Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa
File:                     323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa (raw, json)
Hash identifier:          P+yriv0c5nKzsM2rjqfKvDDPvO3TLXIHeBjnKRD9HSA=
Subject key identifier:   BB:9D:B8:FF:62:D5:15:5A:99:0B:B0:63:D0:64:BD:03:F3:41:A4:B8
Certificate issuer:       /CN=ECD4725324FBC57DFE5054662BCC9E3FA9BAD660
Certificate serial:       4F3125E7492A45493F6A122C4FEF880749F604BB
Authority key identifier: EC:D4:72:53:24:FB:C5:7D:FE:50:54:66:2B:CC:9E:3F:A9:BA:D6:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa
Signing time:             Wed 29 Apr 2026 01:18:11 +0000
ROA not before:           Wed 29 Apr 2026 01:13:11 +0000
ROA not after:            Wed 28 Apr 2027 01:18:11 +0000
asID:                     52772
IP address blocks:        2804:259c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:31:25:e7:49:2a:45:49:3f:6a:12:2c:4f:ef:88:07:49:f6:04:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD4725324FBC57DFE5054662BCC9E3FA9BAD660
        Validity
            Not Before: Apr 29 01:13:11 2026 GMT
            Not After : Apr 28 01:18:11 2027 GMT
        Subject: CN=BB9DB8FF62D5155A990BB063D064BD03F341A4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c2:a1:af:84:ff:54:89:8f:15:a7:e5:a4:22:
                    06:91:bf:4b:64:04:41:6f:0e:c8:3f:43:d2:c3:a9:
                    cd:75:85:04:8b:d4:15:a4:cf:25:a7:e6:c9:d5:ee:
                    b3:52:6b:d2:e6:dc:39:4f:6f:e7:ea:b5:3d:76:7b:
                    fc:a4:29:9b:a6:9d:ca:16:40:ef:d3:da:cb:ef:7c:
                    bd:0c:94:36:be:bb:fe:d2:78:27:a5:ee:b6:d1:e7:
                    3e:d1:c7:1f:79:c2:51:8f:3c:5c:ee:df:2b:4b:0d:
                    2b:26:2f:ad:a9:67:e9:55:88:24:1f:83:e9:58:c2:
                    84:a2:51:ae:54:5a:22:32:51:8a:bc:6d:29:b0:96:
                    8d:07:fd:f8:a6:52:29:24:d5:73:ce:b3:20:5b:27:
                    17:68:05:3f:7d:fe:da:65:03:8b:42:d5:ed:f4:71:
                    a9:8f:a7:7d:00:5e:4e:e2:3a:7f:08:1e:6f:f3:ef:
                    95:d7:91:cf:b6:34:67:af:1d:85:9f:05:9b:55:be:
                    e0:6a:45:0b:02:be:03:66:62:1c:b4:6c:9d:14:5f:
                    d3:02:03:d1:7c:67:43:89:3d:81:9a:7e:28:37:e0:
                    90:f6:bb:5e:94:2d:b2:0c:c9:cb:65:79:05:60:1c:
                    fb:23:2c:87:e8:1a:ab:4b:09:7f:7a:a8:33:1d:e8:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9D:B8:FF:62:D5:15:5A:99:0B:B0:63:D0:64:BD:03:F3:41:A4:B8
            X509v3 Authority Key Identifier:
                keyid:EC:D4:72:53:24:FB:C5:7D:FE:50:54:66:2B:CC:9E:3F:A9:BA:D6:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:0f:29:08:f0:3a:da:14:75:e9:3c:93:10:fa:a7:c7:d4:77:
         36:b6:c3:46:9d:27:e7:13:ed:b1:73:f9:d2:89:ed:03:2b:23:
         1c:93:53:76:d6:e8:6b:2d:80:2a:9f:82:70:96:e9:80:28:f8:
         42:c2:20:52:6e:2e:98:01:5e:16:58:06:2b:de:f5:0c:93:15:
         08:25:b4:eb:65:8c:31:13:50:65:e9:c4:5b:b9:ec:6e:13:44:
         ad:69:d6:16:4e:12:18:95:05:d9:d0:d2:c6:54:c4:48:08:f0:
         90:d3:37:3e:30:bc:d3:08:eb:77:22:2e:b1:c2:55:ae:06:80:
         84:f3:2e:43:28:7b:9c:34:ea:ee:e3:19:34:bf:cd:e5:6a:c0:
         5c:fa:e2:c7:f0:d3:8f:e2:b5:b6:6c:3e:50:1c:81:2c:7f:34:
         04:fe:1d:cc:6f:f2:4a:5b:cc:e9:f9:6d:05:46:6a:17:68:3b:
         03:ed:cb:46:46:95:73:d5:e7:2b:32:ec:e0:59:8a:f5:47:41:
         ce:76:8d:f9:58:53:c5:7a:00:5d:bc:5e:4a:d2:82:a5:97:bc:
         50:bb:6b:23:d1:b7:bf:5f:51:de:7a:b0:82:40:d7:80:b9:03:
         81:0c:df:eb:ea:01:32:43:c9:52:00:f5:ee:95:19:5a:30:0e:
         62:b5:e0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:20:34 2026 by rpki-client