Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3332203d3e20323730383738.roa
File:                     323830343a373264343a3a2f33322d3332203d3e20323730383738.roa (raw, json)
Hash identifier:          nIFTOsm+qixJuTHWI2QHSvq6SamjJ4f6oLwwejS2tHY=
Subject key identifier:   7F:F4:0D:F9:2B:1B:E0:71:97:AD:95:99:37:FC:66:E3:3C:A0:B4:AB
Certificate issuer:       /CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
Certificate serial:       41D160272AD049992ACE016547CD502653E6A469
Authority key identifier: 4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3332203d3e20323730383738.roa
Signing time:             Thu 05 Mar 2026 15:58:36 +0000
ROA not before:           Thu 05 Mar 2026 15:53:36 +0000
ROA not after:            Thu 04 Mar 2027 15:58:36 +0000
asID:                     270878
IP address blocks:        2804:72d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d1:60:27:2a:d0:49:99:2a:ce:01:65:47:cd:50:26:53:e6:a4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
        Validity
            Not Before: Mar  5 15:53:36 2026 GMT
            Not After : Mar  4 15:58:36 2027 GMT
        Subject: CN=7FF40DF92B1BE07197AD959937FC66E33CA0B4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:30:56:a5:c0:e9:0b:9c:d4:2c:bc:d0:4f:
                    19:ba:eb:50:cd:54:5c:e5:56:73:ba:ee:89:58:fc:
                    79:c4:84:39:e3:25:92:65:32:8f:15:2e:d3:82:ce:
                    31:41:eb:47:f0:bb:72:44:31:c3:a9:a0:b2:12:26:
                    45:a1:7e:6f:7b:ea:88:a2:6b:c4:03:c0:7e:ee:a4:
                    ed:9f:13:f3:bc:4e:e8:6d:ac:c4:8e:ac:76:b5:bc:
                    ce:1f:92:39:43:13:fe:4b:96:61:69:48:1f:d9:64:
                    bd:0c:99:6d:33:a1:d6:c5:a5:f6:79:76:4e:fa:be:
                    0f:e8:ac:30:f5:9e:42:36:36:c5:5f:d7:b5:0a:e4:
                    ac:30:70:42:1b:06:bb:28:83:12:6a:ec:49:65:98:
                    ec:7d:b3:9b:ba:52:44:6c:a4:50:36:72:60:e8:52:
                    6a:8c:15:79:c5:fa:86:74:92:98:4e:ed:02:da:77:
                    2a:2a:8f:d7:dc:ec:7a:9a:1e:b7:6e:25:57:b5:50:
                    a6:e9:2a:68:c0:2c:7c:7c:2f:8e:61:9a:a3:f8:f9:
                    6b:e7:ca:f0:b5:03:b4:a4:c6:91:67:61:76:94:df:
                    20:02:97:75:dd:46:e3:83:cf:de:7b:f9:db:39:67:
                    3e:bd:f6:f5:96:8f:87:13:66:2e:e4:72:f6:10:92:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F4:0D:F9:2B:1B:E0:71:97:AD:95:99:37:FC:66:E3:3C:A0:B4:AB
            X509v3 Authority Key Identifier:
                keyid:4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3332203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:17:24:ae:78:03:c3:93:5a:b4:82:cf:0d:9e:53:c4:24:3a:
         c3:13:f3:93:2b:31:31:7f:d4:16:37:96:17:61:28:bc:7b:18:
         bf:50:7b:29:d8:ae:61:73:92:4d:72:69:e6:3e:1e:28:5b:bc:
         ed:de:f8:e2:7f:16:d9:d4:15:e5:0e:2e:3b:ce:5e:4d:ee:e6:
         d2:31:51:e0:1f:ec:9c:67:d4:8d:c5:20:b7:9d:16:37:4d:32:
         8a:b2:cc:f4:eb:7e:52:ca:8e:d2:72:ca:94:04:9a:12:5d:fb:
         a6:a1:c8:0f:e8:96:5a:f2:c2:82:38:a2:80:f1:fe:76:d3:bc:
         38:12:2d:93:b5:2e:9f:55:23:e0:1f:0b:0a:33:31:16:24:b2:
         97:ea:4b:04:5c:8e:c9:46:22:6a:6d:e0:83:99:85:a9:ea:95:
         b2:fe:21:a9:c8:c0:7f:14:64:9b:87:c2:a5:98:58:a1:77:ee:
         6e:f7:46:23:e5:03:b5:5c:41:7d:f7:59:59:97:90:10:3c:cb:
         e0:c5:9a:37:51:78:a4:47:7f:38:f1:9e:ca:80:0f:cb:f5:61:
         17:53:da:88:e0:03:19:e7:3a:59:14:7e:10:30:bc:a5:50:da:
         cc:0d:78:42:2c:6f:76:1f:8d:97:57:c1:77:40:ee:99:68:00:
         fe:62:0e:5f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQdFgJyrQSZkqzgFlR81QJlPmpGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzQzhFOTFCMUQxQzI4RDRGRTgyRTY3MTY1NzE1NTAz
RTlDQTc4NjAeFw0yNjAzMDUxNTUzMzZaFw0yNzAzMDQxNTU4MzZaMDMxMTAvBgNV
BAMTKDdGRjQwREY5MkIxQkUwNzE5N0FEOTU5OTM3RkM2NkUzM0NBMEI0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxjBWpcDpC5zULLzQTxm661DN
VFzlVnO67olY/HnEhDnjJZJlMo8VLtOCzjFB60fwu3JEMcOpoLISJkWhfm976oii
a8QDwH7upO2fE/O8TuhtrMSOrHa1vM4fkjlDE/5LlmFpSB/ZZL0MmW0zodbFpfZ5
dk76vg/orDD1nkI2NsVf17UK5KwwcEIbBrsogxJq7EllmOx9s5u6UkRspFA2cmDo
UmqMFXnF+oZ0kphO7QLadyoqj9fc7HqaHrduJVe1UKbpKmjALHx8L45hmqP4+Wvn
yvC1A7SkxpFnYXaU3yACl3XdRuODz957+ds5Zz699vWWj4cTZi7kcvYQkoTZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUf/QN+Ssb4HGXrZWZN/xm4zygtKswHwYDVR0j
BBgwFoAUTDyOkbHRwo1P6C5nFlcVUD6cp4YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVFqU0EzeUJCa3Y3dGcyTjNMYWphcUpFWng4UjdvTk45dmNyNm5YZ3pz
YWUvMC80QzNDOEU5MUIxRDFDMjhENEZFODJFNjcxNjU3MTU1MDNFOUNBNzg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDM0M4RTkxQjFEMUMyOEQ0
RkU4MkU2NzE2NTcxNTUwM0U5Q0E3ODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VRalNBM3lCQmt2N3RnMk4zTGFqYXFKRVp4OFI3b05OOXZjcjZuWGd6c2FlLzAv
MzIzODMwMzQzYTM3MzI2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARy1DANBgkqhkiG9w0BAQsFAAOCAQEAjBckrngD
w5NatILPDZ5TxCQ6wxPzkysxMX/UFjeWF2EovHsYv1B7KdiuYXOSTXJp5j4eKFu8
7d744n8W2dQV5Q4uO85eTe7m0jFR4B/snGfUjcUgt50WN00yirLM9Ot+UsqO0nLK
lASaEl37pqHID+iWWvLCgjiigPH+dtO8OBItk7Uun1Uj4B8LCjMxFiSyl+pLBFyO
yUYiam3gg5mFqeqVsv4hqcjAfxRkm4fCpZhYoXfubvdGI+UDtVxBffdZWZeQEDzL
4MWaN1F4pEd/OPGeyoAPy/VhF1PaiOADGec6WRR+EDC8pVDazA14Qixvdh+Nl1fB
d0DumWgA/mIOXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:52:33 2026 by rpki-client