Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/323830343a313133633a3a2f33322d313238203d3e203533313831.roa
File:                     323830343a313133633a3a2f33322d313238203d3e203533313831.roa (raw, json)
Hash identifier:          OecBUCYkrKTyWYL4WQ5GWNTtBKsmHjxtNhm4PhIxeGE=
Subject key identifier:   16:4C:6C:1B:9B:01:B3:4A:A3:30:B8:F4:5E:63:50:E9:E5:68:60:53
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       27CD37C0911541E516BFC68378048689CD4B9053
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/323830343a313133633a3a2f33322d313238203d3e203533313831.roa
Signing time:             Sat 07 Mar 2026 21:18:14 +0000
ROA not before:           Sat 07 Mar 2026 21:13:14 +0000
ROA not after:            Sat 06 Mar 2027 21:18:14 +0000
asID:                     53181
IP address blocks:        2804:113c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cd:37:c0:91:15:41:e5:16:bf:c6:83:78:04:86:89:cd:4b:90:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Mar  7 21:13:14 2026 GMT
            Not After : Mar  6 21:18:14 2027 GMT
        Subject: CN=164C6C1B9B01B34AA330B8F45E6350E9E5686053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:cf:8a:f4:e0:e8:be:5b:49:9c:7b:05:62:
                    ea:b8:48:ac:c0:aa:5b:78:11:52:17:4e:e5:3c:93:
                    9c:3c:33:90:e0:50:3e:05:6a:f4:2f:9e:c5:4d:b2:
                    23:4a:c2:5c:78:a4:8b:d6:d6:f4:17:ea:3b:74:1c:
                    4f:c5:8c:84:91:83:c8:29:ae:0c:6c:47:46:72:e4:
                    8f:ed:38:77:28:f4:00:ea:25:98:6c:36:92:73:21:
                    94:82:62:8e:77:6c:ed:7e:da:30:bb:fb:20:3a:a7:
                    f6:da:a4:31:07:8f:76:0e:04:05:a9:36:80:4b:b5:
                    a1:09:90:03:fc:67:84:03:71:ae:58:4e:d0:c0:ee:
                    be:b3:0a:c4:45:17:5b:a3:e1:9f:04:57:02:a3:e1:
                    57:1a:1e:6e:89:34:e3:59:85:97:59:e8:0c:93:a0:
                    8e:b9:72:a4:03:15:7a:79:2e:59:57:9a:b4:e3:d7:
                    3a:14:70:44:32:fb:ce:49:56:5a:e7:a9:3b:34:ec:
                    15:70:d5:9d:fd:60:22:3c:a9:fc:5e:f1:f3:41:0b:
                    f0:31:8c:f7:4c:48:6d:e0:48:4f:ea:62:50:4f:52:
                    0c:bf:db:7e:22:02:88:f4:10:e7:da:2e:b5:2f:3e:
                    f6:84:82:41:8e:19:f9:f4:d1:ff:fa:6b:05:ea:33:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:6C:1B:9B:01:B3:4A:A3:30:B8:F4:5E:63:50:E9:E5:68:60:53
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/323830343a313133633a3a2f33322d313238203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:113c::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:93:48:81:02:bf:df:25:a0:74:14:81:4c:09:0b:26:d8:02:
         e8:15:e5:b9:b3:39:83:18:04:28:6b:9b:91:56:e0:b0:0f:e8:
         d4:12:a7:f2:f2:d3:15:fe:17:8a:29:60:62:a6:d1:97:aa:6c:
         91:5b:ba:9a:03:83:ee:5e:9a:b5:c8:37:d3:94:bf:dc:39:6e:
         be:5f:46:c4:72:9e:71:9b:14:70:1f:50:12:a9:ab:a5:f3:1c:
         b2:0c:11:6f:a2:b6:10:61:bc:0e:e3:15:48:26:d2:f8:58:6e:
         6f:76:7c:a5:fe:f0:2a:ba:17:b6:ff:1e:65:52:23:0f:0e:b2:
         52:64:37:0b:5f:7f:e7:24:83:bb:c9:24:32:c3:62:03:cd:58:
         ee:f9:b9:01:ee:d2:60:54:c3:a4:39:1b:e2:8e:80:33:94:b4:
         b8:a3:66:5b:40:f1:d2:24:c4:58:09:a6:0c:db:5a:d5:a5:00:
         76:1f:f7:0c:4b:57:e0:47:f9:3e:92:6d:cc:89:04:14:a3:43:
         4e:b8:43:79:07:f1:b1:41:a8:f7:ba:34:bb:b2:dd:aa:f8:f8:
         f5:9a:49:aa:25:fd:f3:86:a2:16:32:83:c5:ea:a5:0c:de:1a:
         46:a3:82:a8:43:61:03:14:a8:18:cd:a4:42:aa:66:ee:a7:64:
         d4:8c:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:45 2026 by rpki-client