Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          cFsiohnGQkoLRL2TKy5XdbJGaTrbckPExanTOYiQBIw=
Subject key identifier:   86:27:D5:89:28:AC:6B:F4:EC:F4:5C:09:7C:3B:AD:7B:D3:61:71:F6
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       01DBD67B8BC52103DD18C180C0471D3CA455DB8F
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Fri 01 May 2026 18:18:34 +0000
ROA not before:           Fri 01 May 2026 18:13:34 +0000
ROA not after:            Fri 30 Apr 2027 18:18:34 +0000
asID:                     262578
IP address blocks:        2804:658::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:db:d6:7b:8b:c5:21:03:dd:18:c1:80:c0:47:1d:3c:a4:55:db:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: May  1 18:13:34 2026 GMT
            Not After : Apr 30 18:18:34 2027 GMT
        Subject: CN=8627D58928AC6BF4ECF45C097C3BAD7BD36171F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:c9:9a:44:11:b3:fb:2c:f4:ac:6d:53:fe:
                    92:2d:4b:7d:4d:51:66:b6:cb:d8:95:ab:41:5b:c1:
                    89:a4:33:aa:ec:c0:b1:56:73:9e:a7:e7:7b:7c:08:
                    9a:11:f1:e3:fd:79:08:75:0d:45:61:1a:0e:21:d1:
                    39:46:b5:dc:2b:a6:a1:07:e9:f6:0a:95:b3:42:ff:
                    82:99:ed:2d:ff:7d:5e:80:08:4b:b6:bf:2f:ee:bc:
                    55:55:28:0f:4b:a2:52:b0:b7:41:a1:ac:a6:23:5b:
                    4b:b8:b7:0b:dc:bc:4a:ae:90:52:04:3c:b3:44:76:
                    27:ec:51:af:d6:22:9f:8e:47:f2:de:36:22:6d:52:
                    90:0c:b0:87:d9:52:85:af:10:33:28:71:2b:af:66:
                    c7:92:28:2f:22:82:2f:41:c0:ab:e8:b3:e3:b2:50:
                    a6:4d:9b:36:5c:97:18:d4:d4:d5:cd:80:cc:99:47:
                    07:6a:be:9c:65:8d:94:2e:f8:f9:d0:b5:15:0b:dd:
                    67:c1:ab:65:1c:e5:bb:e2:78:34:d7:2b:bf:fa:88:
                    41:9d:0c:a4:3d:77:b8:55:60:f1:99:a9:1d:cd:77:
                    66:d0:65:0e:b2:e8:0f:ca:bc:88:44:fa:8e:06:fd:
                    b9:f7:28:ac:84:40:13:95:3d:1a:f4:cc:dd:92:e3:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:27:D5:89:28:AC:6B:F4:EC:F4:5C:09:7C:3B:AD:7B:D3:61:71:F6
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658::/35

    Signature Algorithm: sha256WithRSAEncryption
         46:82:a2:b1:44:87:1f:fd:b1:9a:4f:ff:fd:7e:98:72:ad:fb:
         c0:65:ac:b3:eb:db:49:cc:1c:26:1a:2b:a6:20:02:2c:d3:9a:
         db:40:a4:c5:48:1c:84:e7:4e:5e:de:ac:d7:41:f1:67:c2:44:
         da:79:a9:19:c1:cf:bf:16:2e:97:6a:50:7c:b3:06:ad:44:60:
         90:6f:b6:2c:10:f7:52:33:40:b3:88:fd:f0:d5:2f:3e:6e:57:
         75:b0:b7:29:ce:16:ce:12:a9:d3:fc:d0:35:21:8e:ff:f4:9c:
         97:b8:53:f9:59:fa:03:2a:ca:fb:10:9e:d1:07:4c:8a:c2:72:
         69:e2:8d:46:d3:23:b9:be:c7:6f:3f:24:48:16:67:67:2a:85:
         c6:00:be:3a:6e:ff:e4:77:5a:d0:fd:75:b1:30:59:b0:03:78:
         7d:c6:06:77:bf:7a:ca:4e:67:62:cf:0f:2c:06:5d:a4:c8:b2:
         42:91:cb:99:a3:f9:67:df:dd:b1:3f:e8:94:06:b0:5e:bc:a1:
         e2:e4:26:6d:c4:6a:ea:35:75:7c:ea:d2:1f:ca:f2:93:56:f1:
         59:3f:14:56:87:50:93:53:9f:21:32:4b:f5:2d:ea:22:a5:14:
         0f:91:79:d1:ca:9a:df:60:be:f2:0d:b1:87:f6:b6:c9:6b:51:
         00:72:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:07:21 2026 by rpki-client