Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/323830343a356331303a3a2f33322d3438203d3e20323638383835.roa
File:                     323830343a356331303a3a2f33322d3438203d3e20323638383835.roa (raw, json)
Hash identifier:          MQkQM/hxevZNuPnNhx80Kg5XT/j7pK9T3zkZf+6sVMY=
Subject key identifier:   04:E9:1C:34:01:20:C0:CB:3C:7B:47:C3:EC:A2:9B:C7:D6:23:82:40
Certificate issuer:       /CN=FAA3CA7253FF7DA2F25A4D4C953367E9662154DD
Certificate serial:       20E0F06394CEE30F748EED4853EA2FAC10540F02
Authority key identifier: FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/323830343a356331303a3a2f33322d3438203d3e20323638383835.roa
Signing time:             Thu 26 Mar 2026 12:55:16 +0000
ROA not before:           Thu 26 Mar 2026 12:50:16 +0000
ROA not after:            Thu 25 Mar 2027 12:55:16 +0000
asID:                     268885
IP address blocks:        2804:5c10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.crl
                          rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e0:f0:63:94:ce:e3:0f:74:8e:ed:48:53:ea:2f:ac:10:54:0f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA3CA7253FF7DA2F25A4D4C953367E9662154DD
        Validity
            Not Before: Mar 26 12:50:16 2026 GMT
            Not After : Mar 25 12:55:16 2027 GMT
        Subject: CN=04E91C340120C0CB3C7B47C3ECA29BC7D6238240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:3d:16:c0:a8:53:75:f7:c2:c7:19:e2:46:
                    3d:e8:0f:2c:b2:80:c7:98:d0:57:46:d9:6f:78:90:
                    27:a1:f0:c7:54:b4:7b:f5:fc:78:23:3e:1f:93:40:
                    10:bc:a4:17:1f:bd:93:e0:97:30:96:32:f7:9e:f0:
                    be:ba:3e:f1:ca:ab:a8:30:13:b3:25:a5:0f:56:6e:
                    d7:ea:74:01:b6:7b:ac:c0:02:be:e4:56:62:a8:f4:
                    79:22:94:33:54:69:3c:64:79:31:64:b5:52:4f:57:
                    03:e4:1e:a4:28:eb:e8:1e:65:a0:c1:ef:65:48:f7:
                    bb:3c:ee:56:5a:18:47:aa:ad:2c:b0:db:c6:fa:a4:
                    fd:0d:06:79:25:34:c8:1e:fc:5b:ea:bf:94:dc:71:
                    f8:4c:14:1d:c3:a4:bd:bc:25:f0:e8:f9:d7:ec:84:
                    d8:0b:49:8c:72:e3:4f:64:47:7b:80:f3:c3:bb:d1:
                    3c:ae:21:26:16:84:96:37:ff:3a:2d:0c:21:f4:8c:
                    99:19:48:0f:70:d6:37:5e:3f:b8:ce:96:1c:90:f4:
                    65:61:10:80:87:5b:ad:bc:79:6d:8d:d6:95:56:f5:
                    5c:51:0d:88:3e:08:d2:ab:a3:cd:31:92:99:0c:d8:
                    be:c0:9a:d6:b1:0a:fd:c8:70:a5:5c:bf:44:02:6b:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E9:1C:34:01:20:C0:CB:3C:7B:47:C3:EC:A2:9B:C7:D6:23:82:40
            X509v3 Authority Key Identifier:
                keyid:FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/323830343a356331303a3a2f33322d3438203d3e20323638383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:a8:ae:32:07:55:b2:3f:a9:ce:d2:a7:de:c3:c7:c3:47:ec:
         d1:65:af:3f:0e:31:aa:83:c7:db:7d:fb:40:19:a5:c4:38:56:
         92:31:86:be:d7:1c:42:8e:e5:8a:dc:69:ac:4f:38:5f:a7:f0:
         e2:dc:f2:c5:46:fe:fa:fc:53:f8:3a:3b:24:c4:12:1f:c1:cd:
         17:90:66:75:48:88:3c:eb:f4:f5:b8:0b:d3:a0:f8:d2:a8:9d:
         46:92:1e:15:d2:74:ea:1a:84:75:68:e4:0e:03:27:68:59:af:
         75:cf:85:46:df:dd:0f:87:cf:a4:9e:53:d5:0e:77:b2:de:ee:
         cb:61:7b:fd:cd:9e:66:3b:cd:1e:86:52:ab:7c:05:78:a3:26:
         e9:86:0b:42:fb:2e:fe:ef:c8:ef:c1:ce:31:40:ad:03:ec:7c:
         9b:16:f4:35:46:1e:98:ca:ff:1c:da:6e:01:96:39:81:b1:38:
         2a:fc:79:b7:ff:cf:c4:57:93:e3:ba:af:e0:35:13:e4:2f:1a:
         20:ea:9b:7b:cc:3b:11:03:94:0e:94:31:15:56:87:4c:78:9d:
         a4:0d:c5:13:1b:08:20:1e:58:55:1f:28:1c:12:85:8d:5b:d0:
         a8:df:c7:21:7f:21:02:c0:cc:11:a1:b3:1e:13:fc:75:91:eb:
         58:7c:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:26 2026 by rpki-client