Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/323830343a343131383a3a2f33322d3634203d3e20323636303033.roa
File:                     323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (raw, json)
Hash identifier:          PwEE2yFzWkd/RQGOKXJbPG6Y0N/z1Yd/al3n0qj/auM=
Subject key identifier:   DC:3C:53:57:F1:C3:65:50:86:CB:74:EC:E2:91:CB:32:F8:C3:8C:89
Certificate issuer:       /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Certificate serial:       68053F0FD877DDBC09A4037C6081B5EFA159045C
Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/323830343a343131383a3a2f33322d3634203d3e20323636303033.roa
Signing time:             Thu 07 May 2026 23:19:20 +0000
ROA not before:           Thu 07 May 2026 23:14:20 +0000
ROA not after:            Thu 06 May 2027 23:19:20 +0000
asID:                     266003
IP address blocks:        2804:4118::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
                          rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:05:3f:0f:d8:77:dd:bc:09:a4:03:7c:60:81:b5:ef:a1:59:04:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
        Validity
            Not Before: May  7 23:14:20 2026 GMT
            Not After : May  6 23:19:20 2027 GMT
        Subject: CN=DC3C5357F1C3655086CB74ECE291CB32F8C38C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:2f:c5:7e:70:5b:d6:78:fe:87:d9:a2:0d:
                    99:32:23:29:7a:b9:45:bc:14:fc:37:9a:93:66:b4:
                    97:ae:18:d6:be:37:3a:50:ff:68:12:5b:a7:1f:23:
                    c9:63:53:2c:da:5b:6d:d3:4f:f7:6d:75:8b:08:27:
                    ae:55:9f:1d:c4:3f:fe:3a:aa:bb:59:3c:3d:7b:23:
                    00:eb:0b:a3:b6:6f:92:4e:4b:67:66:40:77:e7:66:
                    e5:d1:4f:16:33:23:71:51:71:7d:20:58:21:83:f2:
                    76:62:f3:99:db:7f:72:ed:53:1c:c9:6a:5d:53:28:
                    19:a4:e6:5a:9a:95:32:8f:4a:92:b5:6b:01:64:b1:
                    e3:83:2f:08:e7:64:22:c9:f0:4e:c8:75:b4:a4:d9:
                    2f:93:12:95:22:9a:8b:bc:e5:bf:17:7a:de:61:26:
                    b3:ce:87:51:50:90:1a:0b:34:d4:01:a6:ce:ba:4f:
                    d9:f9:01:e3:cb:48:e6:8c:cc:ea:e7:c6:ad:2f:91:
                    05:ac:11:46:7f:d1:6f:34:b0:87:44:23:7b:26:83:
                    56:ff:af:52:c2:80:0e:28:2a:5e:07:c3:16:0d:08:
                    0d:83:52:1a:af:82:81:74:e3:8f:b3:93:a9:5b:f5:
                    b5:e4:f4:41:ff:9f:27:65:20:f4:5c:3b:63:d2:6f:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3C:53:57:F1:C3:65:50:86:CB:74:EC:E2:91:CB:32:F8:C3:8C:89
            X509v3 Authority Key Identifier:
                keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/323830343a343131383a3a2f33322d3634203d3e20323636303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4118::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:a7:c2:a3:73:8d:ce:bb:45:41:0c:06:3f:42:7c:1b:93:
         d4:c1:4d:fc:89:9e:93:d5:92:88:2c:91:1a:03:0c:b6:77:75:
         78:59:a7:6c:c0:8b:a9:5b:73:5b:d8:dc:b3:88:c1:80:64:98:
         65:72:2f:6a:37:a6:94:0f:29:f0:09:bb:63:dc:67:11:3b:bc:
         62:57:5d:89:b4:75:0f:ee:c0:b3:85:f3:14:dc:e6:3a:b3:c5:
         5d:5a:72:2c:7b:f3:4b:78:a4:32:72:95:a0:d6:d8:f5:0a:69:
         98:b7:b3:ec:e4:4d:4a:05:55:03:de:2b:8c:72:7a:7a:75:99:
         b1:cf:e1:e1:ee:fa:e2:2a:91:9e:d6:90:22:98:e1:f7:29:cc:
         6b:6b:4c:0a:67:50:7a:43:ae:04:93:b3:07:e1:e2:2c:3a:d8:
         32:a4:49:64:c1:97:66:45:32:81:f5:56:ad:a0:97:62:65:9e:
         3e:1e:b8:47:ed:81:b7:ad:54:9b:95:1a:9a:32:f4:9f:67:1f:
         dd:07:f8:49:91:b4:77:e0:dd:58:3f:65:de:e0:6a:7e:2a:68:
         e9:0a:b4:2f:32:02:ce:63:41:0e:23:bc:84:bf:fd:dc:b8:71:
         8e:f3:8a:c7:7e:e9:91:bb:ad:48:e1:31:a8:5f:93:a7:ee:43:
         77:a9:eb:3c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaAU/D9h33bwJpAN8YIG176FZBFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEwNzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVC
NUFCODFENDAeFw0yNjA1MDcyMzE0MjBaFw0yNzA1MDYyMzE5MjBaMDMxMTAvBgNV
BAMTKERDM0M1MzU3RjFDMzY1NTA4NkNCNzRFQ0UyOTFDQjMyRjhDMzhDODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAy/FfnBb1nj+h9miDZkyIyl6
uUW8FPw3mpNmtJeuGNa+NzpQ/2gSW6cfI8ljUyzaW23TT/dtdYsIJ65Vnx3EP/46
qrtZPD17IwDrC6O2b5JOS2dmQHfnZuXRTxYzI3FRcX0gWCGD8nZi85nbf3LtUxzJ
al1TKBmk5lqalTKPSpK1awFkseODLwjnZCLJ8E7IdbSk2S+TEpUimou85b8Xet5h
JrPOh1FQkBoLNNQBps66T9n5AePLSOaMzOrnxq0vkQWsEUZ/0W80sIdEI3smg1b/
r1LCgA4oKl4HwxYNCA2DUhqvgoF044+zk6lb9bXk9EH/nydlIPRcO2PSb3oBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3DxTV/HDZVCGy3Ts4pHLMvjDjIkwHwYDVR0j
BBgwFoAUqgeOj16k7++OcAPgqbIRZbWrgdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpq
ZEgvMC9BQTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDc4RThGNUVBNEVGRUY4
RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxZHVFdUY4ZUxCdGlXcWVCNnpGbnZHakpzN052dEJudTM3Ym9yS1Z6amRILzAv
MzIzODMwMzQzYTM0MzEzMTM4M2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzNjM2
MzAzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARBGDANBgkqhkiG9w0BAQsFAAOCAQEAicWnwqNz
jc67RUEMBj9CfBuT1MFN/Imek9WSiCyRGgMMtnd1eFmnbMCLqVtzW9jcs4jBgGSY
ZXIvajemlA8p8Am7Y9xnETu8YlddibR1D+7As4XzFNzmOrPFXVpyLHvzS3ikMnKV
oNbY9QppmLez7ORNSgVVA94rjHJ6enWZsc/h4e764iqRntaQIpjh9ynMa2tMCmdQ
ekOuBJOzB+HiLDrYMqRJZMGXZkUygfVWraCXYmWePh64R+2Bt61Um5UamjL0n2cf
3Qf4SZG0d+DdWD9l3uBqfipo6Qq0LzICzmNBDiO8hL/93LhxjvOKx37pkbutSOEx
qF+Tp+5Dd6nrPA==
-----END CERTIFICATE-----
Generated at Wed May 13 19:43:29 2026 by rpki-client