Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/323830343a366337383a3a2f33322d3333203d3e20323730343730.roa
File:                     323830343a366337383a3a2f33322d3333203d3e20323730343730.roa (raw, json)
Hash identifier:          gheEAeGABuizIfUpH1wiBSxVBfJLxxfvvapUgyLXe8k=
Subject key identifier:   DB:A2:23:66:05:AD:95:D4:1A:87:5C:BB:B1:00:A9:8C:0D:D7:23:0C
Certificate issuer:       /CN=F8627EF4EC5630BFBFA1853F634FB0290F6D4852
Certificate serial:       078984368BFCC6FCB11F5C1C6DF7A9EB0F1AB41D
Authority key identifier: F8:62:7E:F4:EC:56:30:BF:BF:A1:85:3F:63:4F:B0:29:0F:6D:48:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/323830343a366337383a3a2f33322d3333203d3e20323730343730.roa
Signing time:             Sat 09 May 2026 11:42:58 +0000
ROA not before:           Sat 09 May 2026 11:37:58 +0000
ROA not after:            Sat 08 May 2027 11:42:58 +0000
asID:                     270470
IP address blocks:        2804:6c78::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.crl
                          rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:89:84:36:8b:fc:c6:fc:b1:1f:5c:1c:6d:f7:a9:eb:0f:1a:b4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8627EF4EC5630BFBFA1853F634FB0290F6D4852
        Validity
            Not Before: May  9 11:37:58 2026 GMT
            Not After : May  8 11:42:58 2027 GMT
        Subject: CN=DBA2236605AD95D41A875CBBB100A98C0DD7230C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:24:02:09:b8:d6:f1:a2:fd:94:fe:05:f9:a8:
                    0a:d5:1e:29:cc:10:2e:17:47:ce:ac:e5:be:4d:04:
                    18:5e:4c:60:f3:e0:29:c6:30:9f:ff:3c:63:52:9b:
                    75:51:45:50:fd:ae:fa:5c:38:83:57:96:52:58:e0:
                    9f:c0:f2:47:58:83:6f:6b:2a:b9:20:37:24:8d:1a:
                    e1:42:d2:65:f2:27:5f:34:3b:68:f8:eb:ab:45:1d:
                    07:d9:50:83:bb:55:f8:dc:28:5e:3c:23:5c:f3:ff:
                    98:19:a2:b1:e5:29:d9:65:b7:7f:bc:85:5c:cd:27:
                    7a:6c:bf:7f:c1:1f:1d:eb:1b:9f:93:49:bc:50:53:
                    94:a9:0b:91:42:d4:10:b2:85:30:bb:62:dd:d9:e0:
                    36:ba:01:fb:5e:63:e7:c2:6f:fc:97:d0:29:b6:d2:
                    0b:76:23:23:80:b7:a3:04:4e:b9:06:88:77:b3:ca:
                    25:98:ad:a5:15:cf:ce:21:c9:c7:73:7c:9d:e8:c3:
                    9d:67:25:9f:cd:47:42:87:82:f1:42:8c:4c:d2:27:
                    68:3a:c1:77:5d:3b:98:6a:81:54:1c:af:b4:61:c5:
                    77:27:22:e4:fd:7e:68:05:77:5c:aa:1f:d1:61:40:
                    ac:7c:24:57:6f:fb:ef:79:bb:7b:61:cd:cd:11:a9:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A2:23:66:05:AD:95:D4:1A:87:5C:BB:B1:00:A9:8C:0D:D7:23:0C
            X509v3 Authority Key Identifier:
                keyid:F8:62:7E:F4:EC:56:30:BF:BF:A1:85:3F:63:4F:B0:29:0F:6D:48:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8627EF4EC5630BFBFA1853F634FB0290F6D4852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cqe4BWJkXwJjK2Gf45V2jcAcdqLNJnui9n7bJTQKPc3X/0/323830343a366337383a3a2f33322d3333203d3e20323730343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c78::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:c0:f1:3d:6d:62:ab:45:72:4c:a2:3d:14:50:b1:6f:54:
         9a:a0:3a:46:76:f2:4e:f3:89:dd:1b:23:2f:8e:cb:69:8b:0e:
         e3:8a:5c:52:89:6a:27:61:df:08:77:68:85:ba:d7:da:60:7c:
         03:53:b8:be:fc:7f:3b:0d:32:6a:7f:fe:5b:58:59:96:42:9b:
         b5:1b:fd:5b:49:a6:72:04:1e:cf:de:af:af:b4:20:63:b2:c1:
         e9:86:87:5a:5e:5c:f4:ca:2c:3a:0e:b4:0b:2e:b3:d7:dd:ad:
         01:43:b8:10:3e:9b:f6:60:9d:b6:f8:53:dd:5d:73:2b:91:2b:
         d1:5d:ea:9d:53:88:28:22:ec:6b:28:fe:51:26:79:ea:0d:70:
         83:9f:65:15:78:62:4e:6f:f4:35:94:a2:64:9e:53:84:6f:ab:
         6d:e0:7e:c4:0c:51:c9:61:26:56:48:9f:09:96:63:5b:dd:d7:
         61:7b:37:58:85:0b:f8:f6:58:bc:6b:e2:31:cd:1b:83:fd:0f:
         c3:ab:8b:ad:a0:0e:96:69:0b:39:14:2a:c5:10:b3:c6:05:4c:
         54:2f:bd:a9:6a:f2:5a:b7:3b:33:de:49:cb:eb:0b:4c:32:70:
         ad:3f:71:62:da:41:13:3c:fe:96:c3:75:ae:85:a2:6e:1e:5f:
         4d:f0:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:55:34 2026 by rpki-client