat 01 May 2027 00:03:20 +0000
asID:                     267608
IP address blocks:        2804:4430::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8f:24:e3:bf:5d:3b:5b:72:c0:12:c9:3b:77:f8:fe:84:82:8a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May  1 23:58:20 2026 GMT
            Not After : May  1 00:03:20 2027 GMT
        Subject: CN=16925F58C92CDDA3615E342672B0FC5C1332F713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:8c:42:5e:6e:22:8d:79:cc:7e:38:a9:64:
                    ab:1b:20:3c:1e:1b:ab:59:a9:f4:4a:e5:df:81:b4:
                    eb:2d:10:85:cd:da:6d:b1:fd:b3:f3:e1:6e:85:2e:
                    00:45:83:88:d1:c2:5f:dc:ce:b6:70:48:55:45:c0:
                    e6:bf:d0:2d:36:27:be:e7:e7:e1:a9:b7:d0:1f:13:
                    bc:0a:58:f0:e9:40:a9:c3:56:4b:c3:a9:1c:47:c4:
                    b2:e4:39:6a:68:1c:59:02:77:03:ba:89:18:a3:d7:
                    c8:02:82:4a:5a:c5:d5:50:29:6c:a9:9d:92:c6:62:
                    46:c5:10:23:83:d2:e6:f1:c8:8e:0c:f4:eb:c7:f9:
                    45:ac:f9:88:b9:5f:72:aa:b7:62:93:81:42:f1:26:
                    97:e4:30:6d:6d:1d:c8:0e:ca:fe:26:7a:89:32:9b:
                    11:d5:12:5d:f1:3f:c4:29:13:e6:5b:43:1d:ad:ff:
                    11:55:9c:da:c0:b9:af:ab:80:e4:31:f0:47:f5:56:
                    1c:81:84:57:55:2c:66:dd:ee:8e:b7:73:a7:f5:5c:
                    89:f8:96:56:a8:6f:ff:57:3d:d6:23:04:68:f5:e5:
                    51:e4:06:8b:8d:85:9a:7a:36:05:75:29:6e:ec:05:
                    ce:11:03:7e:1c:88:02:a4:06:c2:53:b0:6d:e1:c2:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:92:5F:58:C9:2C:DD:A3:61:5E:34:26:72:B0:FC:5C:13:32:F7:13
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33342d3334203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4430::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:18:c3:29:79:56:b8:1f:6b:18:18:27:30:f7:31:46:e8:
         43:02:bb:23:a9:18:16:9d:19:62:6f:50:75:b2:56:98:f9:cb:
         83:98:b8:52:59:00:a4:ae:5c:e8:b5:29:0e:e3:b7:8c:b6:cb:
         e1:0d:49:7a:eb:5b:8d:1b:63:6c:6b:ea:ae:f9:ce:55:5e:2a:
         d1:35:91:76:a7:40:f6:68:4f:11:1c:2f:cf:ed:07:af:0f:a2:
         38:c6:b9:eb:d4:9b:e6:65:0a:8d:39:4c:37:49:b4:20:82:75:
         6c:c5:02:85:ea:18:a9:2e:da:3f:a9:5d:13:64:c2:6d:40:3a:
         76:d2:15:8d:7f:aa:07:ee:bf:30:93:4e:4c:dc:0c:76:a9:f8:
         75:f6:73:be:4a:e6:4b:1a:61:87:ae:d4:10:de:da:a9:70:9b:
         95:12:8f:11:11:be:52:11:7d:8c:8e:88:65:a4:45:ea:55:28:
         c2:d7:66:c0:76:5b:8d:ac:41:f7:30:82:b3:99:4c:f3:2b:26:
         f3:d3:a5:e1:d3:f3:5a:7b:62:99:3f:73:94:25:6f:cc:40:26:
         5a:78:b2:8e:1a:44:2a:6d:94:64:5e:60:f7:e2:54:48:56:70:
         32:2f:70:19:23:a2:5b:6f:14:38:4f:7d:3a:0d:12:05:04:c6:
         b1:c6:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:21:48 2026 by rpki-client