Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/323830343a323030383a3a2f33322d3438203d3e20323634343631.roa
File:                     323830343a323030383a3a2f33322d3438203d3e20323634343631.roa (raw, json)
Hash identifier:          Be5DOL642CwFpvMAZpP/FKQevTAyhv54lxGkogeZOBY=
Subject key identifier:   F3:87:ED:D7:58:16:9E:C7:74:7F:55:40:41:8A:17:D2:03:C7:FE:CA
Certificate issuer:       /CN=9B82CF16836AA7014254540B72E7CE427D7C9003
Certificate serial:       255191249CE8E203D00AC2160014330AB2FCC66A
Authority key identifier: 9B:82:CF:16:83:6A:A7:01:42:54:54:0B:72:E7:CE:42:7D:7C:90:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B82CF16836AA7014254540B72E7CE427D7C9003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/323830343a323030383a3a2f33322d3438203d3e20323634343631.roa
Signing time:             Tue 03 Mar 2026 12:39:29 +0000
ROA not before:           Tue 03 Mar 2026 12:34:29 +0000
ROA not after:            Tue 02 Mar 2027 12:39:29 +0000
asID:                     264461
IP address blocks:        2804:2008::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/9B82CF16836AA7014254540B72E7CE427D7C9003.crl
                          rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/9B82CF16836AA7014254540B72E7CE427D7C9003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B82CF16836AA7014254540B72E7CE427D7C9003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:51:91:24:9c:e8:e2:03:d0:0a:c2:16:00:14:33:0a:b2:fc:c6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82CF16836AA7014254540B72E7CE427D7C9003
        Validity
            Not Before: Mar  3 12:34:29 2026 GMT
            Not After : Mar  2 12:39:29 2027 GMT
        Subject: CN=F387EDD758169EC7747F5540418A17D203C7FECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:38:89:be:f5:5b:5f:03:03:5e:92:63:3c:0c:
                    f7:19:8c:03:f9:43:b5:0a:fa:a1:03:ad:d8:71:1a:
                    72:e6:6b:7b:45:6d:87:e8:29:d2:e0:56:4d:c0:22:
                    c6:e7:c2:58:52:ef:1c:6c:5b:bc:24:cf:2d:f6:7d:
                    9f:9b:eb:89:8b:14:ff:c2:54:73:42:89:95:3f:15:
                    c7:94:5c:ac:d9:b2:59:80:a0:ea:0b:e3:6b:b1:36:
                    71:c1:d1:15:31:70:22:ef:72:9a:0f:4a:17:42:4d:
                    0b:10:02:3b:21:9f:d7:14:f7:cb:1a:cc:b5:08:33:
                    b8:fe:f1:df:58:9a:98:b7:64:1a:66:fe:98:fb:25:
                    a1:5d:fc:87:85:04:1f:88:cd:9d:20:46:cb:40:61:
                    fb:a5:32:30:f4:d2:3c:21:32:1f:fb:56:bb:6b:74:
                    d8:87:46:8a:a0:e5:28:38:33:15:5b:49:3d:8a:de:
                    41:60:a4:16:0c:61:83:1e:10:eb:75:f3:bf:bc:5b:
                    10:7f:c7:e5:06:20:4a:6b:03:51:8c:c5:a9:2c:d7:
                    a1:1c:51:a1:2e:8b:05:11:88:87:1f:6b:d4:8a:99:
                    96:ae:95:8b:ed:70:b5:9f:9e:c9:58:a5:32:b1:50:
                    1a:c2:ec:6c:45:44:20:f8:34:a0:e4:0f:99:bd:f8:
                    1d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:87:ED:D7:58:16:9E:C7:74:7F:55:40:41:8A:17:D2:03:C7:FE:CA
            X509v3 Authority Key Identifier:
                keyid:9B:82:CF:16:83:6A:A7:01:42:54:54:0B:72:E7:CE:42:7D:7C:90:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/9B82CF16836AA7014254540B72E7CE427D7C9003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B82CF16836AA7014254540B72E7CE427D7C9003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/323830343a323030383a3a2f33322d3438203d3e20323634343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2008::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:f6:cd:28:c0:69:db:4a:89:2e:21:87:c3:40:eb:7e:65:74:
         76:75:50:30:1f:60:7a:a2:57:6a:a1:30:0c:e8:ea:66:9f:7f:
         ef:7f:da:bd:cb:db:c0:5e:dc:7d:36:68:b5:82:6b:cc:d5:5b:
         9e:87:b3:1d:71:b2:d8:5b:b7:d3:82:c9:1a:9b:d6:92:94:ea:
         11:68:3a:28:3b:1b:04:3d:d2:64:8a:b8:a4:a2:40:31:b9:04:
         ee:80:3e:07:9d:19:fa:60:83:24:ab:3c:37:a9:e1:76:a0:74:
         aa:af:49:71:34:27:d4:24:5b:5e:74:e8:fd:8b:c7:f9:14:d9:
         73:b7:d4:8e:92:0b:42:fe:d5:43:1b:93:cf:d4:d5:cf:36:c6:
         cc:37:69:b6:71:1a:43:c8:e2:51:a8:48:4c:1b:b0:5e:62:26:
         70:51:d0:c4:40:cf:fd:4d:72:09:a1:e5:04:63:ec:62:9f:82:
         53:df:b7:7d:05:a5:62:6f:0d:5e:17:f4:55:52:44:a2:65:73:
         7d:64:53:9d:e1:f2:98:75:33:2d:af:d3:9e:55:ea:c2:07:26:
         bf:0d:47:f3:8e:c5:c1:4e:f3:06:00:ed:85:9e:db:2f:8a:1c:
         76:c5:80:19:d4:64:6e:e6:bd:f0:16:a2:7e:b2:38:d5:79:37:
         d6:5f:aa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:45 2026 by rpki-client