Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3339633a3a2f33322d313238203d3e203238333239.roa
File:                     323830343a3339633a3a2f33322d313238203d3e203238333239.roa (raw, json)
Hash identifier:          p+azqgIN/qZT0PGV3MCmr/U4m6VFP4J/JAix55u7fyQ=
Subject key identifier:   E4:66:26:7D:07:32:41:45:93:13:EE:EB:83:C0:76:8F:C2:6A:EC:40
Certificate issuer:       /CN=617ABB72EF15B21D2E59DAB9087F83A02F381271
Certificate serial:       33C579F0C528A1DF2E895D50B791AE92B1A72853
Authority key identifier: 61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3339633a3a2f33322d313238203d3e203238333239.roa
Signing time:             Tue 28 Apr 2026 22:37:48 +0000
ROA not before:           Tue 28 Apr 2026 22:32:48 +0000
ROA not after:            Tue 27 Apr 2027 22:37:48 +0000
asID:                     28329
IP address blocks:        2804:39c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c5:79:f0:c5:28:a1:df:2e:89:5d:50:b7:91:ae:92:b1:a7:28:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617ABB72EF15B21D2E59DAB9087F83A02F381271
        Validity
            Not Before: Apr 28 22:32:48 2026 GMT
            Not After : Apr 27 22:37:48 2027 GMT
        Subject: CN=E466267D073241459313EEEB83C0768FC26AEC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:1f:24:08:e9:f9:c2:14:86:15:a8:67:c3:
                    0c:37:e5:d7:c4:fa:58:f0:67:15:cd:30:13:40:ba:
                    fb:dd:92:95:ea:7b:d8:81:b5:b0:c7:61:83:bb:11:
                    d1:48:98:72:5e:b9:2b:5d:07:72:d4:16:5e:b8:a9:
                    b8:d9:8e:a7:4b:c7:db:27:a1:d6:9e:4b:4f:c5:ba:
                    3f:6e:ab:a6:83:3a:95:92:0c:78:db:95:14:a4:ad:
                    7f:7b:f8:30:95:41:10:fc:d6:15:1f:36:59:e3:de:
                    ae:00:de:b7:3a:c2:4f:fa:0f:fc:0d:03:6d:2d:9a:
                    3b:00:dd:8c:a9:1f:17:0e:86:3a:6b:e7:b1:5b:92:
                    5a:47:e8:93:f1:44:c4:0d:ab:ce:d7:58:0a:58:50:
                    50:17:74:55:e5:26:0c:a4:2b:18:48:1e:58:c7:14:
                    3c:27:1e:bf:82:a3:9c:86:4d:0e:c1:62:0d:14:60:
                    e2:d3:e8:23:c5:90:d5:16:a2:ca:b9:ef:64:b8:cd:
                    ad:fe:6e:70:eb:e9:51:be:4a:2c:5a:01:ca:a3:a3:
                    29:d0:5a:c6:fe:34:1c:e4:5b:4a:d5:4a:9f:da:95:
                    37:a6:85:e9:42:75:f2:69:ee:cd:db:2b:17:3c:56:
                    4d:55:7d:80:47:21:25:34:8e:31:c4:34:19:54:8d:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:66:26:7D:07:32:41:45:93:13:EE:EB:83:C0:76:8F:C2:6A:EC:40
            X509v3 Authority Key Identifier:
                keyid:61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/323830343a3339633a3a2f33322d313238203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39c::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:b9:86:2b:9e:4f:6a:49:47:57:b7:da:7f:b0:89:db:b8:ab:
         39:c5:09:fc:30:69:a4:a0:a4:74:f6:50:10:c1:c4:98:04:8f:
         ba:4e:88:c2:03:d8:a6:d3:e2:4d:ae:77:7c:76:2b:ab:28:56:
         41:f2:72:0c:e8:42:dc:b6:43:13:12:f5:4c:6a:55:15:3a:5a:
         1d:f3:c6:05:45:7e:1e:6f:fa:5d:f1:86:fa:63:59:aa:57:b3:
         2b:d1:f8:69:19:33:4c:92:56:41:27:78:1e:54:f9:1d:9f:c1:
         4d:e3:53:c0:10:54:32:48:c1:11:f8:00:d5:5d:f9:f8:c8:49:
         4c:2d:e2:00:68:0f:e6:f6:29:67:73:4d:b3:0b:e8:75:7c:38:
         90:21:e1:6c:7f:d9:d4:d5:3d:a9:69:9c:e5:5e:22:17:ac:84:
         9a:b7:20:39:24:d5:9e:22:3d:e2:ba:a7:c3:a5:b6:ea:9c:20:
         07:6d:3b:f4:7c:0f:8f:ba:7a:1d:ad:66:5b:7e:84:08:3b:74:
         be:75:0e:f6:f7:44:cb:b5:79:e1:b4:4a:ce:95:7c:98:7e:5b:
         99:b7:5a:d4:aa:ce:86:83:af:97:8f:e5:90:00:dd:df:dd:3a:
         cb:78:03:46:92:2d:4f:a9:30:a5:76:fa:92:70:4a:39:24:b7:
         d6:5a:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:36:41 2026 by rpki-client