Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a3a2f33322d3332203d3e20323634343835.roa
File:                     323830343a323035303a3a2f33322d3332203d3e20323634343835.roa (raw, json)
Hash identifier:          B3+9IvhYZ+Ij0qPQ3rqVlD0sy7aFcOnbyx4PdmQzPfE=
Subject key identifier:   BB:EC:67:E0:48:A8:69:77:0B:79:56:BC:82:5C:CD:BA:0D:BE:C2:DE
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       0B84B933256A77AB718C71A86D709D848AE2BC92
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a3a2f33322d3332203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:46 +0000
ROA not before:           Tue 28 Apr 2026 19:31:46 +0000
ROA not after:            Tue 27 Apr 2027 19:36:46 +0000
asID:                     264485
IP address blocks:        2804:2050::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:84:b9:33:25:6a:77:ab:71:8c:71:a8:6d:70:9d:84:8a:e2:bc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:46 2026 GMT
            Not After : Apr 27 19:36:46 2027 GMT
        Subject: CN=BBEC67E048A869770B7956BC825CCDBA0DBEC2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:ed:aa:48:fd:b3:02:fa:4d:cd:6d:6f:fb:
                    1d:fd:5d:a2:d4:c9:db:69:85:39:6c:95:18:0e:87:
                    47:f8:be:97:bc:7a:8d:01:f3:64:5f:68:83:fb:07:
                    88:d6:9b:e1:6b:ad:0e:e5:03:a4:a0:0f:34:1a:00:
                    47:11:40:18:c5:e3:85:b8:b7:56:2c:fe:e6:73:9b:
                    6c:77:1f:bd:52:eb:e2:3a:9f:08:25:99:0e:bb:ab:
                    b2:0a:98:a0:8e:45:d4:9b:28:2d:ac:29:c7:86:47:
                    d3:5b:a5:d1:cd:f6:af:6f:83:7d:46:f1:e3:52:24:
                    16:08:f5:97:cd:95:8e:6f:29:15:8a:69:3b:41:ff:
                    84:14:fd:88:fb:99:42:6a:52:8b:27:0c:4c:ca:3d:
                    0e:36:3f:7b:95:29:32:88:e9:0c:a6:77:e2:25:39:
                    50:1a:ed:89:28:17:cd:9e:01:64:fc:ce:c9:2b:a8:
                    c0:e1:1c:f3:ad:49:75:d5:d4:1e:e7:4c:9e:02:76:
                    00:af:db:cb:26:00:de:55:6c:b7:32:97:5b:02:e3:
                    85:b3:c6:d4:1d:49:65:94:fb:1c:bd:b2:fc:83:b8:
                    ae:89:15:25:d5:31:4a:6d:19:b2:a3:ab:ee:c6:40:
                    81:6f:7e:f5:f0:59:09:79:73:a6:17:22:1e:1e:ca:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EC:67:E0:48:A8:69:77:0B:79:56:BC:82:5C:CD:BA:0D:BE:C2:DE
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a3a2f33322d3332203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050::/32

    Signature Algorithm: sha256WithRSAEncryption
         de:0c:49:a1:2c:dc:d7:70:61:ed:1f:fb:38:ad:7f:98:d7:58:
         96:23:96:58:df:e0:50:43:92:49:49:12:92:d1:fa:2d:9c:d3:
         a8:84:97:82:5d:5f:eb:63:13:17:de:ea:e1:5f:44:d5:d3:c5:
         da:cc:0a:54:97:80:60:34:97:71:ca:c0:d3:ed:37:e0:02:e0:
         8f:1e:0b:df:df:ab:36:3c:65:04:9d:4f:93:b9:21:24:32:d7:
         79:62:c9:2a:24:ab:70:2d:b8:5e:57:49:0e:30:4e:5f:17:33:
         f1:ea:fb:54:6a:40:0e:48:b0:a3:24:11:73:df:14:07:26:81:
         b4:45:68:45:7c:15:07:a2:02:48:cf:dc:b8:39:70:7a:91:32:
         51:aa:0f:b6:4a:6e:60:ee:b7:42:4f:21:8e:c0:db:ae:ec:cc:
         bb:40:3f:ad:7a:fe:e5:6b:30:ac:b6:ab:49:94:15:d1:bc:19:
         84:4c:e9:74:0e:12:34:8a:2f:77:8f:eb:92:69:36:f3:91:71:
         af:27:75:c3:78:de:cd:66:bd:99:92:f5:fa:d5:20:e8:65:3e:
         79:3c:0c:1b:3c:3f:34:96:75:30:a5:26:13:16:92:de:30:09:
         d0:72:6b:c3:62:ea:01:e4:2c:7a:9b:90:3f:90:65:8a:6b:ce:
         f9:a1:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:59:54 2026 by rpki-client