Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/323830343a363532633a3a2f33342d3334203d3e20323639343733.roa
File:                     323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (raw, json)
Hash identifier:          EXKoERunxHBjD0wM17VenuhxYo/CI6MX+lv8XDiQ0Z0=
Subject key identifier:   B9:51:7A:53:17:35:19:EC:0D:66:8E:27:30:56:25:37:91:A8:F5:A1
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       587E0EE8271CFE68E7FB14B370898A94A7E871F4
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/323830343a363532633a3a2f33342d3334203d3e20323639343733.roa
Signing time:             Mon 16 Mar 2026 22:03:05 +0000
ROA not before:           Mon 16 Mar 2026 21:58:05 +0000
ROA not after:            Mon 15 Mar 2027 22:03:05 +0000
asID:                     269473
IP address blocks:        2804:652c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7e:0e:e8:27:1c:fe:68:e7:fb:14:b3:70:89:8a:94:a7:e8:71:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Mar 16 21:58:05 2026 GMT
            Not After : Mar 15 22:03:05 2027 GMT
        Subject: CN=B9517A53173519EC0D668E273056253791A8F5A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:b8:65:dc:3e:25:72:ff:30:2d:29:3b:75:
                    cc:46:40:9f:e3:6a:47:17:03:ba:74:7b:29:f8:6a:
                    dd:61:a6:fe:e8:04:30:b7:1c:38:3f:20:ee:d4:7f:
                    46:25:49:78:30:a1:0b:fc:b2:4e:5d:d3:5d:fb:12:
                    fe:82:94:28:0a:0f:f1:bf:0e:80:41:9b:7f:b7:0a:
                    d8:82:d2:9d:3e:72:5b:07:0a:fd:8e:f0:ee:dc:3b:
                    db:35:dd:ab:25:a7:b4:4a:02:ed:a3:08:4f:9d:58:
                    9b:30:5b:c1:55:2e:7c:0e:dd:37:95:28:d4:9c:40:
                    4d:6f:93:7b:8e:bc:4f:8a:08:b7:98:b7:99:5d:95:
                    4b:d5:a3:80:fe:4a:61:ac:d4:ee:04:ba:f7:ca:e7:
                    38:6e:63:a0:07:97:81:b1:c9:08:97:0d:47:e3:81:
                    b3:15:fe:ac:a1:62:a7:3d:25:a4:e4:e0:b9:43:93:
                    b6:2a:f0:97:cd:2c:cb:69:5d:0c:65:1a:03:e7:9e:
                    39:01:93:12:93:46:74:15:11:bf:84:63:5a:f4:6f:
                    32:fb:1d:f9:a0:0e:d8:91:54:c2:b3:cc:28:83:16:
                    17:1c:20:38:ed:42:ac:a5:68:37:0c:e4:a8:c3:71:
                    47:5b:7d:65:74:cf:07:2e:41:f6:24:10:a0:23:da:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:51:7A:53:17:35:19:EC:0D:66:8E:27:30:56:25:37:91:A8:F5:A1
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/323830343a363532633a3a2f33342d3334203d3e20323639343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:652c::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:de:b6:9d:28:53:47:73:75:bc:09:39:e5:32:51:31:9a:2f:
         75:74:b7:0c:dc:0f:ce:61:91:03:77:08:67:47:1f:f0:e1:28:
         0c:21:ce:90:9b:ad:fa:ea:9c:09:15:60:92:e0:97:b1:0b:04:
         96:f9:73:4d:ee:27:59:da:d5:3c:c4:a7:73:f2:8b:3f:b0:53:
         93:89:df:fa:77:36:3a:79:ef:04:3a:1a:bc:cd:d6:72:0b:50:
         a9:ca:8f:ca:c4:07:c7:b1:ed:df:d6:90:91:8b:7a:7c:19:e3:
         30:79:24:62:cd:22:e9:4c:69:e9:48:9a:93:d8:a2:e9:e1:9d:
         dc:a0:ea:cb:71:71:a8:85:4e:8c:5f:62:fe:39:f5:f6:03:3c:
         20:58:2b:66:44:8d:be:56:c5:6d:b7:b9:40:93:d7:bd:8d:c3:
         9e:18:e9:d7:ab:b2:53:24:d4:a7:5b:fa:f7:38:e7:82:6f:83:
         05:41:0a:13:95:2a:dc:2f:4c:63:59:2a:01:6d:ed:b9:ac:69:
         54:c4:ec:88:17:bf:3d:24:64:28:20:67:23:94:8c:b7:79:21:
         4c:99:bb:9b:14:5f:c0:42:9a:9b:23:83:44:7d:2b:82:79:d1:
         63:e2:56:eb:d7:6a:dc:9c:ea:c5:ae:95:8d:f8:81:91:e4:cd:
         0c:30:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:40 2026 by rpki-client