Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a633030303a3a2f33342d3334203d3e20323635313431.roa
File:                     323830343a326233383a633030303a3a2f33342d3334203d3e20323635313431.roa (raw, json)
Hash identifier:          OF3rjBoUc0e1l/yw64CaVsp1OypxHBrZf6fd6In2sd8=
Subject key identifier:   78:83:53:59:C5:30:7D:5D:93:7A:42:2D:D6:04:87:B0:A9:79:B4:D0
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       43B7D773EF9F738EB84C24765924F5A8AF85036B
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a633030303a3a2f33342d3334203d3e20323635313431.roa
Signing time:             Mon 27 Apr 2026 18:35:14 +0000
ROA not before:           Mon 27 Apr 2026 18:30:14 +0000
ROA not after:            Mon 26 Apr 2027 18:35:14 +0000
asID:                     265141
IP address blocks:        2804:2b38:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b7:d7:73:ef:9f:73:8e:b8:4c:24:76:59:24:f5:a8:af:85:03:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Apr 27 18:30:14 2026 GMT
            Not After : Apr 26 18:35:14 2027 GMT
        Subject: CN=78835359C5307D5D937A422DD60487B0A979B4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:3c:d2:6a:79:27:61:60:fe:c3:cb:bc:d0:
                    17:94:c5:ee:1b:3d:ca:37:7b:28:66:23:b2:6e:10:
                    aa:3e:94:7a:10:1f:e0:91:4a:69:d6:cb:80:f1:25:
                    e1:fa:1c:d8:7d:a3:0c:82:63:04:86:75:df:b0:1f:
                    69:cb:3c:3d:4f:33:e0:25:63:6f:10:d9:88:31:25:
                    06:cc:22:a9:32:79:11:a6:9e:e8:fc:0c:dd:69:ed:
                    f9:4e:6b:9f:35:7d:cb:2c:c3:f2:e4:44:43:16:dd:
                    2d:65:ee:c9:c8:b1:b7:b2:98:3f:ca:a3:8b:a9:f3:
                    11:41:85:57:fb:38:aa:a2:6d:57:88:6c:f2:d8:38:
                    80:22:2e:5c:c8:63:62:2e:c8:7e:4c:4a:a7:f6:1f:
                    29:48:1a:54:96:93:a1:6f:13:7c:2b:05:91:3a:19:
                    92:c5:24:3b:82:28:15:fd:f1:ff:10:28:18:c9:a8:
                    65:00:65:6b:f8:c6:00:e1:e7:ca:4a:94:58:35:dd:
                    b4:ae:68:c8:ef:5f:2a:1a:0a:cc:5b:00:7c:b9:67:
                    20:3a:4f:23:1b:64:db:d3:f5:ec:26:b6:ae:e8:70:
                    1d:8c:e0:4a:ef:4d:af:70:9e:dc:3a:ed:7f:b6:e5:
                    16:41:b4:76:95:43:4b:48:d9:9d:d0:c1:f9:3d:29:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:83:53:59:C5:30:7D:5D:93:7A:42:2D:D6:04:87:B0:A9:79:B4:D0
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a633030303a3a2f33342d3334203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         46:cf:12:63:79:2e:00:14:06:4a:01:d2:0e:d4:35:5d:62:bc:
         22:11:7a:9c:4f:2b:06:57:61:cd:31:2c:c7:ba:18:bf:e8:12:
         dc:51:9f:c3:bb:e3:d7:7f:76:61:37:69:8b:23:44:72:25:8e:
         cd:34:a9:3a:b0:c4:fa:e3:44:f3:61:18:1d:6c:1e:95:c4:8f:
         91:43:2e:b2:05:f2:f6:d9:84:70:a8:16:20:46:0e:1e:30:9f:
         13:93:5f:09:93:0c:50:34:2f:48:54:87:a4:f4:77:a6:43:3f:
         a7:bc:2d:f1:f4:f0:f4:3f:60:9c:85:ac:2a:1b:0d:47:04:28:
         cb:47:ee:67:16:7b:07:c3:49:35:94:d8:83:c6:b9:08:51:df:
         a6:78:cb:d8:25:77:7f:49:43:ea:fc:f8:c9:f4:81:d5:13:bb:
         68:45:6a:ae:bf:99:82:9f:0f:14:e9:36:f2:bc:79:2b:57:d9:
         78:e9:33:61:df:86:7a:19:83:b3:f8:7c:26:77:e7:d0:cb:61:
         33:34:2b:c8:27:52:c2:2a:44:34:7f:54:f7:12:d1:f3:37:a4:
         08:16:ba:51:ec:f0:f1:66:7d:d4:a3:aa:53:e0:ac:85:ec:bf:
         39:d2:31:6b:9c:e8:bd:69:41:40:57:9e:c8:5d:c8:91:96:29:
         b8:08:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:17 2026 by rpki-client