Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33322d313238203d3e20323730383830.roa
File:                     323830343a373264633a3a2f33322d313238203d3e20323730383830.roa (raw, json)
Hash identifier:          a9/tZNLBhhSwHBYXyo4A1Vx7CD32mXsPvNUWeiBbHoU=
Subject key identifier:   A5:1B:5C:91:21:1E:4B:FA:83:33:B6:AC:AD:1D:B7:52:04:4F:18:EF
Certificate issuer:       /CN=FA7F41389096DD78E4DAAE2F0557D70623797D15
Certificate serial:       614A21FAA532E10E4E32FEC448BDB0E8C3997392
Authority key identifier: FA:7F:41:38:90:96:DD:78:E4:DA:AE:2F:05:57:D7:06:23:79:7D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA7F41389096DD78E4DAAE2F0557D70623797D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33322d313238203d3e20323730383830.roa
Signing time:             Thu 23 Apr 2026 18:12:23 +0000
ROA not before:           Thu 23 Apr 2026 18:07:23 +0000
ROA not after:            Thu 22 Apr 2027 18:12:23 +0000
asID:                     270880
IP address blocks:        2804:72dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/FA7F41389096DD78E4DAAE2F0557D70623797D15.crl
                          rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/FA7F41389096DD78E4DAAE2F0557D70623797D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA7F41389096DD78E4DAAE2F0557D70623797D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4a:21:fa:a5:32:e1:0e:4e:32:fe:c4:48:bd:b0:e8:c3:99:73:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7F41389096DD78E4DAAE2F0557D70623797D15
        Validity
            Not Before: Apr 23 18:07:23 2026 GMT
            Not After : Apr 22 18:12:23 2027 GMT
        Subject: CN=A51B5C91211E4BFA8333B6ACAD1DB752044F18EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ff:33:c4:02:ec:1b:b5:5b:52:ed:97:41:05:
                    0c:2a:8c:c1:e1:ec:f9:46:50:27:bc:8e:85:e9:ad:
                    4c:4c:06:c1:63:c5:bd:96:ac:1f:1f:13:af:90:e6:
                    e1:08:d4:8e:92:12:64:bc:26:31:09:bd:38:33:b6:
                    ec:e9:47:c5:39:63:1b:41:22:f1:48:eb:f5:76:9b:
                    36:57:a8:68:73:fd:e4:e0:cb:16:29:d1:ba:72:8d:
                    64:7f:a2:f4:39:39:38:aa:8e:e0:2e:d6:90:83:bf:
                    e7:ec:e1:75:e0:12:ad:94:56:26:cb:5c:6f:a2:f5:
                    8c:4f:25:c4:06:77:0d:2a:5f:c8:58:46:7c:ed:ad:
                    e6:24:da:f5:db:b3:a0:ef:6c:26:6e:33:1d:4e:91:
                    1f:f8:89:e0:f5:1c:b8:b8:e6:65:72:d0:e6:9e:ff:
                    fa:15:48:c5:a0:97:a0:b9:ad:8d:0a:9c:65:b5:c3:
                    3c:aa:7f:76:d0:4b:de:6d:75:59:fb:aa:f8:f6:b6:
                    11:84:92:82:0b:18:b2:3d:a2:0d:cd:31:a7:98:03:
                    15:5c:dc:e4:f3:7f:da:c0:fa:1b:31:5c:46:f2:ae:
                    e0:9e:8c:5b:37:71:95:0e:01:9b:79:f2:ef:9c:45:
                    2d:87:eb:e8:a7:fc:45:ac:b9:4e:57:9b:2b:d1:da:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1B:5C:91:21:1E:4B:FA:83:33:B6:AC:AD:1D:B7:52:04:4F:18:EF
            X509v3 Authority Key Identifier:
                keyid:FA:7F:41:38:90:96:DD:78:E4:DA:AE:2F:05:57:D7:06:23:79:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/FA7F41389096DD78E4DAAE2F0557D70623797D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA7F41389096DD78E4DAAE2F0557D70623797D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a3a2f33322d313238203d3e20323730383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:80:83:ca:bf:b7:08:bd:46:48:f1:73:c1:5e:96:21:62:c1:
         31:62:2d:d5:63:3a:88:e7:30:c6:5e:6e:8b:25:93:9a:ef:b4:
         bf:4d:f7:f6:28:75:3b:0e:64:37:a0:81:f6:4f:08:54:e3:e9:
         83:0c:1e:42:4b:e7:1d:0a:1c:f9:ab:04:2d:cd:76:dc:18:ef:
         8c:ee:aa:ed:a5:94:fa:ca:6c:f3:22:a0:92:43:c3:f1:15:85:
         db:57:f3:56:1a:b4:19:db:0c:ac:72:be:94:de:ca:e3:19:43:
         95:a7:2c:75:b8:fd:23:d1:8e:e2:34:73:b2:a6:7c:50:68:83:
         18:07:bf:0c:f4:96:b4:e9:3e:87:c2:84:72:8a:35:72:39:75:
         f6:05:df:ac:6d:fd:9e:f4:36:cd:c9:ab:ad:f0:c3:cc:50:7c:
         f4:62:5c:56:cf:2d:95:3c:03:3b:13:f2:a9:26:b0:59:71:f3:
         41:d1:92:c9:5d:8e:60:d9:ad:be:8b:df:fe:43:99:00:d9:48:
         d5:74:29:54:6a:de:90:9c:4e:63:6a:c5:bd:ce:4b:03:48:ea:
         2a:ff:b8:55:3f:51:dc:95:66:ac:c2:92:e9:97:57:1c:88:b6:
         78:6d:4b:79:04:e5:9a:e4:7f:16:85:d5:f6:65:7e:01:b7:8a:
         d4:b4:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:14:06 2026 by rpki-client