Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a343030303a3a2f33342d3334203d3e20323635313431.roa
File:                     323830343a326233383a343030303a3a2f33342d3334203d3e20323635313431.roa (raw, json)
Hash identifier:          FMouxGvWiHmxBawaowktSXstPIToS/6J74DhMsMGPMc=
Subject key identifier:   E1:85:B6:C2:D2:46:68:DD:46:12:7C:A2:1A:0D:54:0A:77:86:1A:56
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       16ADB75EC843BEF17FA56545A8D8F3B8E197D30B
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a343030303a3a2f33342d3334203d3e20323635313431.roa
Signing time:             Mon 27 Apr 2026 18:35:21 +0000
ROA not before:           Mon 27 Apr 2026 18:30:21 +0000
ROA not after:            Mon 26 Apr 2027 18:35:21 +0000
asID:                     265141
IP address blocks:        2804:2b38:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ad:b7:5e:c8:43:be:f1:7f:a5:65:45:a8:d8:f3:b8:e1:97:d3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Apr 27 18:30:21 2026 GMT
            Not After : Apr 26 18:35:21 2027 GMT
        Subject: CN=E185B6C2D24668DD46127CA21A0D540A77861A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:b9:46:d1:8a:1c:84:68:c7:9b:a4:a1:d8:
                    00:21:e7:f1:d5:47:11:59:db:ac:7a:23:49:e6:69:
                    dd:bb:0b:43:d0:c9:38:14:9e:c2:c8:aa:91:a9:d9:
                    65:03:05:c4:0d:a3:23:d1:00:34:1c:b8:cd:11:07:
                    22:e4:21:4a:aa:b5:27:a3:17:6e:36:5d:e9:e2:dc:
                    cd:de:32:c1:45:c0:ee:83:8f:89:6e:86:57:63:79:
                    67:18:57:79:f5:4a:98:78:06:a3:7d:cc:20:00:fe:
                    7c:9f:b8:24:73:63:be:a1:b8:b5:6f:19:01:83:27:
                    88:e9:eb:b4:c2:c7:85:1e:13:97:3f:a5:fd:77:ee:
                    91:20:16:fe:b6:4e:80:37:e1:cf:2d:8d:a1:25:31:
                    d5:c4:35:34:b4:36:c5:c0:93:3b:ea:b9:36:b9:e1:
                    0a:18:15:35:9c:28:41:dc:8e:18:16:a6:42:97:80:
                    7c:c7:d6:08:ab:02:1f:56:80:c0:ad:69:d6:53:93:
                    ff:e3:66:2b:0c:12:d0:cd:e8:96:e3:37:24:5c:14:
                    1e:d3:d8:16:fa:75:74:e7:e7:8f:dc:d9:c9:65:b7:
                    60:f8:5f:08:e9:14:77:0e:62:cb:28:75:18:44:dd:
                    39:2f:ff:d0:9c:ef:62:5c:3a:90:60:ab:57:af:c1:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:85:B6:C2:D2:46:68:DD:46:12:7C:A2:1A:0D:54:0A:77:86:1A:56
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a343030303a3a2f33342d3334203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:d1:a7:dc:f2:f4:bc:fa:64:ec:08:80:1d:0b:52:19:b5:
         79:08:99:3e:54:58:6e:7a:9f:a0:56:51:3b:c9:77:c0:0a:f4:
         ef:37:db:a4:e0:c4:d5:70:f0:a7:e3:c6:8b:20:15:a6:eb:2f:
         b6:19:96:49:f0:d3:cf:bf:49:b5:bd:1c:bc:ca:a9:a8:3b:f5:
         34:7f:34:7d:a4:1f:44:31:6b:a3:f1:89:04:78:df:87:9a:32:
         a0:0d:e6:90:91:5a:00:1f:d3:55:00:42:b1:7b:50:37:eb:69:
         1d:05:7c:bb:db:04:7e:b0:d2:a0:c2:b6:c1:31:d3:ab:32:0a:
         f4:af:ad:d8:38:cc:89:00:55:cc:ac:be:07:ce:cb:90:1b:9a:
         76:d0:3c:18:f1:0f:95:c9:a8:c1:22:be:94:28:06:aa:b9:e2:
         f4:62:49:ed:58:bb:27:72:be:5f:60:78:b2:b0:12:6c:bc:1b:
         80:ab:46:37:e8:01:98:5b:16:76:26:c8:f9:62:f4:6a:74:6e:
         05:bb:95:62:00:6f:ac:ae:72:78:8e:b4:72:a8:65:02:3c:b3:
         d3:c7:27:41:d0:f3:46:dd:27:77:70:b0:49:f1:43:84:26:49:
         b1:01:f9:8d:c8:db:68:9f:95:1e:14:89:d8:7c:55:b5:81:69:
         cf:4b:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:18 2026 by rpki-client