Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d313238203d3e203631393339.roa
File:                     323830343a313838633a3a2f33322d313238203d3e203631393339.roa (raw, json)
Hash identifier:          r0sAOrwALk90vhCFY+SkiJV3smIjQ3FbEG1QzGe8ygA=
Subject key identifier:   62:EB:08:69:D2:2A:E7:CB:C7:84:2E:30:A0:17:A4:54:2F:B5:25:7B
Certificate issuer:       /CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
Certificate serial:       62AD9A45F8C60C3BA559084BA5F527BE6231AC85
Authority key identifier: 86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d313238203d3e203631393339.roa
Signing time:             Fri 20 Mar 2026 20:30:26 +0000
ROA not before:           Fri 20 Mar 2026 20:25:26 +0000
ROA not after:            Fri 19 Mar 2027 20:30:26 +0000
asID:                     61939
IP address blocks:        2804:188c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl
                          rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 14:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ad:9a:45:f8:c6:0c:3b:a5:59:08:4b:a5:f5:27:be:62:31:ac:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
        Validity
            Not Before: Mar 20 20:25:26 2026 GMT
            Not After : Mar 19 20:30:26 2027 GMT
        Subject: CN=62EB0869D22AE7CBC7842E30A017A4542FB5257B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:6d:fa:9d:80:ac:1f:bb:c1:61:97:09:93:
                    58:3f:af:4e:61:ea:5d:71:b5:4f:2d:ad:b4:1e:12:
                    30:74:17:ea:9f:d2:44:db:93:01:81:4f:33:71:12:
                    ed:c2:a8:2a:68:2b:93:78:3d:2e:5e:48:7a:a8:6b:
                    f5:14:80:f8:06:a5:56:4a:3b:14:e6:a4:7d:96:6f:
                    2b:f2:45:c3:1c:f1:be:35:ec:ff:b3:a1:8a:6f:30:
                    04:9c:d5:54:07:3b:bd:14:92:e6:14:16:63:82:2b:
                    08:84:83:cc:9e:3b:c7:2f:39:ae:00:29:57:b5:49:
                    59:38:e0:c5:c1:28:bd:65:1d:b5:98:24:f0:91:e2:
                    11:74:c4:02:8b:61:14:13:15:e8:4a:5f:e4:c6:84:
                    b2:6b:93:52:62:bb:1f:b7:9d:20:7b:f0:fa:2d:d9:
                    db:b0:b6:ac:b2:0f:06:64:9a:20:28:7e:8f:3c:a8:
                    d4:22:43:75:dc:d1:0a:2b:73:1a:47:6f:82:59:4d:
                    79:c7:d8:a6:c9:e1:f3:bd:14:8d:5f:83:89:64:e0:
                    0e:38:b8:d7:8b:17:99:d8:4e:25:3a:12:4e:37:b4:
                    f1:4d:2b:d9:26:fd:d8:f2:4b:ca:3d:aa:87:31:f3:
                    0d:47:bf:a9:ce:60:29:c7:9a:fc:9f:e7:15:c1:8c:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:08:69:D2:2A:E7:CB:C7:84:2E:30:A0:17:A4:54:2F:B5:25:7B
            X509v3 Authority Key Identifier:
                keyid:86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d313238203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:188c::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:99:0c:21:a8:fd:7b:ef:45:b5:b6:a8:8a:01:a9:ea:45:4f:
         3e:98:5d:af:25:2e:ce:da:58:91:6d:50:ea:52:74:1e:50:b1:
         d7:b4:e6:14:42:33:49:59:2a:11:d4:eb:fe:3a:4a:83:fd:a2:
         53:25:b3:8b:97:48:14:17:8d:ab:c5:be:38:03:5e:70:56:76:
         7d:1e:93:5b:4b:eb:f2:c6:10:07:41:56:7d:4d:4e:61:3d:2a:
         84:66:d6:f3:73:9e:02:c8:45:38:62:8c:a9:ae:66:c6:ec:87:
         f1:33:a2:f8:ba:a4:41:43:cf:9f:4d:8f:c4:04:af:d7:3c:88:
         51:67:eb:03:b0:ee:51:a5:e4:34:95:45:6f:aa:0c:9b:18:ac:
         3f:a1:cb:02:40:42:52:93:97:66:f8:a1:83:52:1c:4e:a0:4b:
         2d:62:2a:3b:82:0a:1b:43:dd:51:92:24:2b:88:58:fc:0f:42:
         60:28:95:b2:e6:dc:6c:d9:e1:94:58:9a:b6:6b:d1:fe:3c:36:
         d9:36:7b:90:b1:6f:d3:be:75:62:1e:08:a9:20:2f:d4:77:f0:
         1c:ff:ae:db:40:52:92:fb:0c:13:1d:83:c9:58:a0:fe:d0:43:
         05:f1:4a:32:d3:b1:78:cd:d3:9d:99:4a:35:ba:16:48:07:77:
         69:f1:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:59:31 2026 by rpki-client