Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663830303a3a2f34302d3430203d3e20323734363732.roa
File:                     323830343a393165303a663830303a3a2f34302d3430203d3e20323734363732.roa (raw, json)
Hash identifier:          b0VPE5XwyYvUkDq+Bix1XSA/KdOXRBvT5QQEj6rfKEU=
Subject key identifier:   EE:02:42:03:4E:D8:97:E5:0F:F1:11:DF:DE:1D:3F:C1:01:7B:F2:E6
Certificate issuer:       /CN=C0763F448FA9C6BEB9230A4C24B9113ABF62E476
Certificate serial:       2837666738302F26C2788EFD3628F0F1900BB8EB
Authority key identifier: C0:76:3F:44:8F:A9:C6:BE:B9:23:0A:4C:24:B9:11:3A:BF:62:E4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663830303a3a2f34302d3430203d3e20323734363732.roa
Signing time:             Thu 23 Apr 2026 17:27:11 +0000
ROA not before:           Thu 23 Apr 2026 17:22:11 +0000
ROA not after:            Thu 22 Apr 2027 17:27:11 +0000
asID:                     274672
IP address blocks:        2804:91e0:f800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:37:66:67:38:30:2f:26:c2:78:8e:fd:36:28:f0:f1:90:0b:b8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0763F448FA9C6BEB9230A4C24B9113ABF62E476
        Validity
            Not Before: Apr 23 17:22:11 2026 GMT
            Not After : Apr 22 17:27:11 2027 GMT
        Subject: CN=EE0242034ED897E50FF111DFDE1D3FC1017BF2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:68:de:c3:23:fd:bf:ab:71:cb:28:2c:50:
                    50:c0:0d:70:92:c0:d9:d3:d2:bb:b1:2f:c7:c1:ad:
                    c8:d6:80:8f:72:6d:ae:0e:39:ab:a0:c4:3c:60:dc:
                    ff:cf:d2:9c:f9:a9:48:9d:b6:0a:3e:95:72:da:ca:
                    36:36:32:10:62:cd:87:10:ea:9b:64:50:4e:07:51:
                    ec:c7:1e:42:ea:76:34:96:8d:24:e1:ee:e8:bc:30:
                    b7:fc:c1:46:3a:99:3b:5b:e6:91:60:d1:02:3f:73:
                    3f:1f:76:f5:12:f7:a9:99:d0:17:f5:ce:95:28:0c:
                    f1:6e:51:b8:ac:ad:9d:6c:a7:52:23:55:98:70:78:
                    39:b3:6c:37:1f:bb:4d:57:52:8c:a1:fc:d0:06:0c:
                    94:24:45:42:cf:ec:66:a6:19:a5:31:af:b1:5e:9b:
                    ea:39:91:06:cd:d9:84:01:c6:08:2d:2e:cb:0e:a4:
                    27:79:1d:82:f5:35:d3:a4:5c:19:3e:f6:0b:72:00:
                    8e:ab:62:a4:b6:60:36:82:ce:e6:6a:e1:a5:8c:a7:
                    65:1c:d7:f2:b4:ce:5e:24:bc:9f:cc:f5:f7:1c:ee:
                    53:11:dd:71:1b:2e:55:05:f3:b7:a9:1a:c4:7d:93:
                    9d:aa:57:e6:fd:fa:35:8c:d6:f8:e0:82:51:e7:c4:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:42:03:4E:D8:97:E5:0F:F1:11:DF:DE:1D:3F:C1:01:7B:F2:E6
            X509v3 Authority Key Identifier:
                keyid:C0:76:3F:44:8F:A9:C6:BE:B9:23:0A:4C:24:B9:11:3A:BF:62:E4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663830303a3a2f34302d3430203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:81:eb:eb:df:3e:92:d2:ec:5f:b0:87:92:60:57:00:e6:14:
         cf:19:2a:e8:0a:e8:4d:75:6f:e8:a3:31:91:35:8e:b8:e1:29:
         5a:f7:f3:5d:54:d1:8c:d4:0b:06:e8:f7:db:c6:b9:30:21:78:
         12:60:53:c8:9e:33:a8:61:45:f2:3f:97:30:e1:0d:e7:05:7f:
         54:cf:6d:f8:07:62:67:24:59:98:31:66:ad:f6:8d:23:a8:47:
         23:ea:c8:a3:1e:a5:01:51:26:1a:05:47:5c:b9:e0:93:45:d2:
         4e:3c:fa:21:00:d8:b8:e0:12:aa:1a:bf:49:6b:a1:9c:d5:1c:
         ff:eb:51:c4:07:a0:55:01:5c:47:65:d3:1b:9c:1c:e3:74:cc:
         e9:dc:7f:82:d2:b7:47:4f:59:12:af:0d:e2:33:96:58:93:44:
         71:64:9c:6f:3c:32:6e:73:80:e6:90:50:d7:11:06:51:60:2e:
         27:c8:78:af:c4:30:5d:f8:1e:77:9b:a6:8b:db:83:ec:30:29:
         e5:c4:60:9c:51:73:8f:49:c2:58:75:75:55:6a:cf:d2:dd:57:
         d2:82:73:fc:52:17:06:77:ea:0b:a3:6b:40:7d:34:f9:3e:a1:
         b6:69:2e:fd:94:ea:bf:ae:5a:c5:c2:96:4b:34:6a:70:67:41:
         74:ce:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:07:45 2026 by rpki-client