Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a3a2f33322d3438203d3e20323638343731.roa
File:                     323830343a353162343a3a2f33322d3438203d3e20323638343731.roa (raw, json)
Hash identifier:          DDqR4LNYuHxQeILzf/8njQIO5h//ZCGo0FJRmiO8xKU=
Subject key identifier:   75:9F:2A:C9:A2:F0:E3:63:3C:88:31:2A:62:20:84:72:4A:4E:5E:AC
Certificate issuer:       /CN=328BDB36F79F20E9532E1041E0786473E3F0606E
Certificate serial:       25A0ECDAE91B5ECE242F4DB812B740C4F79B475B
Authority key identifier: 32:8B:DB:36:F7:9F:20:E9:53:2E:10:41:E0:78:64:73:E3:F0:60:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328BDB36F79F20E9532E1041E0786473E3F0606E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a3a2f33322d3438203d3e20323638343731.roa
Signing time:             Sat 02 May 2026 14:35:34 +0000
ROA not before:           Sat 02 May 2026 14:30:34 +0000
ROA not after:            Sat 01 May 2027 14:35:34 +0000
asID:                     268471
IP address blocks:        2804:51b4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/328BDB36F79F20E9532E1041E0786473E3F0606E.crl
                          rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/328BDB36F79F20E9532E1041E0786473E3F0606E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328BDB36F79F20E9532E1041E0786473E3F0606E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a0:ec:da:e9:1b:5e:ce:24:2f:4d:b8:12:b7:40:c4:f7:9b:47:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328BDB36F79F20E9532E1041E0786473E3F0606E
        Validity
            Not Before: May  2 14:30:34 2026 GMT
            Not After : May  1 14:35:34 2027 GMT
        Subject: CN=759F2AC9A2F0E3633C88312A622084724A4E5EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:bc:80:44:c9:b5:eb:f2:c6:04:06:56:3d:
                    6b:94:77:43:e7:69:34:ed:19:e9:54:cc:de:e5:c6:
                    b6:86:96:27:93:74:de:d9:91:81:b3:6c:6c:13:af:
                    30:12:2e:e7:4b:7a:d3:2c:96:d6:fa:f7:21:f8:e1:
                    2c:51:9b:5e:98:60:78:4c:40:01:f5:ac:59:81:d6:
                    12:68:5c:1f:b2:18:53:fb:1a:fc:53:b9:da:c0:11:
                    08:5a:1f:e9:a9:79:6d:3a:a6:c7:91:05:39:57:31:
                    4e:f6:1e:ec:5a:33:d3:9f:33:e5:89:4c:ef:b6:5b:
                    93:9d:f0:37:30:16:cd:04:9c:c6:af:13:3f:72:f0:
                    b8:ac:49:16:7c:34:99:a3:fd:f8:e3:7b:f9:9a:ff:
                    48:b3:eb:84:71:39:dc:3b:3a:2a:48:41:cb:d8:ea:
                    0b:c7:54:8c:35:27:9e:a2:ff:5a:9c:47:64:e0:fe:
                    bf:d6:59:a7:d4:7a:df:d1:84:e5:34:cc:30:6c:b6:
                    51:e1:1f:90:13:b4:ae:ff:65:09:42:42:fe:bf:85:
                    22:7a:9f:d5:8e:e1:20:6f:ed:c8:73:63:bb:f6:70:
                    80:e6:32:9b:e3:6e:70:e8:e5:f2:d7:78:8a:e2:29:
                    d9:f8:39:5d:31:01:f7:8d:01:6d:df:47:15:78:18:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9F:2A:C9:A2:F0:E3:63:3C:88:31:2A:62:20:84:72:4A:4E:5E:AC
            X509v3 Authority Key Identifier:
                keyid:32:8B:DB:36:F7:9F:20:E9:53:2E:10:41:E0:78:64:73:E3:F0:60:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/328BDB36F79F20E9532E1041E0786473E3F0606E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328BDB36F79F20E9532E1041E0786473E3F0606E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a3a2f33322d3438203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:3b:fb:7d:7b:de:ad:b9:08:a2:9f:2e:0f:6d:86:fc:e4:34:
         3d:a3:8a:06:74:a4:31:08:20:0a:c4:26:e4:ef:01:54:79:80:
         e2:da:39:6b:a9:f1:ee:a1:e2:6c:3e:1f:37:b0:f5:19:10:2b:
         5d:4c:6e:04:d5:46:34:dd:4a:a4:9c:54:37:4e:0d:1f:18:25:
         97:49:fe:99:19:3e:1f:84:b2:32:f3:65:ce:8b:f6:0c:db:55:
         79:5a:6d:6f:83:80:8b:82:fb:0c:25:79:47:37:ad:5e:69:49:
         0b:c9:c6:fb:8b:c8:c4:f9:73:e1:b0:1b:13:bb:a8:c8:76:da:
         2b:dc:8e:51:18:39:79:87:0c:bb:c0:c2:3d:27:5f:de:5d:e4:
         3e:32:fe:3c:c7:d8:0e:23:81:40:1f:a9:91:3d:e1:01:7f:fe:
         99:22:4d:da:45:4c:78:29:e2:49:13:d5:45:25:bd:a6:fb:0a:
         25:a2:cf:d7:91:ba:b0:55:26:de:53:25:cf:6a:22:e5:ee:40:
         1a:d6:61:9c:47:22:b0:76:3e:a5:f7:da:2b:5f:a5:c0:2f:e4:
         9a:90:fd:d7:3a:62:54:74:fb:98:7f:1d:b3:b1:93:46:cd:b0:
         96:4f:7c:99:e2:9d:2d:8a:1f:2a:12:00:6d:e4:31:61:ad:ea:
         fb:33:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:51:07 2026 by rpki-client