Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3130303a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a3130303a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          n1ywwkN3nrYwJeomGriFxD2Lu2jbqBZc5PydZLzbRZ0=
Subject key identifier:   69:E7:A7:A3:AC:45:6F:95:18:63:12:32:09:D1:81:8E:42:31:8A:A3
Certificate issuer:       /CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
Certificate serial:       46A76CEC3B13A11C067817DDE21FD3B5B0C8EDAA
Authority key identifier: A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3130303a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Tue 28 Apr 2026 20:47:28 +0000
ROA not before:           Tue 28 Apr 2026 20:42:28 +0000
ROA not after:            Tue 27 Apr 2027 20:47:28 +0000
asID:                     269566
IP address blocks:        2804:6688:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a7:6c:ec:3b:13:a1:1c:06:78:17:dd:e2:1f:d3:b5:b0:c8:ed:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
        Validity
            Not Before: Apr 28 20:42:28 2026 GMT
            Not After : Apr 27 20:47:28 2027 GMT
        Subject: CN=69E7A7A3AC456F951863123209D1818E42318AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:ff:30:e1:b6:6a:91:fb:00:49:bc:5e:43:
                    1a:d6:0f:7c:02:4b:83:e8:03:cd:2a:3c:13:ab:a1:
                    51:56:1a:f4:da:90:84:aa:25:b9:8e:29:0b:41:d2:
                    b8:72:81:7d:3e:bc:35:00:80:84:c9:6c:47:15:94:
                    3d:8d:00:46:fe:5b:5c:b2:20:e8:69:fa:2a:84:2c:
                    42:eb:a1:f1:2c:9a:bb:9c:18:2e:da:60:af:da:1d:
                    3f:33:63:fb:0f:ac:a3:d4:0b:d5:27:f2:e6:5b:1c:
                    57:65:1e:2a:b4:b9:b7:54:ca:e5:eb:76:51:70:19:
                    03:12:08:2b:62:28:e1:c4:a1:22:35:c5:c6:b4:00:
                    c4:43:2f:3d:00:39:14:7a:52:f5:4e:65:77:bd:05:
                    2b:cc:f2:2c:a9:91:86:32:60:13:44:dc:f9:cf:39:
                    24:fa:0b:25:4b:38:28:b3:1c:ba:d1:29:51:6d:47:
                    78:98:7d:06:8e:a3:75:07:4f:7d:b1:02:da:ba:9d:
                    89:7e:30:77:50:f3:d5:47:13:14:2a:69:31:81:2f:
                    b4:85:07:e8:52:d0:d1:28:33:1f:13:e8:da:79:25:
                    85:6d:5d:b5:81:02:09:52:7c:d7:28:ce:8d:eb:a3:
                    78:c8:4a:1a:42:cc:68:f6:42:48:2e:84:80:7d:74:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E7:A7:A3:AC:45:6F:95:18:63:12:32:09:D1:81:8E:42:31:8A:A3
            X509v3 Authority Key Identifier:
                keyid:A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a3130303a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:96:7d:9d:d2:1f:a9:78:4e:22:43:af:a9:3e:40:5f:5a:
         30:6c:1b:c5:74:fb:42:3d:6a:d7:c2:fa:8c:83:79:08:ed:af:
         74:9c:8a:83:6e:01:d3:c2:db:3d:10:d8:b3:ad:5f:21:d5:45:
         f9:d7:cd:d0:bc:96:d0:59:bc:3f:10:ee:fb:ac:92:7b:85:da:
         2e:c9:4b:7f:89:aa:2d:f9:80:65:94:aa:3f:97:d2:4f:78:d1:
         16:b1:15:1c:c8:86:2f:7f:57:28:39:9b:f7:a8:f2:87:ce:d4:
         04:7e:aa:e0:f7:09:10:ee:3b:37:f2:6e:46:eb:18:04:15:26:
         e5:57:b9:f3:7a:d4:a3:c0:fa:94:40:92:70:c2:8d:f2:b3:6c:
         c6:0a:39:b2:b8:02:ed:77:00:6e:1f:05:f0:93:9b:0f:ba:6e:
         97:60:56:e7:e2:71:d4:59:45:b3:8f:fa:21:bf:79:11:11:0e:
         f2:fd:85:71:ab:19:3f:9a:50:a7:90:22:ba:29:4e:19:ba:24:
         02:28:5c:4d:f7:cb:c2:35:b1:e4:66:9b:5f:5e:be:b0:cf:85:
         1c:85:96:35:81:14:7d:fe:b3:ba:25:84:61:fb:bf:32:41:af:
         84:43:95:7d:31:29:82:08:8e:58:68:85:ca:80:91:ad:88:6f:
         d3:65:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:35:35 2026 by rpki-client