Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33322d313238203d3e203631373337.roa
File:                     323830343a316239633a3a2f33322d313238203d3e203631373337.roa (raw, json)
Hash identifier:          PU8DLgvDM6LRQM6sHo19HG9/g87jp3jCE8pDDeldK7U=
Subject key identifier:   BC:E3:25:F0:3D:8A:32:21:06:97:7D:91:A7:83:D1:0E:A6:9A:4B:26
Certificate issuer:       /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial:       207C9881C156D2C2B866811D20328866A6D99113
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33322d313238203d3e203631373337.roa
Signing time:             Tue 10 Mar 2026 18:35:49 +0000
ROA not before:           Tue 10 Mar 2026 18:30:49 +0000
ROA not after:            Tue 09 Mar 2027 18:35:49 +0000
asID:                     61737
IP address blocks:        2804:1b9c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl
                          rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7c:98:81:c1:56:d2:c2:b8:66:81:1d:20:32:88:66:a6:d9:91:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
        Validity
            Not Before: Mar 10 18:30:49 2026 GMT
            Not After : Mar  9 18:35:49 2027 GMT
        Subject: CN=BCE325F03D8A322106977D91A783D10EA69A4B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5b:2c:d5:d9:95:51:51:a0:50:f1:b7:97:a4:
                    09:42:d3:3f:c4:04:b9:0e:07:85:4e:79:b7:6e:93:
                    c8:55:e9:64:e8:c0:ce:cc:47:1b:9a:4e:6c:12:7e:
                    a3:6f:de:c9:df:c6:21:d1:dd:8c:58:fb:54:59:62:
                    85:47:da:83:03:bd:00:a5:d2:5f:09:56:1f:fb:0c:
                    38:2f:88:2c:5e:82:88:a9:9a:99:d3:a7:34:f5:2f:
                    e2:75:b8:c0:08:59:87:97:2c:20:26:cd:fb:a6:1d:
                    3f:32:7a:d3:6a:a0:69:48:fe:be:f0:c3:0b:45:9a:
                    14:13:31:c1:7a:ec:86:e0:42:75:24:4b:27:2b:89:
                    d9:9c:69:c0:e8:9a:4f:41:c1:45:b9:26:dd:b9:5e:
                    78:2b:08:da:a5:23:6e:42:0f:54:4d:93:c7:93:b8:
                    ed:3b:1e:4e:7c:84:44:63:24:d2:e2:a2:02:3d:e0:
                    60:aa:7b:dd:c2:8c:c3:d5:2c:c9:15:0d:e1:89:30:
                    e7:b5:95:a3:c2:db:7e:41:4f:62:c6:74:2a:6f:6d:
                    d2:e8:e3:6f:97:b8:b9:16:fd:d3:a4:0c:7b:fb:cb:
                    11:dd:0e:f9:fe:d4:36:fa:eb:9e:02:f1:6c:92:ca:
                    79:3f:e7:f2:60:60:35:5f:dd:8c:95:9e:17:75:ea:
                    b0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E3:25:F0:3D:8A:32:21:06:97:7D:91:A7:83:D1:0E:A6:9A:4B:26
            X509v3 Authority Key Identifier:
                keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33322d313238203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:3a:b1:12:cb:ee:0a:38:44:f9:ee:04:89:66:56:b5:86:
         40:09:4e:47:97:7d:87:c2:68:e8:12:8d:5e:99:e5:39:70:15:
         8e:6d:1b:29:3b:1c:65:f4:b6:73:01:bc:ee:4a:31:f9:0e:8d:
         32:a2:d9:99:fd:77:86:c4:ce:c8:d9:59:1f:55:f8:d2:86:de:
         8d:be:cf:d1:6c:d2:08:e6:ce:4d:4a:94:25:24:da:99:23:2f:
         79:53:2a:75:f5:c3:7d:5c:8e:cc:e4:a3:17:a7:56:cc:2c:6f:
         44:f8:e1:2e:84:ed:5f:9e:09:b0:88:ac:44:24:80:ae:c8:b2:
         29:2d:ce:1a:a1:49:a1:5b:6e:39:b8:b9:48:e2:ec:83:92:d4:
         ef:96:fb:c5:0b:c6:15:66:ae:ec:d6:33:f3:25:8f:b9:df:68:
         6f:3a:64:8d:22:fd:e0:93:27:ec:3c:9d:bf:60:f7:e4:03:27:
         dc:05:22:a7:62:24:ac:8e:40:c0:85:03:5e:cd:ac:7a:8a:95:
         43:bc:ca:33:02:54:ab:e1:5f:09:7d:f0:31:9c:39:0e:ad:23:
         02:73:9d:fb:0d:df:48:97:23:c1:af:15:e1:44:97:11:bf:bd:
         ed:b0:e2:ed:06:03:22:40:43:a4:a4:f6:db:47:23:b5:4b:ac:
         fa:22:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:03:23 2026 by rpki-client