Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3438203d3e20323636343333.roa
File:                     323830343a333762633a3a2f33322d3438203d3e20323636343333.roa (raw, json)
Hash identifier:          C8YJW+N8NJZjj/oZjIZOUPg47Ky3lJ6FSdFbH3qWvZA=
Subject key identifier:   71:08:01:94:24:77:A9:57:B0:49:B8:22:54:84:FB:24:07:8B:D7:C8
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       31A41F4FDE112FE5055D4F0166691D9ECF7B1E70
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3438203d3e20323636343333.roa
Signing time:             Tue 10 Mar 2026 20:50:11 +0000
ROA not before:           Tue 10 Mar 2026 20:45:11 +0000
ROA not after:            Tue 09 Mar 2027 20:50:11 +0000
asID:                     266433
IP address blocks:        2804:37bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a4:1f:4f:de:11:2f:e5:05:5d:4f:01:66:69:1d:9e:cf:7b:1e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Mar 10 20:45:11 2026 GMT
            Not After : Mar  9 20:50:11 2027 GMT
        Subject: CN=710801942477A957B049B8225484FB24078BD7C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:cb:8a:42:5c:4d:dd:ef:fc:2b:e7:e2:44:
                    ad:80:c8:cc:41:5c:fa:48:5d:8b:6b:7e:54:8f:74:
                    db:f3:36:cb:ac:23:77:70:5b:d9:90:54:a3:41:21:
                    16:68:2c:06:a8:d8:1f:a0:6d:c1:1b:a4:11:96:72:
                    c9:61:6b:38:73:eb:fe:d7:cd:ff:e3:73:53:62:1c:
                    ac:8c:3d:6b:3a:4c:d6:70:b6:d3:9c:d1:d4:66:b7:
                    74:d3:be:d0:60:de:d6:83:66:45:27:59:a6:fc:bc:
                    47:93:da:3b:8b:87:2c:fd:c4:49:a4:ae:76:06:f1:
                    c5:ee:4e:9e:4d:3a:56:97:46:a3:18:9f:9a:1d:05:
                    7b:d4:dc:9a:da:41:2c:88:f1:bf:6c:3e:cf:65:7d:
                    97:47:cf:b0:4b:0e:b9:bf:0e:a8:d7:c9:10:7a:55:
                    49:e8:57:7e:5b:94:b0:c1:db:bc:9d:cc:63:66:d1:
                    37:df:4e:82:dc:dd:3a:ba:78:55:95:de:c1:c2:96:
                    ab:a0:c5:cd:01:c2:0c:b6:94:cf:07:66:be:59:f8:
                    41:00:9a:90:67:e4:b3:ed:d5:88:41:e0:04:34:f4:
                    76:d6:cd:eb:e4:61:51:52:33:db:d0:34:f2:e9:02:
                    89:c5:73:7c:fc:70:83:1f:80:7c:98:4d:91:93:31:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:01:94:24:77:A9:57:B0:49:B8:22:54:84:FB:24:07:8B:D7:C8
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3438203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:35:33:31:2c:3f:c3:8d:2f:f1:5a:77:8c:d5:a2:20:38:24:
         87:6a:ec:a3:0f:e8:f7:d2:3d:7a:2f:04:16:92:77:ce:a0:d3:
         aa:96:4e:3f:ff:8d:5f:f6:45:1c:0f:d2:c9:a7:1b:35:ea:32:
         75:fe:ba:bc:98:05:33:66:47:81:3d:ac:17:05:b7:6a:ce:67:
         76:1e:92:18:32:78:75:d9:dc:4c:9c:4c:34:86:9b:80:1b:49:
         78:e9:15:fc:1e:98:5e:89:6b:c6:02:7a:c9:d4:f0:3b:c6:ea:
         86:61:dd:5c:02:a0:99:d1:4c:1e:d2:59:08:1f:62:a4:92:72:
         df:88:a5:8b:97:56:0b:c4:16:dc:fc:f7:85:a3:b1:c6:e1:86:
         60:53:d6:75:b8:da:46:7b:7d:81:e9:15:b4:7f:e3:ec:c3:3a:
         fe:a6:bf:89:51:ef:8e:42:71:b5:ba:35:3e:15:f4:ce:26:5d:
         53:93:85:08:28:99:11:47:ff:1b:ef:72:72:d1:c0:7e:c6:4b:
         7c:63:56:36:5c:69:72:1f:0b:0e:cc:f3:72:51:90:fd:f6:69:
         2b:78:fd:44:2c:74:e4:ae:00:bd:9f:be:a0:2d:9c:9a:9d:36:
         11:80:35:97:d6:0d:49:58:71:da:0b:66:15:e2:f1:2d:8b:0a:
         21:58:9f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:25:45 2026 by rpki-client