Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33322d3332203d3e20323732373339.roa
File:                     323830343a383765383a3a2f33322d3332203d3e20323732373339.roa (raw, json)
Hash identifier:          MO0N8NMnLgy1cGvlWAePHUtudvUx2hSAf7bzZ/TnQnY=
Subject key identifier:   61:28:12:64:1F:D7:2C:CB:55:08:90:9B:CD:F4:38:F0:7B:C1:5A:E8
Certificate issuer:       /CN=1E35A984122DB2D3B405A353D1AF357DBE908F56
Certificate serial:       6B18BC3E23F06071D8E35212B8F9DDC120DDCA30
Authority key identifier: 1E:35:A9:84:12:2D:B2:D3:B4:05:A3:53:D1:AF:35:7D:BE:90:8F:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E35A984122DB2D3B405A353D1AF357DBE908F56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33322d3332203d3e20323732373339.roa
Signing time:             Thu 23 Apr 2026 15:53:28 +0000
ROA not before:           Thu 23 Apr 2026 15:48:28 +0000
ROA not after:            Thu 22 Apr 2027 15:53:28 +0000
asID:                     272739
IP address blocks:        2804:87e8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/1E35A984122DB2D3B405A353D1AF357DBE908F56.crl
                          rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/1E35A984122DB2D3B405A353D1AF357DBE908F56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E35A984122DB2D3B405A353D1AF357DBE908F56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:18:bc:3e:23:f0:60:71:d8:e3:52:12:b8:f9:dd:c1:20:dd:ca:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E35A984122DB2D3B405A353D1AF357DBE908F56
        Validity
            Not Before: Apr 23 15:48:28 2026 GMT
            Not After : Apr 22 15:53:28 2027 GMT
        Subject: CN=612812641FD72CCB5508909BCDF438F07BC15AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:7c:c5:29:5f:ab:e3:98:e5:59:99:f0:ac:
                    ff:f0:21:25:db:f4:ba:de:9c:1a:37:9b:21:0e:7a:
                    ca:e3:53:4e:32:63:80:49:e0:22:85:dc:ec:52:3f:
                    86:67:85:83:f3:69:f4:ac:11:6a:26:6a:87:4f:a1:
                    0f:f5:f4:fd:01:0b:2f:09:b1:3c:f2:51:c6:81:4c:
                    2e:9a:df:7e:8b:55:b7:57:24:ba:47:fe:a4:93:16:
                    15:70:06:47:d0:5e:ce:65:2e:d7:f9:5e:8f:9f:8e:
                    18:44:8d:48:78:8b:dc:d3:b9:1e:83:bb:aa:d6:33:
                    e7:0b:ba:79:c6:10:71:9c:88:22:88:42:35:ed:7a:
                    93:77:17:07:cb:d1:ec:03:7a:01:12:f9:41:fe:d3:
                    ed:c4:a1:26:5a:54:85:7f:d7:c8:8a:51:ba:31:76:
                    df:48:70:8f:84:8c:ba:0d:2b:59:cb:7f:05:fc:51:
                    6e:f9:93:2e:3b:ef:37:26:4e:68:4d:2b:63:ec:00:
                    c6:f8:6f:28:64:e6:b8:e5:82:6e:1e:c2:20:65:88:
                    30:06:f5:51:f0:73:13:1d:32:94:05:46:07:98:05:
                    46:64:1d:72:78:5d:0c:f1:5a:93:1f:21:1e:17:1b:
                    a6:a9:84:7c:de:d3:26:e8:86:b1:e7:9a:fb:7a:a3:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:12:64:1F:D7:2C:CB:55:08:90:9B:CD:F4:38:F0:7B:C1:5A:E8
            X509v3 Authority Key Identifier:
                keyid:1E:35:A9:84:12:2D:B2:D3:B4:05:A3:53:D1:AF:35:7D:BE:90:8F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/1E35A984122DB2D3B405A353D1AF357DBE908F56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E35A984122DB2D3B405A353D1AF357DBE908F56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33322d3332203d3e20323732373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:cb:d2:3a:84:ce:97:2f:b7:a8:63:46:ad:4a:bf:23:79:92:
         9b:ec:1e:cc:7b:0c:71:ee:10:77:ca:2a:a8:d3:d7:00:6b:af:
         fd:24:51:ed:ab:e3:cb:bb:bc:ba:f1:89:fa:6b:70:4d:d2:64:
         b8:49:50:56:6e:67:e2:ce:89:aa:8f:67:e1:07:c2:e9:6c:62:
         de:a3:00:35:f2:ef:46:90:85:9c:8d:44:66:19:3b:dc:88:13:
         84:72:cb:53:32:8a:c7:b8:91:98:e1:9f:dd:90:60:45:cc:00:
         2c:b4:46:60:4a:01:b8:f5:6f:cf:5e:e8:df:1b:54:57:f1:ec:
         8c:04:79:e1:a5:7b:ee:ac:de:dd:d5:89:60:7b:6e:d8:27:53:
         da:1b:5e:aa:fd:e3:de:c2:ae:ce:b9:72:aa:dc:eb:16:08:f3:
         71:8d:fb:90:6d:32:01:bd:3f:c9:74:78:8d:83:ad:7a:c6:e5:
         2b:75:0d:8b:55:1d:97:40:a8:9a:92:bc:16:28:d1:0c:bf:11:
         04:eb:b0:7a:ca:06:46:0f:b2:a1:34:20:19:d5:c4:85:88:9a:
         1b:76:af:f2:2f:15:21:41:ba:b3:af:5f:8c:cf:46:a9:5f:a5:
         a6:8c:56:ab:dc:cf:bd:b7:e0:c6:f3:e0:e0:e4:5c:b3:e1:4a:
         f6:5c:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:20:37 2026 by rpki-client