Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/323830343a323933633a3a2f33322d313238203d3e20323634303035.roa
File:                     323830343a323933633a3a2f33322d313238203d3e20323634303035.roa (raw, json)
Hash identifier:          OvvNsyCvbf3ftKu6hCd6oLz0bsFyPlGszqwqTBe7ojk=
Subject key identifier:   71:BC:09:52:C6:F8:AE:47:9D:6F:5C:A1:48:0C:C5:BE:EE:28:B5:56
Certificate issuer:       /CN=2B93072F9705E77F0DDB8862E74187CBE35911BA
Certificate serial:       45F25C1E986B31F787D69E429E740B430CA36FE2
Authority key identifier: 2B:93:07:2F:97:05:E7:7F:0D:DB:88:62:E7:41:87:CB:E3:59:11:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B93072F9705E77F0DDB8862E74187CBE35911BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/323830343a323933633a3a2f33322d313238203d3e20323634303035.roa
Signing time:             Mon 11 May 2026 17:48:59 +0000
ROA not before:           Mon 11 May 2026 17:43:59 +0000
ROA not after:            Mon 10 May 2027 17:48:59 +0000
asID:                     264005
IP address blocks:        2804:293c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.crl
                          rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B93072F9705E77F0DDB8862E74187CBE35911BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f2:5c:1e:98:6b:31:f7:87:d6:9e:42:9e:74:0b:43:0c:a3:6f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B93072F9705E77F0DDB8862E74187CBE35911BA
        Validity
            Not Before: May 11 17:43:59 2026 GMT
            Not After : May 10 17:48:59 2027 GMT
        Subject: CN=71BC0952C6F8AE479D6F5CA1480CC5BEEE28B556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:a7:92:a0:79:cf:fb:a5:c8:fa:57:72:a1:
                    30:a2:55:b0:c7:23:29:85:fc:eb:fa:06:b7:f3:82:
                    57:d2:b8:20:6a:fa:9a:78:a4:55:57:87:94:25:22:
                    19:ec:6c:d2:57:92:38:d4:a1:09:ca:7b:9d:6d:24:
                    67:c0:0a:e5:2e:37:2c:0a:12:ff:6f:52:ed:22:ca:
                    1f:e3:94:de:31:31:47:2b:0d:a0:80:d0:87:09:66:
                    cf:17:ff:ff:2e:b1:1c:0a:1a:fc:2e:91:7b:16:0e:
                    25:ce:7d:3b:ce:25:0a:bd:f2:ca:e8:1d:d6:28:b9:
                    a0:fa:1c:a9:35:d8:d7:e3:4d:70:ef:d8:26:9b:66:
                    14:dc:00:3e:9a:56:8d:5f:e8:62:5b:99:29:fd:4e:
                    ab:10:3a:ae:4f:24:fb:b3:6f:02:28:06:ac:68:57:
                    dc:0b:d8:9f:ac:f6:13:c0:a6:6a:23:13:80:b0:08:
                    eb:12:8c:51:90:61:92:21:f0:44:ec:b6:a5:98:78:
                    00:47:f6:95:7e:79:4f:aa:1c:2a:bc:3b:35:ed:ac:
                    06:6e:c2:e1:6d:fc:7e:4f:bc:fc:37:8d:70:6b:6a:
                    60:77:73:30:0e:ee:a2:03:39:1e:ca:9f:7e:38:da:
                    dd:69:8f:9c:22:11:75:cc:9b:a5:02:9b:f9:27:9d:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BC:09:52:C6:F8:AE:47:9D:6F:5C:A1:48:0C:C5:BE:EE:28:B5:56
            X509v3 Authority Key Identifier:
                keyid:2B:93:07:2F:97:05:E7:7F:0D:DB:88:62:E7:41:87:CB:E3:59:11:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B93072F9705E77F0DDB8862E74187CBE35911BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/323830343a323933633a3a2f33322d313238203d3e20323634303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:293c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:52:c4:82:d7:dd:ce:2b:8a:dd:91:1d:0e:05:39:1c:33:4e:
         84:62:a9:69:8e:d6:cc:81:23:0a:71:13:c7:7b:a6:3a:b7:4e:
         56:d0:25:1c:9d:0a:f3:90:5f:c8:31:bd:77:ac:b1:ff:85:de:
         27:c7:c4:7e:5b:90:4e:a6:89:23:06:a7:28:b9:af:b1:e0:05:
         7d:2e:ad:7b:8a:94:3b:12:4f:43:fd:f7:4c:62:88:48:49:50:
         4c:a5:1f:33:7f:b8:bd:83:dc:4a:1b:3c:f4:eb:da:77:58:63:
         fa:94:84:72:a5:7d:df:4a:7d:45:61:2b:03:8f:8a:4d:c9:15:
         a1:c0:11:7d:54:07:cd:bf:66:0e:20:68:ef:d1:3b:18:04:34:
         52:8b:51:9a:8d:ba:f2:1d:94:a3:e8:45:7d:63:f6:f1:59:75:
         1f:6d:9b:48:67:29:10:e9:f1:1f:8d:17:19:02:3b:8d:c5:cd:
         7a:34:b6:00:7b:b0:c7:6b:13:0e:10:8f:17:a9:63:ca:1a:49:
         bf:76:d5:78:2d:16:44:9f:0d:25:2e:cd:a3:2f:6c:13:46:31:
         7e:fc:b6:d0:3b:b1:a1:23:b5:29:01:e1:44:48:34:0d:15:e4:
         2d:6b:d6:09:ba:b1:39:ed:29:fd:8b:bf:18:87:d9:9c:36:f9:
         33:bb:b7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:12:14 2026 by rpki-client