Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33322d3332203d3e20323730333735.roa
File:                     323830343a366231303a3a2f33322d3332203d3e20323730333735.roa (raw, json)
Hash identifier:          DTf61VlX7dBeTkd5J7n+6WV0YJbVGeZmkV9zGAaE6gc=
Subject key identifier:   A2:0A:1E:34:A2:C7:40:F9:BF:72:6A:C7:DD:76:42:BF:DD:EC:FB:34
Certificate issuer:       /CN=5DDC0AB4FF84A32E5E87D97B50F84AD194612E72
Certificate serial:       3A3CC76905E40F829B3531AE9283C2F7E7690217
Authority key identifier: 5D:DC:0A:B4:FF:84:A3:2E:5E:87:D9:7B:50:F8:4A:D1:94:61:2E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33322d3332203d3e20323730333735.roa
Signing time:             Fri 08 May 2026 02:04:02 +0000
ROA not before:           Fri 08 May 2026 01:59:02 +0000
ROA not after:            Fri 07 May 2027 02:04:02 +0000
asID:                     270375
IP address blocks:        2804:6b10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.crl
                          rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3c:c7:69:05:e4:0f:82:9b:35:31:ae:92:83:c2:f7:e7:69:02:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DDC0AB4FF84A32E5E87D97B50F84AD194612E72
        Validity
            Not Before: May  8 01:59:02 2026 GMT
            Not After : May  7 02:04:02 2027 GMT
        Subject: CN=A20A1E34A2C740F9BF726AC7DD7642BFDDECFB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:be:c6:f8:69:e9:16:24:a0:8c:57:0e:7c:
                    e5:26:b4:5b:f9:f7:06:9a:26:d1:75:b0:a0:5a:6e:
                    9a:cc:2a:ba:c3:74:72:93:0d:d2:a3:5f:67:1f:36:
                    fa:47:9c:e4:15:45:fb:61:55:94:d3:2e:7a:b7:1c:
                    32:f2:e6:fd:66:17:da:d1:01:25:55:9a:61:52:fc:
                    3b:0f:d1:c8:67:a9:87:3d:41:b8:dc:8b:9a:7c:ac:
                    b2:0f:c7:4f:75:96:ec:23:9e:1f:aa:b1:d3:df:d3:
                    d6:91:22:36:d5:07:f4:c5:50:60:2b:e2:b4:7f:b5:
                    bc:a5:98:cf:9f:0a:95:03:84:ec:2e:ff:c0:80:35:
                    26:0e:72:fc:85:99:a6:57:b2:46:b6:4c:3b:0c:c8:
                    3c:57:94:0a:cc:c6:72:cc:7f:66:8c:01:82:fb:0b:
                    4a:6b:69:b7:1d:88:7f:73:9d:2d:77:c5:0e:40:1d:
                    6f:a4:bb:be:6e:bf:24:ab:c1:7f:35:dc:9e:ba:3d:
                    76:57:4c:79:05:15:20:1f:56:09:38:b1:fb:88:fd:
                    8d:9a:51:b3:7d:85:7a:98:36:3b:40:fc:45:49:9e:
                    63:09:a0:ae:2e:a2:a9:48:1d:1d:a8:91:aa:2e:df:
                    55:59:2a:e2:db:4a:bb:12:a8:6d:cd:02:a8:da:96:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0A:1E:34:A2:C7:40:F9:BF:72:6A:C7:DD:76:42:BF:DD:EC:FB:34
            X509v3 Authority Key Identifier:
                keyid:5D:DC:0A:B4:FF:84:A3:2E:5E:87:D9:7B:50:F8:4A:D1:94:61:2E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/323830343a366231303a3a2f33322d3332203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:f6:9b:5a:9b:1a:b3:eb:db:e2:c4:38:62:b8:d0:50:ed:
         0c:73:c1:88:f5:c2:e2:08:c2:5b:a6:de:76:a4:48:49:fc:ac:
         67:5d:ca:5e:09:76:09:d2:0f:f1:52:d0:27:88:01:f6:9d:58:
         ab:00:11:22:c8:3d:ac:f8:ab:17:e8:80:a0:95:65:dd:72:59:
         b1:26:7c:23:76:49:9b:98:77:75:cc:9b:b6:a5:eb:ca:3e:49:
         a0:f6:f5:1a:e2:84:35:61:7b:38:83:c7:8c:c7:70:69:20:a7:
         00:36:cd:76:1a:52:dc:94:ca:7e:24:28:8c:2d:30:5e:dc:4d:
         c3:37:4d:30:1a:c7:90:d0:c7:83:ac:4b:df:05:89:02:92:3c:
         92:a8:85:d7:ba:57:37:45:33:9c:63:89:8a:9d:5a:43:7c:78:
         50:00:b1:ba:d6:75:14:56:ec:11:d7:d0:ba:51:fe:5b:ad:87:
         87:b6:8e:81:ad:e3:f8:f6:8e:c9:67:54:57:12:d0:4b:64:cb:
         ad:35:0d:3c:2b:c1:d8:b0:8e:97:52:19:68:1b:e7:48:9c:9a:
         17:08:32:36:4d:b9:2a:80:b3:14:79:4a:07:b7:d7:4b:de:f0:
         33:4c:ae:49:6f:67:c0:44:c0:0a:4d:30:c3:f1:9f:44:a4:48:
         e7:4a:23:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:11:09 2026 by rpki-client