Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a3a2f33322d3438203d3e203532393635.roa
File:                     323830343a3362383a3a2f33322d3438203d3e203532393635.roa (raw, json)
Hash identifier:          hGCNlcVHvgyP1L8g/THRsGV0nAq++YdfxMUBwra8zGk=
Subject key identifier:   16:24:EF:0A:C6:94:56:7F:32:7A:09:84:0C:A5:72:93:78:64:24:09
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       51A4698C4455148EEE2A167D971A0FDF09D75A5C
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a3a2f33322d3438203d3e203532393635.roa
Signing time:             Thu 26 Mar 2026 13:07:11 +0000
ROA not before:           Thu 26 Mar 2026 13:02:11 +0000
ROA not after:            Thu 25 Mar 2027 13:07:11 +0000
asID:                     52965
IP address blocks:        2804:3b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a4:69:8c:44:55:14:8e:ee:2a:16:7d:97:1a:0f:df:09:d7:5a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Mar 26 13:02:11 2026 GMT
            Not After : Mar 25 13:07:11 2027 GMT
        Subject: CN=1624EF0AC694567F327A09840CA5729378642409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:62:f8:b1:7d:41:ee:af:cb:f7:d0:46:0b:
                    57:fd:bb:f5:44:c4:4c:2d:a5:df:1d:9d:e3:42:47:
                    85:84:d2:a4:3d:e9:f7:b1:88:cb:5b:fa:df:67:d3:
                    d8:c9:d3:9d:09:64:d3:bf:a9:56:f8:66:09:85:6e:
                    ee:f8:92:16:91:96:55:db:03:5d:c2:31:4a:06:ef:
                    27:69:e2:ee:a1:a5:fe:e1:5f:73:b4:2b:1d:25:1a:
                    c6:cf:22:71:6b:55:02:0a:4a:45:8e:63:dc:a9:da:
                    b2:35:df:85:0d:48:af:c9:a6:3c:ba:8a:98:fa:53:
                    aa:b9:93:ea:a9:82:84:6b:ec:a7:1d:e4:2b:88:60:
                    97:bd:62:9c:ae:8b:7d:9d:aa:6e:f3:dd:55:a7:65:
                    ce:13:10:44:a2:0a:66:c7:6a:90:bd:ab:63:69:1b:
                    cf:7a:3b:b1:63:68:f1:94:4e:d6:29:29:84:21:54:
                    ef:77:3a:48:6b:a9:ec:b8:28:2d:aa:fb:ac:5f:c9:
                    2d:d1:53:41:e6:dc:85:65:57:a7:ab:69:26:d3:b6:
                    49:c7:f6:7b:63:f2:40:00:79:50:cc:b2:94:4a:c0:
                    7c:48:0d:90:47:89:65:04:dd:a0:af:03:50:aa:27:
                    cf:75:38:5f:23:5b:b5:1e:c5:20:a5:12:9e:b1:70:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:24:EF:0A:C6:94:56:7F:32:7A:09:84:0C:A5:72:93:78:64:24:09
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a3a2f33322d3438203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:8f:e9:35:3f:61:07:f7:7b:a1:c3:2f:3e:5e:01:8d:a6:5c:
         78:75:68:8a:7d:f5:00:be:72:a1:29:3a:a8:2b:38:c8:36:9b:
         6e:8e:5c:1e:49:08:37:a2:27:e1:f0:33:70:ae:3b:be:65:71:
         65:b3:d2:d2:a0:6c:72:3f:7e:ef:0d:32:c6:94:20:6a:3a:49:
         be:7c:73:6e:45:54:34:25:b4:97:39:ce:b5:6c:ef:1f:bc:11:
         7c:0b:c0:f9:42:90:be:d6:ab:75:11:81:73:c5:62:c9:c1:ad:
         00:79:bd:1d:c7:4e:17:f5:8a:04:91:6d:4f:c9:93:4b:4b:c6:
         5a:90:9a:d2:17:7b:ff:74:2c:84:9c:18:0b:b2:6d:51:82:da:
         e4:96:4a:51:d3:05:9a:5b:97:fc:6c:06:37:4a:a3:2d:95:d4:
         79:06:b3:b2:fa:00:dd:82:13:82:98:0d:66:a2:03:f1:75:29:
         aa:66:d4:97:e4:c7:dc:36:63:ae:0a:7e:3f:0b:7f:9d:9f:ac:
         6c:29:49:31:7d:8e:64:00:37:72:7e:0b:c6:50:aa:57:20:69:
         f2:85:1f:11:99:01:d4:8a:2f:d3:5c:c3:c6:5e:44:04:db:11:
         61:94:73:50:4c:f9:5b:82:1f:9b:40:07:8a:b4:ce:ef:03:16:
         65:58:53:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:58:15 2026 by rpki-client