Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d313238203d3e20323635303239.roa
File:                     323830343a333161383a3a2f33322d313238203d3e20323635303239.roa (raw, json)
Hash identifier:          mEVXeb1X8FkQ4HRirL0aSs7DVIBhAkjECTQ/kgiY6C4=
Subject key identifier:   35:17:9B:84:90:B0:E3:3B:A1:EC:97:8D:0D:1B:F4:9B:00:EE:43:42
Certificate issuer:       /CN=391282C4F59DDE74999B174E8FDB2EB861BF7A8C
Certificate serial:       5C88D139438A89FD12EE2EB292B3C7C47B024EFC
Authority key identifier: 39:12:82:C4:F5:9D:DE:74:99:9B:17:4E:8F:DB:2E:B8:61:BF:7A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d313238203d3e20323635303239.roa
Signing time:             Wed 18 Mar 2026 18:37:17 +0000
ROA not before:           Wed 18 Mar 2026 18:32:17 +0000
ROA not after:            Wed 17 Mar 2027 18:37:17 +0000
asID:                     265029
IP address blocks:        2804:31a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.crl
                          rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:88:d1:39:43:8a:89:fd:12:ee:2e:b2:92:b3:c7:c4:7b:02:4e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391282C4F59DDE74999B174E8FDB2EB861BF7A8C
        Validity
            Not Before: Mar 18 18:32:17 2026 GMT
            Not After : Mar 17 18:37:17 2027 GMT
        Subject: CN=35179B8490B0E33BA1EC978D0D1BF49B00EE4342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a5:97:52:d9:79:2f:09:eb:a2:ce:3f:f7:ad:
                    e8:2e:39:55:fc:e6:95:e3:a6:20:b6:83:03:73:04:
                    6e:b9:45:0a:49:37:b0:a1:8e:81:af:0a:3a:9d:93:
                    ac:3b:0a:00:e2:14:7d:bf:2c:2f:c4:14:08:5e:b5:
                    0d:f0:9d:04:eb:37:53:8d:2e:7e:fa:42:f7:eb:ec:
                    99:75:86:d4:23:42:17:88:ac:6f:f5:4b:87:57:c6:
                    64:03:9f:10:62:00:26:b2:a5:54:4f:f7:c7:1d:aa:
                    ea:f4:27:71:e5:e1:3b:6a:40:b5:02:bb:8c:af:6a:
                    c2:00:3e:2f:66:00:bc:95:1d:ba:b8:5d:e3:02:03:
                    08:20:9e:c4:eb:58:09:35:08:c4:23:bf:5f:7c:9e:
                    c1:ed:f1:f1:71:bc:ba:7a:6e:1b:64:b3:05:58:56:
                    a1:ab:54:a3:9f:d0:9e:12:26:c6:64:a7:2d:86:3a:
                    86:07:ea:53:69:ff:a4:82:83:e9:9a:2a:d0:f0:31:
                    9a:91:04:90:26:c5:fd:3e:72:7c:27:d2:1f:7c:c3:
                    a9:31:6c:7d:09:cf:04:7c:f6:c0:5b:6e:18:48:e2:
                    fd:f6:0b:8d:d0:53:b3:5c:e4:70:15:34:c8:ef:c9:
                    05:c0:61:71:88:96:b4:73:62:2d:c9:80:57:01:a0:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:9B:84:90:B0:E3:3B:A1:EC:97:8D:0D:1B:F4:9B:00:EE:43:42
            X509v3 Authority Key Identifier:
                keyid:39:12:82:C4:F5:9D:DE:74:99:9B:17:4E:8F:DB:2E:B8:61:BF:7A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/391282C4F59DDE74999B174E8FDB2EB861BF7A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d313238203d3e20323635303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:0b:09:a4:a7:81:11:e7:26:03:0e:d3:76:1c:79:e6:f7:
         3e:9d:a2:62:91:ce:aa:a3:04:07:fd:40:6a:15:ba:36:7a:52:
         57:b7:42:03:c3:6f:af:9f:4a:da:40:2e:d7:a2:32:ff:30:26:
         25:5f:ba:f7:f7:1f:64:35:6e:3e:b5:5a:09:df:4b:e8:17:03:
         08:1f:b4:8a:98:ad:7a:99:b5:47:69:6b:12:4e:96:d4:8d:65:
         f7:e8:5f:e7:ba:20:fb:26:a2:e4:e6:ee:34:56:60:67:77:4c:
         a2:a4:40:92:a9:a5:9c:ca:f9:44:06:5b:18:bc:b9:9e:d3:a3:
         15:f1:fa:95:b6:f0:25:ee:07:4d:6f:4f:ad:c6:a3:e4:6d:87:
         06:5e:5b:4e:d0:22:1d:53:e7:db:fa:fa:6f:17:44:ad:cc:eb:
         a2:a4:c0:c0:5e:4b:4f:91:df:ec:9a:74:88:a0:af:9d:44:cf:
         7e:fd:37:28:fc:df:b2:56:a2:d9:99:68:aa:6c:7a:29:eb:8c:
         70:f4:4e:7a:5f:34:14:24:81:f7:c5:b3:04:b2:3b:0c:64:ca:
         d7:87:68:d8:95:e8:ae:eb:3e:44:b7:7f:04:c7:0d:32:b6:43:
         cd:26:d2:82:4d:94:f0:31:5b:02:34:43:80:a7:cf:0b:2c:2a:
         4d:9a:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:57:30 2026 by rpki-client