Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/323830343a356263633a3a2f33322d313238203d3e203532363537.roa
File:                     323830343a356263633a3a2f33322d313238203d3e203532363537.roa (raw, json)
Hash identifier:          Svg9MbI0fZ6TijYQVNjQ0pxgjw/nlih008b+dKWyYNk=
Subject key identifier:   E1:45:D8:3A:25:5B:A8:ED:F0:D1:98:B4:D5:44:8E:71:68:F3:E9:B0
Certificate issuer:       /CN=D11A03F81EF5476E2A52DD0F98CBADB10BD22264
Certificate serial:       4EE0C35A33C845A9670346872E265CC04D8896
Authority key identifier: D1:1A:03:F8:1E:F5:47:6E:2A:52:DD:0F:98:CB:AD:B1:0B:D2:22:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/323830343a356263633a3a2f33322d313238203d3e203532363537.roa
Signing time:             Wed 06 May 2026 22:11:00 +0000
ROA not before:           Wed 06 May 2026 22:06:00 +0000
ROA not after:            Wed 05 May 2027 22:11:00 +0000
asID:                     52657
IP address blocks:        2804:5bcc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.crl
                          rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e0:c3:5a:33:c8:45:a9:67:03:46:87:2e:26:5c:c0:4d:88:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11A03F81EF5476E2A52DD0F98CBADB10BD22264
        Validity
            Not Before: May  6 22:06:00 2026 GMT
            Not After : May  5 22:11:00 2027 GMT
        Subject: CN=E145D83A255BA8EDF0D198B4D5448E7168F3E9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:a9:a9:53:48:a0:ed:e7:d9:f9:6c:38:17:
                    fd:98:45:39:12:84:f0:96:c7:cb:c4:1f:a4:90:2d:
                    47:0d:48:5c:01:0d:8f:4f:73:22:18:db:0b:1e:be:
                    9f:a4:bd:1e:92:74:1b:ba:e4:cb:14:b1:56:93:89:
                    03:b0:54:77:d6:e3:c1:e6:6e:56:64:e2:92:3c:1f:
                    70:cd:c8:bf:33:3d:3e:2e:26:3d:4b:77:24:54:66:
                    31:23:89:22:e0:cb:f6:9b:a7:1d:1f:30:a5:15:67:
                    66:c5:bd:0a:f3:2f:64:06:76:15:62:62:74:c1:ab:
                    28:3e:bf:31:81:11:8a:d1:e2:92:2a:6e:60:f0:7e:
                    f5:60:ad:50:0d:82:5b:90:ef:4d:a7:99:f5:fa:e2:
                    ec:bf:f3:f9:24:ff:2e:6c:ca:5d:96:52:c5:c9:18:
                    59:37:38:80:45:91:b0:52:99:78:a2:8d:af:0a:50:
                    4f:c3:58:50:26:88:ef:13:62:26:54:4c:a5:e3:21:
                    ea:f3:31:8c:5e:41:4f:0a:44:87:03:e0:c2:05:4b:
                    50:30:10:14:ce:73:e8:2b:b5:68:18:76:ab:83:32:
                    32:d9:7c:2e:01:a9:02:4d:6a:76:65:82:93:a6:f6:
                    ef:a7:ae:51:42:e4:a9:92:5d:f6:b5:4a:2d:a2:df:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:45:D8:3A:25:5B:A8:ED:F0:D1:98:B4:D5:44:8E:71:68:F3:E9:B0
            X509v3 Authority Key Identifier:
                keyid:D1:1A:03:F8:1E:F5:47:6E:2A:52:DD:0F:98:CB:AD:B1:0B:D2:22:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11A03F81EF5476E2A52DD0F98CBADB10BD22264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwSPpEXJUVJeZv5sqEZrwz84uPX9Mnxk5ENe63SabmLV/0/323830343a356263633a3a2f33322d313238203d3e203532363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:20:fc:ab:79:85:40:28:a7:56:7a:8b:e0:a2:5e:c2:c6:25:
         73:aa:5e:28:ce:88:4d:7f:db:f5:7a:2b:ad:7f:8c:8c:d2:18:
         fa:4f:7b:74:ae:32:ae:2b:23:aa:31:90:72:fe:f2:a9:76:d2:
         32:7c:27:49:3a:1e:77:72:b8:94:94:7a:a6:02:f9:a9:20:f4:
         1c:bf:56:57:b1:be:50:b2:1d:b5:20:bd:ed:96:65:97:75:20:
         6f:1a:fa:41:b8:23:6e:29:fc:de:64:da:c9:f0:60:b2:ae:96:
         8e:58:ff:02:82:a4:50:d7:b7:0b:b4:41:af:76:97:4e:38:4b:
         05:ab:fa:1f:fb:2b:94:49:2a:d6:3d:28:11:8c:9a:a3:5e:00:
         b4:58:8f:3d:78:fe:a5:04:06:60:60:b5:47:3b:2a:7f:61:a0:
         df:62:39:ea:e6:45:e7:39:a4:bb:40:f1:03:a6:61:6f:eb:2a:
         a1:96:ca:2d:4e:31:e8:83:34:c1:b3:6d:b3:52:49:1c:54:70:
         09:c3:b3:27:8b:e4:c1:1c:2e:5e:a9:3a:19:f0:73:18:2d:b4:
         d8:1a:15:9e:a6:1f:0b:b7:45:4d:fc:3f:26:28:7f:7a:73:67:
         f7:e1:b2:78:8a:e2:8f:76:ac:0c:3b:39:0a:43:f9:b3:d5:b6:
         d8:a3:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:12:15 2026 by rpki-client