Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa
File:                     323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa (raw, json)
Hash identifier:          +Rz8FT2dcoOXlFk1QAj8xM6op+Fx23tktLJTskvKeQc=
Subject key identifier:   D7:37:7F:98:1D:B8:88:16:6F:D2:0C:F4:E5:99:B4:21:2B:DB:BE:42
Certificate issuer:       /CN=5F4A2C3E1A428B876DEF7FD3D7F193580770871F
Certificate serial:       23BE8217E7B2196BC499D7B36D6453F5C747ABDD
Authority key identifier: 5F:4A:2C:3E:1A:42:8B:87:6D:EF:7F:D3:D7:F1:93:58:07:70:87:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa
Signing time:             Fri 20 Mar 2026 13:33:07 +0000
ROA not before:           Fri 20 Mar 2026 13:28:07 +0000
ROA not after:            Fri 19 Mar 2027 13:33:07 +0000
asID:                     267668
IP address blocks:        2804:4508:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 18:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:be:82:17:e7:b2:19:6b:c4:99:d7:b3:6d:64:53:f5:c7:47:ab:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F4A2C3E1A428B876DEF7FD3D7F193580770871F
        Validity
            Not Before: Mar 20 13:28:07 2026 GMT
            Not After : Mar 19 13:33:07 2027 GMT
        Subject: CN=D7377F981DB888166FD20CF4E599B4212BDBBE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:53:b3:98:db:6d:61:6d:83:e3:e3:97:ab:
                    7a:00:27:f1:e4:ac:6b:6d:66:9f:9b:ba:49:d7:bc:
                    b4:51:a1:cb:2c:8d:40:88:6e:6a:6c:4f:7a:24:c7:
                    d3:b5:53:78:9e:76:9d:76:85:0c:47:93:28:c4:29:
                    1a:f8:aa:1b:39:0b:65:de:49:26:5d:b5:28:e4:7b:
                    72:38:bd:be:55:9d:11:9a:cf:d2:6c:1d:4c:77:3c:
                    ae:d7:54:0b:da:f6:05:04:25:91:a6:18:21:35:23:
                    d7:98:09:2d:e6:c3:77:44:29:42:cc:f5:b7:c1:31:
                    c7:7f:6e:a6:c0:33:70:93:4b:ed:04:e3:fb:c0:82:
                    0e:62:a2:5b:66:0a:b8:df:f5:77:6c:5c:88:e9:e3:
                    69:c0:b8:e7:4e:59:64:a1:d8:88:08:41:d5:b3:26:
                    49:dd:d6:6b:4f:15:42:72:35:f1:18:21:93:b3:48:
                    be:e3:2a:ec:e4:3b:e2:c1:f8:d8:dc:98:f5:27:c3:
                    33:2f:b3:f1:35:12:d7:02:cd:07:ea:cb:63:dc:63:
                    74:9f:d4:a8:af:fa:a2:16:36:8a:39:3a:0f:ed:d0:
                    c8:ab:b0:96:2e:a4:c3:05:41:65:65:58:55:b4:84:
                    ef:66:a1:55:97:8d:44:03:5d:de:bf:86:67:12:88:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:37:7F:98:1D:B8:88:16:6F:D2:0C:F4:E5:99:B4:21:2B:DB:BE:42
            X509v3 Authority Key Identifier:
                keyid:5F:4A:2C:3E:1A:42:8B:87:6D:EF:7F:D3:D7:F1:93:58:07:70:87:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:ca:ce:01:f2:ed:33:30:8b:f9:97:fd:cf:d2:90:69:41:
         ee:7e:26:27:b9:c0:cb:ca:e4:8f:bd:88:21:ea:c2:ac:c0:04:
         37:30:a5:1e:ce:48:32:93:63:d8:1f:bc:e8:e2:c8:dc:09:b8:
         3e:8b:8b:05:37:4e:13:76:8e:c0:21:06:f6:60:90:22:82:14:
         67:81:a1:32:93:7c:51:e5:1c:7f:65:d9:3a:3a:ae:0c:19:80:
         71:79:9d:6e:3d:48:bc:43:6c:cc:51:ad:24:0c:6a:cc:a7:60:
         15:f4:b9:c6:13:b3:7a:61:2a:d2:4b:af:66:d9:65:f0:dd:88:
         18:4e:a2:17:9c:c8:bc:2f:21:11:3f:00:11:92:9d:6c:fc:c4:
         be:e8:36:eb:23:95:da:9a:02:ed:d3:b2:c0:44:b0:d4:55:5c:
         64:97:de:76:97:5a:44:c4:fe:55:62:b9:81:90:a7:49:c6:a3:
         54:3a:32:73:e5:33:49:95:a3:8f:e2:19:8a:e5:d0:c2:65:39:
         28:62:0e:d7:4d:c5:ef:bf:46:af:51:7e:fe:6e:4b:a7:2f:00:
         c7:8f:44:30:cb:18:53:b8:12:a6:d9:01:7a:45:9c:5f:33:e5:
         e5:d8:c8:1d:1a:89:4e:cd:44:e1:39:0a:ab:3c:09:80:a4:ee:
         27:4c:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:57:18 2026 by rpki-client