Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/323830343a3634343a353a3a2f34382d313238203d3e203533313037.roa
File:                     323830343a3634343a353a3a2f34382d313238203d3e203533313037.roa (raw, json)
Hash identifier:          EP2AveDrGWA1gNBP5Rk3vDPMc2ORlgilI463liWgrfo=
Subject key identifier:   E7:72:0B:52:F9:EB:80:23:54:92:AF:FE:3C:BA:36:D8:8C:49:1A:A5
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       435BA6DC135812B48FC13ECCC7C3F79C61945A5F
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/323830343a3634343a353a3a2f34382d313238203d3e203533313037.roa
Signing time:             Wed 13 May 2026 12:25:51 +0000
ROA not before:           Wed 13 May 2026 12:20:51 +0000
ROA not after:            Wed 12 May 2027 12:25:51 +0000
asID:                     53107
IP address blocks:        2804:644:5::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5b:a6:dc:13:58:12:b4:8f:c1:3e:cc:c7:c3:f7:9c:61:94:5a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:20:51 2026 GMT
            Not After : May 12 12:25:51 2027 GMT
        Subject: CN=E7720B52F9EB80235492AFFE3CBA36D88C491AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:77:f3:d5:3c:d4:3e:3c:10:43:c8:d6:23:
                    cc:28:07:b4:c0:88:f4:54:98:fd:0c:b6:cb:de:80:
                    c3:de:c7:7e:ff:4f:2b:8a:5e:c0:6f:1a:2e:7f:6c:
                    2c:f5:9f:86:da:cf:cf:2a:7a:61:8a:ec:82:86:6a:
                    4e:88:19:17:4a:74:79:e7:58:6f:32:fd:6c:3f:9f:
                    5b:8e:2e:20:9f:11:e1:67:c0:a8:42:b8:4f:a4:d7:
                    ac:f5:24:69:dc:88:34:e4:17:79:1b:ab:0e:7b:06:
                    36:f7:64:84:4e:af:c7:f6:be:ee:ff:51:24:6f:23:
                    75:ce:4c:fb:c3:44:a2:97:63:a6:83:a2:84:0b:e0:
                    df:07:d1:0c:1a:73:21:03:12:13:af:09:6f:2b:1a:
                    40:61:1c:83:84:1e:c4:51:1b:22:54:22:ed:e2:01:
                    bc:3a:e3:f3:d7:47:d1:9e:ec:57:bb:71:fc:fd:fb:
                    02:41:20:7f:5e:e2:f5:28:fc:36:c3:67:49:d1:fc:
                    75:2a:d6:6a:a2:da:54:fd:6f:ef:79:a4:1a:1f:8f:
                    bf:c0:11:07:5f:77:66:29:2a:7d:e1:59:1c:84:1e:
                    30:11:67:e5:98:5e:64:22:de:38:86:8c:6a:04:fd:
                    7d:ca:5f:48:a1:bb:5b:4d:d0:ee:96:e6:d4:6e:c3:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:72:0B:52:F9:EB:80:23:54:92:AF:FE:3C:BA:36:D8:8C:49:1A:A5
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/323830343a3634343a353a3a2f34382d313238203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:644:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:36:b2:61:92:d6:60:d0:95:8e:56:10:19:2b:e1:40:e2:
         44:e8:37:8c:a6:e9:4b:70:30:60:d5:af:2f:c5:01:3f:5a:22:
         d7:0d:96:d5:9b:0c:da:8c:45:21:cc:32:85:59:73:d6:9f:7c:
         fe:68:46:f2:ed:c9:2d:26:29:60:cd:d4:47:17:da:1b:d3:a0:
         ca:ac:ca:e9:91:8a:ee:b2:ba:b5:06:7f:08:41:0c:45:18:4c:
         57:f0:cf:68:04:00:26:2b:fe:b7:e0:37:be:64:15:2d:d3:48:
         a5:6c:04:18:b2:4f:0d:c7:ea:e7:1b:3a:df:84:89:e1:69:6d:
         2b:ae:31:68:c0:3e:49:96:63:3f:2c:b2:3b:b0:12:bc:15:6a:
         a1:26:73:06:db:17:d8:2c:5b:af:5a:de:17:a4:5e:c6:58:1b:
         0b:c1:39:ba:67:b2:72:52:09:eb:66:c2:ca:1c:ef:c3:4b:e1:
         bb:89:fd:ca:7d:c5:59:cb:0b:0f:7b:24:e9:b1:79:85:f9:92:
         ae:68:5f:db:40:27:23:a5:7d:a8:31:a4:5f:4e:36:a2:29:12:
         c7:bd:ca:9c:a1:49:6e:7e:56:a9:0f:29:06:e1:28:7e:48:c8:
         22:99:09:e8:ed:c2:b5:ba:0e:9f:98:b9:d7:a6:1a:d0:d0:d6:
         99:bc:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:39:17 2026 by rpki-client