Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
File:                     323830343a323539633a3a2f33322d3332203d3e203532373732.roa (raw, json)
Hash identifier:          33IMKb+cfxaXW6ZHuxMKD66DsvU+n2wMea7nt/G9McI=
Subject key identifier:   4D:C8:2A:C0:2E:60:57:53:E9:13:FC:3B:70:CD:37:81:01:D4:B9:81
Certificate issuer:       /CN=ECD4725324FBC57DFE5054662BCC9E3FA9BAD660
Certificate serial:       607FD8B18179F8FFB64F152B7112DB96DB83EDB3
Authority key identifier: EC:D4:72:53:24:FB:C5:7D:FE:50:54:66:2B:CC:9E:3F:A9:BA:D6:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
Signing time:             Wed 29 Apr 2026 01:18:11 +0000
ROA not before:           Wed 29 Apr 2026 01:13:11 +0000
ROA not after:            Wed 28 Apr 2027 01:18:11 +0000
asID:                     52772
IP address blocks:        2804:259c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:d8:b1:81:79:f8:ff:b6:4f:15:2b:71:12:db:96:db:83:ed:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD4725324FBC57DFE5054662BCC9E3FA9BAD660
        Validity
            Not Before: Apr 29 01:13:11 2026 GMT
            Not After : Apr 28 01:18:11 2027 GMT
        Subject: CN=4DC82AC02E605753E913FC3B70CD378101D4B981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8b:2f:2b:7e:3d:11:b0:93:14:67:42:48:1f:
                    ea:29:79:e8:5a:e1:b0:fb:d0:06:a2:46:91:83:cd:
                    47:67:26:f9:1c:5a:dd:6f:4b:47:b9:2d:68:1b:3d:
                    ff:75:96:ff:8a:d6:0c:c2:8e:b6:b1:97:af:fe:0d:
                    88:3b:72:6a:22:a9:0b:53:1f:c8:56:98:8f:f2:98:
                    78:3b:35:36:a9:ce:af:a0:69:f6:59:8f:2c:bd:1c:
                    07:e8:14:e2:91:72:f2:64:d3:34:be:79:87:c8:db:
                    87:58:bb:b4:c0:e5:ed:69:6b:2d:e7:b8:f0:46:f3:
                    76:a8:6d:fa:da:02:70:71:4b:f0:b6:c6:ee:e2:df:
                    bd:a0:11:2f:17:f0:18:55:ad:af:9d:e8:5c:5f:42:
                    c7:d4:85:66:94:3f:e4:e5:11:88:69:1e:2f:30:2a:
                    9b:73:1c:c8:13:6d:30:dd:ee:2e:24:0c:54:16:85:
                    f9:a9:55:f5:02:c4:3c:f0:6b:4d:43:85:b7:68:f8:
                    94:1b:b7:ea:4c:82:77:a9:b9:5e:b3:b5:02:f7:9f:
                    f1:5a:d4:82:27:8b:5d:e8:dc:ba:9d:ef:a4:46:9b:
                    f4:6a:79:d6:8d:c6:15:41:9b:e3:d4:80:53:e6:41:
                    5f:47:b0:24:51:ca:6d:28:24:fb:64:b8:b9:67:59:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:2A:C0:2E:60:57:53:E9:13:FC:3B:70:CD:37:81:01:D4:B9:81
            X509v3 Authority Key Identifier:
                keyid:EC:D4:72:53:24:FB:C5:7D:FE:50:54:66:2B:CC:9E:3F:A9:BA:D6:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD4725324FBC57DFE5054662BCC9E3FA9BAD660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:88:78:7f:30:37:13:1f:d2:00:e7:34:8e:8e:00:b2:5c:6c:
         ee:98:0f:88:51:56:b4:fa:fa:dc:09:d2:5f:92:ed:88:4c:77:
         9a:a3:78:83:f1:57:5f:a8:4f:83:af:1c:ff:45:3a:69:a9:f7:
         49:ac:a0:09:c2:3d:04:d9:29:bf:fe:ee:0e:1e:20:92:75:3a:
         cf:15:4c:91:67:ce:e9:37:d1:b2:7d:5f:d8:5f:28:58:ce:59:
         1a:ff:0f:db:74:fa:9e:8b:8e:84:ae:85:ee:4c:23:b8:35:8b:
         35:e2:1d:dc:27:0e:80:65:33:ed:ec:59:65:b1:5b:a6:70:16:
         74:89:8e:1b:19:09:ae:4e:53:b5:88:fb:7d:79:22:c6:f4:32:
         1b:d9:0d:f9:8a:58:d0:b7:7f:12:51:cf:85:4b:16:14:dd:d5:
         e9:cd:c2:4b:9d:84:70:36:4b:c8:e4:b6:62:55:db:2b:68:5d:
         a3:97:7b:55:72:4e:74:0f:53:7d:6b:6b:8d:6a:21:4d:59:bd:
         51:54:7e:62:e3:06:87:2e:7e:3a:24:88:ca:7c:ea:19:7f:0c:
         83:23:89:64:5d:fc:d9:a5:16:2e:12:94:1d:8a:95:fa:13:e5:
         24:e3:c8:55:cf:e1:fe:4e:19:ce:29:7b:48:98:ff:44:4d:d1:
         0e:4c:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:41:34 2026 by rpki-client