Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa
File:                     323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa (raw, json)
Hash identifier:          RUk5/WPYiHJlLoRehPkwo+2ak6qdzM2DZqYWI3WU6+M=
Subject key identifier:   51:82:5F:B3:21:3E:13:F7:CB:C9:BC:0F:97:1C:30:89:6D:FE:FD:CA
Certificate issuer:       /CN=632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408
Certificate serial:       5680C9ACEB6FAF71AB50D87346AA18A5CE39F1B9
Authority key identifier: 63:21:95:B6:7D:F3:AC:7E:3E:0C:CC:2B:F8:3A:FA:55:DB:42:D4:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa
Signing time:             Thu 19 Mar 2026 01:42:29 +0000
ROA not before:           Thu 19 Mar 2026 01:37:29 +0000
ROA not after:            Thu 18 Mar 2027 01:42:29 +0000
asID:                     272245
IP address blocks:        2804:8430:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl
                          rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 21:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:80:c9:ac:eb:6f:af:71:ab:50:d8:73:46:aa:18:a5:ce:39:f1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408
        Validity
            Not Before: Mar 19 01:37:29 2026 GMT
            Not After : Mar 18 01:42:29 2027 GMT
        Subject: CN=51825FB3213E13F7CBC9BC0F971C30896DFEFDCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:56:5d:87:dc:19:6f:0d:ea:d2:6c:d5:8c:
                    f6:4f:44:38:45:5e:e0:d8:0c:6c:32:06:52:01:6e:
                    79:18:4f:28:c2:e7:78:09:b2:e7:a1:1a:7c:de:7c:
                    be:cb:30:12:3a:31:0c:ce:8b:e3:d2:1d:da:92:92:
                    47:a1:38:c5:9b:ed:da:81:7c:a2:1e:87:dd:20:15:
                    e5:0b:0d:ae:9a:24:68:73:cc:7d:fa:2a:d4:e2:dc:
                    ce:8d:b8:5d:bf:03:2e:7c:28:6b:d8:ac:70:79:e5:
                    96:cb:a9:06:08:a7:68:c8:30:a3:3b:c7:ef:e9:e6:
                    b7:9d:ce:87:da:c8:8d:2c:36:c0:82:af:64:3d:f4:
                    14:6b:ac:ce:3e:76:57:43:c4:34:a4:38:ec:55:f1:
                    09:69:37:11:34:f4:cf:e2:b6:5c:1f:4c:e7:35:e5:
                    36:1f:90:0d:91:d5:8a:c8:ab:c9:8e:17:0a:80:ba:
                    2c:68:05:80:72:0c:fa:87:f4:c8:a8:51:6b:1e:96:
                    05:ce:05:40:03:29:a8:86:ca:8e:5a:8a:91:c9:09:
                    ee:b9:cd:e7:3b:c9:75:df:b3:1c:a0:58:7b:0f:2e:
                    b1:06:cd:a3:56:2c:c3:bd:a3:0f:f7:f0:34:32:d5:
                    7e:1c:47:19:9e:13:92:6b:81:04:14:88:b5:a7:1c:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:5F:B3:21:3E:13:F7:CB:C9:BC:0F:97:1C:30:89:6D:FE:FD:CA
            X509v3 Authority Key Identifier:
                keyid:63:21:95:B6:7D:F3:AC:7E:3E:0C:CC:2B:F8:3A:FA:55:DB:42:D4:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8430:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:de:dc:07:8d:03:47:de:f7:79:10:02:11:27:53:83:b8:
         d2:ea:14:88:86:d2:01:42:c2:2b:53:20:c8:31:b9:28:53:c2:
         17:c2:79:f7:a8:43:84:a9:f0:df:ee:ff:df:30:0b:6c:ab:7e:
         3d:89:65:5b:fa:8e:5f:33:9d:7f:8d:91:a1:05:02:05:bc:5e:
         fc:e5:73:15:e4:29:02:19:f5:49:6b:4e:aa:af:1c:cb:df:c0:
         4e:4a:ea:2a:fd:f6:d1:31:bc:e5:30:53:63:38:e7:03:a4:93:
         64:62:18:70:22:49:f5:1b:f4:51:77:ba:62:eb:a2:08:65:c5:
         43:df:96:0d:5d:0e:a8:9d:fb:e4:f1:08:ee:40:44:45:60:8f:
         eb:d1:91:e3:95:44:81:d3:5d:04:3d:0e:b9:f0:5c:f1:c2:8c:
         db:a2:25:18:66:89:e2:0d:49:e6:39:dc:23:fb:72:e5:89:34:
         13:d3:32:4d:21:d1:c7:a1:dd:3d:b0:52:24:f9:5f:70:93:7d:
         f9:69:de:f2:a8:79:96:ab:59:4f:c0:71:d3:38:ea:75:7c:05:
         29:9c:b7:05:d9:dd:75:6c:d4:99:9b:a1:fc:52:bf:7f:12:fe:
         83:0a:49:11:3b:94:1c:41:ea:42:6e:91:d5:dc:46:0c:5c:fc:
         1a:2e:f5:dc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVoDJrOtvr3GrUNhzRqoYpc458bkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyMTk1QjY3REYzQUM3RTNFMENDQzJCRjgzQUZBNTVE
QjQyRDQwODAeFw0yNjAzMTkwMTM3MjlaFw0yNzAzMTgwMTQyMjlaMDMxMTAvBgNV
BAMTKDUxODI1RkIzMjEzRTEzRjdDQkM5QkMwRjk3MUMzMDg5NkRGRUZEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZI1Zdh9wZbw3q0mzVjPZPRDhF
XuDYDGwyBlIBbnkYTyjC53gJsuehGnzefL7LMBI6MQzOi+PSHdqSkkehOMWb7dqB
fKIeh90gFeULDa6aJGhzzH36KtTi3M6NuF2/Ay58KGvYrHB55ZbLqQYIp2jIMKM7
x+/p5redzofayI0sNsCCr2Q99BRrrM4+dldDxDSkOOxV8QlpNxE09M/itlwfTOc1
5TYfkA2R1YrIq8mOFwqAuixoBYByDPqH9MioUWselgXOBUADKaiGyo5aipHJCe65
zec7yXXfsxygWHsPLrEGzaNWLMO9ow/38DQy1X4cRxmeE5JrgQQUiLWnHAiJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUUYJfsyE+E/fLybwPlxwwiW3+/cowHwYDVR0j
BBgwFoAUYyGVtn3zrH4+DMwr+Dr6VdtC1AgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmQ4Z3dBYW4zTGZLVWhMQk5wYUF4RGtHRkdlV3J4VWRMY3RuSndlVkhQ
ZnAvMC82MzIxOTVCNjdERjNBQzdFM0UwQ0NDMkJGODNBRkE1NURCNDJENDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjE5NUI2N0RGM0FDN0Uz
RTBDQ0MyQkY4M0FGQTU1REI0MkQ0MDguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JkOGd3QWFuM0xmS1VoTEJOcGFBeERrR0ZHZVdyeFVkTGN0bkp3ZVZIUGZwLzAv
MzIzODMwMzQzYTM4MzQzMzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMyMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhDBAMA0GCSqGSIb3DQEBCwUA
A4IBAQCr7t7cB40DR973eRACESdTg7jS6hSIhtIBQsIrUyDIMbkoU8IXwnn3qEOE
qfDf7v/fMAtsq349iWVb+o5fM51/jZGhBQIFvF785XMV5CkCGfVJa06qrxzL38BO
Suoq/fbRMbzlMFNjOOcDpJNkYhhwIkn1G/RRd7pi66IIZcVD35YNXQ6onfvk8Qju
QERFYI/r0ZHjlUSB010EPQ658FzxwozboiUYZoniDUnmOdwj+3LliTQT0zJNIdHH
od09sFIk+V9wk335ad7yqHmWq1lPwHHTOOp1fAUpnLcF2d11bNSZm6H8Ur9/Ev6D
CkkRO5QcQepCbpHV3EYMXPwaLvXc
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:21:48 2026 by rpki-client