Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/323830343a3264633a3a2f33322d3431203d3e203238323737.roa
File:                     323830343a3264633a3a2f33322d3431203d3e203238323737.roa (raw, json)
Hash identifier:          0hWEoEOj1wMVXMocZxTUFZHjN5Wo52lBh8NcNDKkNDE=
Subject key identifier:   13:E3:C5:22:32:1F:C6:DE:B2:E5:AA:C1:34:C5:01:48:9F:94:22:52
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       0AAD506E13EA7BB2488F50EB726007D2FDDB5C3F
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/323830343a3264633a3a2f33322d3431203d3e203238323737.roa
Signing time:             Tue 10 Mar 2026 20:55:30 +0000
ROA not before:           Tue 10 Mar 2026 20:50:30 +0000
ROA not after:            Tue 09 Mar 2027 20:55:30 +0000
asID:                     28277
IP address blocks:        2804:2dc::/32 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ad:50:6e:13:ea:7b:b2:48:8f:50:eb:72:60:07:d2:fd:db:5c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: Mar 10 20:50:30 2026 GMT
            Not After : Mar  9 20:55:30 2027 GMT
        Subject: CN=13E3C522321FC6DEB2E5AAC134C501489F942252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e3:5f:37:ab:42:54:f5:a3:11:dc:eb:b6:91:
                    fe:da:7d:7f:86:a3:34:e5:b0:a9:99:4b:65:07:66:
                    1c:89:ed:99:49:f8:f9:5d:61:7c:56:d3:e3:05:a9:
                    b4:f2:65:b2:3e:94:73:f5:7b:8f:b4:fe:28:c9:fc:
                    cc:52:4f:03:cb:77:c7:b2:fa:4d:a5:01:cd:4c:72:
                    59:96:2e:5b:bb:32:ab:88:5a:f3:ab:aa:36:50:f6:
                    3d:92:e6:8f:51:36:cf:6e:3d:20:f0:68:f8:4e:4c:
                    8e:ac:da:d0:d8:3c:a2:b5:83:1e:c1:17:81:6e:55:
                    c2:f6:8f:5e:89:7c:95:b7:f2:a2:3c:06:e1:cb:d4:
                    1a:7d:5a:15:da:24:40:46:b7:c2:28:da:23:cd:5c:
                    fa:df:6a:6e:1f:8e:fc:29:1f:2d:f5:e4:7b:9d:7e:
                    7a:05:cf:90:aa:c3:bd:3d:16:bb:ab:1c:9e:d3:e2:
                    30:8d:5f:0e:e8:e7:61:76:c7:74:96:ad:23:5d:1b:
                    37:37:68:00:0a:e7:1d:1a:d0:f1:dd:7e:08:d6:b0:
                    33:0b:91:bf:ba:32:6f:9c:6c:e8:76:cf:8d:78:17:
                    bf:c3:06:df:7e:5e:fc:58:75:4d:a0:be:af:ef:d0:
                    8e:05:3b:3d:34:80:5b:45:49:71:c9:67:0c:34:f5:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E3:C5:22:32:1F:C6:DE:B2:E5:AA:C1:34:C5:01:48:9F:94:22:52
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/323830343a3264633a3a2f33322d3431203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:93:29:49:f6:ff:f1:9b:da:65:fd:ff:7a:92:dc:23:4b:ea:
         42:74:62:30:7e:4f:56:2a:e1:b9:94:92:b7:03:6e:ef:53:30:
         d8:12:ba:af:e5:12:56:d0:85:7f:67:1d:a3:ac:17:22:bb:49:
         09:d5:31:5a:4b:bb:37:f1:bb:ac:1c:61:af:72:d5:0e:12:1d:
         b0:fb:4a:74:ad:3e:e8:ce:07:27:6f:33:46:60:d5:53:aa:86:
         63:0f:e1:ad:62:2d:4c:1c:84:f5:1a:37:30:1a:1a:9d:a5:ac:
         0a:14:bd:59:fd:8b:26:8c:ce:a0:b5:23:1a:23:ec:fc:e2:26:
         92:37:30:84:d6:e8:39:28:f5:54:c7:d5:33:d7:98:e8:36:50:
         4f:ab:0b:28:b3:1a:d1:6f:50:09:0f:a2:ce:f7:fa:0b:4a:ad:
         e6:b0:a8:ad:19:eb:6b:fd:a4:07:57:7f:3f:99:3a:df:ee:01:
         42:a8:a2:5b:bc:45:9f:5e:57:08:fa:33:d6:7b:6b:87:51:12:
         97:2e:4c:03:2b:a5:6e:75:83:50:3e:24:15:41:62:11:d4:30:
         8b:bf:c2:13:64:88:29:fd:49:7c:30:fe:0c:6b:44:33:22:8d:
         e0:ea:99:24:9a:59:84:75:cd:d4:51:5f:cd:dc:ce:20:53:5a:
         a5:2b:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:05:25 2026 by rpki-client