Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/323830343a363764383a3a2f33322d3334203d3e20323639363534.roa
File:                     323830343a363764383a3a2f33322d3334203d3e20323639363534.roa (raw, json)
Hash identifier:          ilC0YOmsu6yQs/f9CvgRcZXm88LDEKwF7V1QW+PKEjo=
Subject key identifier:   D9:57:21:23:B0:4D:DB:A3:DA:A7:41:3B:13:2C:D8:86:29:CB:B2:F2
Certificate issuer:       /CN=09E4273A68D797D63840748E60E804BC3FFF247D
Certificate serial:       1EB4C09EFC8B4312409F39BE93B483998ECDA570
Authority key identifier: 09:E4:27:3A:68:D7:97:D6:38:40:74:8E:60:E8:04:BC:3F:FF:24:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09E4273A68D797D63840748E60E804BC3FFF247D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/323830343a363764383a3a2f33322d3334203d3e20323639363534.roa
Signing time:             Mon 11 May 2026 14:26:48 +0000
ROA not before:           Mon 11 May 2026 14:21:48 +0000
ROA not after:            Mon 10 May 2027 14:26:48 +0000
asID:                     269654
IP address blocks:        2804:67d8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.crl
                          rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09E4273A68D797D63840748E60E804BC3FFF247D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b4:c0:9e:fc:8b:43:12:40:9f:39:be:93:b4:83:99:8e:cd:a5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09E4273A68D797D63840748E60E804BC3FFF247D
        Validity
            Not Before: May 11 14:21:48 2026 GMT
            Not After : May 10 14:26:48 2027 GMT
        Subject: CN=D9572123B04DDBA3DAA7413B132CD88629CBB2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:d3:62:47:14:43:5f:9f:ad:ae:dd:d9:84:
                    47:cd:af:9b:c9:cd:3c:a3:4f:f9:ca:7b:b2:7a:e9:
                    49:7f:25:fd:f9:f6:62:b7:82:62:2e:dc:68:5e:07:
                    72:df:eb:33:58:c9:50:bb:78:d7:2b:d1:94:af:1a:
                    a9:63:45:06:2d:76:ee:19:4f:1f:1a:4b:b3:c0:72:
                    22:ea:8d:15:06:8d:21:61:85:a5:31:a6:24:96:06:
                    b2:90:6c:a4:4d:2c:17:08:87:cc:95:16:12:71:12:
                    e9:6b:66:91:e8:77:94:14:2c:fa:cb:a9:87:f9:59:
                    eb:77:bd:57:36:06:9b:21:ed:1a:40:62:a0:3e:50:
                    cd:69:6d:17:a8:65:e0:70:2e:3d:d3:58:94:e5:99:
                    9d:78:b5:b4:71:4b:f6:29:ae:e4:2c:8e:ed:8c:9e:
                    1b:b6:c0:ce:92:36:07:f0:eb:d9:b6:79:f1:11:91:
                    d1:27:5f:68:2d:6e:44:39:be:2d:a7:fc:01:f9:88:
                    b2:04:96:f2:c4:70:90:16:18:a2:70:b2:33:44:ba:
                    2d:56:8a:7c:fd:f5:fe:9d:3e:da:a9:ed:5f:6f:4e:
                    d2:0f:54:94:7b:30:b8:bc:db:13:39:f6:b7:95:7b:
                    e1:47:c5:e6:2e:91:c8:a2:ea:a2:c1:0c:2c:22:ea:
                    05:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:57:21:23:B0:4D:DB:A3:DA:A7:41:3B:13:2C:D8:86:29:CB:B2:F2
            X509v3 Authority Key Identifier:
                keyid:09:E4:27:3A:68:D7:97:D6:38:40:74:8E:60:E8:04:BC:3F:FF:24:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09E4273A68D797D63840748E60E804BC3FFF247D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/323830343a363764383a3a2f33322d3334203d3e20323639363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:d6:29:80:5b:1b:35:ae:68:e5:f1:6d:04:79:86:89:36:12:
         d0:04:af:97:3f:66:21:76:1a:ec:fe:12:70:a0:d8:85:4c:85:
         33:cd:66:36:8f:f7:c4:cf:84:b6:58:6b:2b:3f:ad:ad:1f:a7:
         6d:b1:ab:ae:da:47:fc:f7:fa:82:d6:f9:46:90:c1:48:21:46:
         70:c9:6b:f3:ff:d9:36:5b:d8:94:36:b7:70:74:45:e9:8f:30:
         0e:3d:3f:ac:9b:68:22:e7:e0:40:c5:9d:3e:6d:85:4c:41:70:
         77:fe:1a:49:4b:54:d1:0a:f2:ea:9e:54:9c:85:fd:0a:a7:53:
         e3:cb:88:e0:71:38:5a:02:0e:15:8b:1d:21:66:d5:6a:dc:37:
         2b:cd:cd:2c:80:97:a5:93:41:56:5f:c3:5f:c6:d4:d4:cc:48:
         96:c1:95:18:1d:49:a6:9a:f7:cf:3b:b1:1f:49:29:71:15:ed:
         e2:37:f0:89:20:cc:74:46:44:09:b6:58:0c:51:d0:fd:e3:d4:
         a8:4f:86:c6:f2:cc:14:04:65:41:e8:dc:3f:d8:5a:8c:88:0e:
         56:fe:6d:c1:4a:bb:ff:21:d4:ed:80:ef:6d:59:49:17:38:8e:
         b5:fc:62:1c:f9:80:b7:bb:5b:a2:11:3a:07:87:ef:34:da:4c:
         0a:6b:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:26 2026 by rpki-client