Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa
File:                     323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa (raw, json)
Hash identifier:          E/nMvclXC9R6D+7gvodaEjudhPisuKcoBolQDUKphis=
Subject key identifier:   F1:78:20:6B:72:B0:6C:F2:A1:7D:5C:F9:7F:9E:07:57:B6:9F:4C:59
Certificate issuer:       /CN=D4B92897692C4F611B738C6728923C318CA5378D
Certificate serial:       1942FBFF26819A7E355CDD14E54BD96E4A12E6
Authority key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa
Signing time:             Sat 07 Mar 2026 19:29:46 +0000
ROA not before:           Sat 07 Mar 2026 19:24:46 +0000
ROA not after:            Sat 06 Mar 2027 19:29:46 +0000
asID:                     273654
IP address blocks:        2804:8a34:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl
                          rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:42:fb:ff:26:81:9a:7e:35:5c:dd:14:e5:4b:d9:6e:4a:12:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4B92897692C4F611B738C6728923C318CA5378D
        Validity
            Not Before: Mar  7 19:24:46 2026 GMT
            Not After : Mar  6 19:29:46 2027 GMT
        Subject: CN=F178206B72B06CF2A17D5CF97F9E0757B69F4C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:db:d2:94:ad:0e:57:1d:22:99:46:29:c6:88:
                    0c:8a:1c:7a:c8:c3:18:08:4e:c5:91:3f:67:2c:8b:
                    63:e9:a4:95:41:7c:c1:04:36:9d:0f:2f:59:ea:16:
                    56:d5:bc:6d:4a:1c:1b:28:9f:3a:9b:86:92:86:37:
                    9a:db:30:09:0b:30:36:10:dd:5a:a0:46:a7:68:ac:
                    e0:d0:d6:ee:fc:4c:db:26:4a:a5:19:80:1d:9d:66:
                    68:a0:fa:81:e5:16:38:59:47:3e:44:c6:c0:75:d8:
                    2f:7c:45:f8:78:13:dc:7d:84:db:c1:5b:e6:6a:f1:
                    83:d9:12:f9:0d:e2:eb:91:5b:c4:98:3d:5a:c5:bb:
                    3d:29:9b:33:14:4f:75:c5:b5:89:91:db:d3:d4:3d:
                    dd:06:0f:e9:7f:f7:65:21:b4:ea:5b:a2:42:3a:65:
                    68:30:34:c0:19:43:a5:0a:ea:29:cb:aa:6a:e7:1c:
                    08:b3:4a:31:62:f8:fb:39:d0:b3:cc:7a:48:42:72:
                    a1:43:dd:6a:eb:80:25:5b:97:96:2a:7f:17:71:87:
                    75:cb:15:2a:dc:27:85:38:01:d6:d9:0c:15:17:23:
                    0d:14:3e:c2:bf:3b:d8:13:1a:45:71:ba:fb:fb:c4:
                    d9:d2:3e:aa:65:c9:91:87:5e:33:5f:47:fc:c8:9e:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:78:20:6B:72:B0:6C:F2:A1:7D:5C:F9:7F:9E:07:57:B6:9F:4C:59
            X509v3 Authority Key Identifier:
                keyid:D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a34:ec00::/38

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:f3:34:5c:c2:28:10:5a:09:01:04:29:9e:aa:85:79:cd:
         5d:d2:f6:7a:3b:2e:69:f4:d9:19:c0:f8:94:c1:d4:1b:94:2c:
         c9:1c:2a:97:b4:7f:d4:8e:85:0c:35:4f:91:c1:dc:ac:05:ad:
         87:f5:76:01:46:1a:78:53:a2:7f:bb:08:c5:a0:c9:c2:24:9a:
         20:da:6a:3f:87:e3:58:59:6d:05:4d:64:dc:18:85:ad:92:fa:
         2c:bb:bf:97:fd:26:01:9b:1f:10:fd:79:4b:c0:ea:08:4b:80:
         24:0b:15:40:29:ba:1a:fa:f4:b3:34:52:95:d7:5f:14:3b:f0:
         1d:96:07:3b:05:03:9c:e8:64:03:de:c0:ba:c6:3d:4e:e9:51:
         fe:a5:df:7a:23:e1:64:c0:a1:7c:fe:e0:6d:50:02:6e:d4:68:
         27:11:92:aa:5a:b3:fe:77:38:fa:d1:de:6e:c0:89:09:09:b3:
         7c:20:14:ba:5b:4c:2e:83:e4:6f:88:8c:e3:5c:e0:7c:d8:ec:
         9e:ec:d3:da:ec:a6:7c:3b:b0:63:52:b9:d1:5c:af:b2:6d:35:
         3d:68:96:13:b4:5e:86:05:94:47:04:04:c4:a6:f4:1c:bc:44:
         4e:dd:26:fb:02:22:f9:92:2f:f3:d1:e3:a0:3e:88:61:50:2f:
         be:ec:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:22:46 2026 by rpki-client