Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/323830343a376531633a3a2f33322d3332203d3e20323731363033.roa
File:                     323830343a376531633a3a2f33322d3332203d3e20323731363033.roa (raw, json)
Hash identifier:          EGpF9nKOp4lTx75UG94xIk0e7Nq+lNAeuM1odtIwQr0=
Subject key identifier:   5B:71:40:5A:01:92:DF:DA:82:F0:DD:68:FD:2B:C9:3F:49:3A:92:D9
Certificate issuer:       /CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
Certificate serial:       6D2A095B95A98FBB557E68408892E826C8D9E907
Authority key identifier: 97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/323830343a376531633a3a2f33322d3332203d3e20323731363033.roa
Signing time:             Fri 24 Apr 2026 23:31:16 +0000
ROA not before:           Fri 24 Apr 2026 23:26:16 +0000
ROA not after:            Fri 23 Apr 2027 23:31:16 +0000
asID:                     271603
IP address blocks:        2804:7e1c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl
                          rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 19:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2a:09:5b:95:a9:8f:bb:55:7e:68:40:88:92:e8:26:c8:d9:e9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
        Validity
            Not Before: Apr 24 23:26:16 2026 GMT
            Not After : Apr 23 23:31:16 2027 GMT
        Subject: CN=5B71405A0192DFDA82F0DD68FD2BC93F493A92D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:a8:1d:3d:3d:6f:3b:18:25:81:88:c3:12:
                    70:72:13:93:93:ec:8e:b8:ed:b3:9b:23:e9:6a:0d:
                    14:91:94:d1:24:6a:14:86:29:e2:3b:28:ef:18:69:
                    a0:7a:72:5b:ee:42:21:70:76:e2:98:98:87:a0:5b:
                    d6:7c:3a:01:78:98:e0:8c:06:ca:af:e0:72:0c:d6:
                    b4:33:c2:ad:3c:08:ce:18:2e:f5:ef:b1:8d:8d:95:
                    c4:42:6e:e6:32:2b:9a:9e:3b:78:d9:58:d1:7a:53:
                    d3:7b:d0:8e:9e:ce:d0:bc:d5:b2:63:fb:64:06:19:
                    fa:df:af:c2:be:4d:dc:03:ad:ae:e1:a4:6c:7e:78:
                    39:f4:2c:d7:94:35:ef:f0:ee:ca:98:d8:cf:82:39:
                    d6:05:06:4c:d0:cd:35:9e:96:28:57:43:67:31:0c:
                    3b:77:ae:c4:ab:40:5e:c0:07:cc:5e:38:a4:b5:27:
                    8e:e8:c5:46:a8:64:72:64:d1:c6:82:a2:19:e7:7c:
                    ae:41:01:54:4e:12:c6:1d:a2:a9:12:d3:11:17:19:
                    75:dd:67:2b:c3:5d:ea:dd:0d:d0:e3:78:36:c9:f9:
                    aa:54:c2:50:f5:33:44:50:e3:56:0f:5b:0a:46:dd:
                    a9:6e:4f:f8:d9:49:13:b4:6e:a5:37:e6:53:ca:54:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:71:40:5A:01:92:DF:DA:82:F0:DD:68:FD:2B:C9:3F:49:3A:92:D9
            X509v3 Authority Key Identifier:
                keyid:97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/323830343a376531633a3a2f33322d3332203d3e20323731363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:43:93:02:9c:bb:f7:97:c8:26:dc:8c:0b:ce:6e:17:d1:c7:
         3a:0a:55:5c:51:f3:2e:4c:f8:58:b1:90:99:cc:59:58:5e:43:
         54:6f:e4:24:e3:45:03:c1:94:76:d7:74:78:10:b1:17:fd:4a:
         3e:00:8a:26:e6:9c:58:6e:00:89:72:c2:07:00:18:fa:bf:2b:
         d1:73:b8:69:55:6d:ff:2e:f3:f5:98:68:39:e3:52:d6:7a:73:
         de:8e:78:31:ea:ed:51:42:68:03:58:03:d6:ab:2b:a7:b1:45:
         b0:b5:5d:6c:ab:e2:cb:98:3b:c0:83:33:63:be:51:4e:8b:a5:
         72:35:e7:74:c8:1f:31:c7:f2:7a:c3:2a:b9:5e:fc:ea:ec:c2:
         75:77:2d:e8:a8:c7:48:30:d3:10:e1:b1:1c:16:8b:bd:09:30:
         b3:8a:56:8d:5b:92:81:4a:1d:d4:93:ad:9d:ef:f2:b3:bc:3b:
         44:dc:b6:af:48:9f:2f:51:4b:45:40:53:56:fd:9d:b5:3e:8e:
         e8:79:5e:95:a1:f6:b2:3f:74:01:c6:4a:9c:12:81:f1:de:56:
         17:08:2b:36:71:87:dc:7f:16:ad:e6:88:8f:db:58:3f:fa:68:
         36:2a:7f:2a:d7:45:a5:c8:bc:48:f0:2d:65:d4:72:2e:82:aa:
         30:19:03:83
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbSoJW5Wpj7tVfmhAiJLoJsjZ6QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwNEUzODJERUUwOTYyNTlGRTA2RjQzMUVDRENGRTdF
QzI1NkM2QTAeFw0yNjA0MjQyMzI2MTZaFw0yNzA0MjMyMzMxMTZaMDMxMTAvBgNV
BAMTKDVCNzE0MDVBMDE5MkRGREE4MkYwREQ2OEZEMkJDOTNGNDkzQTkyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgK6gdPT1vOxglgYjDEnByE5OT
7I647bObI+lqDRSRlNEkahSGKeI7KO8YaaB6clvuQiFwduKYmIegW9Z8OgF4mOCM
Bsqv4HIM1rQzwq08CM4YLvXvsY2NlcRCbuYyK5qeO3jZWNF6U9N70I6eztC81bJj
+2QGGfrfr8K+TdwDra7hpGx+eDn0LNeUNe/w7sqY2M+COdYFBkzQzTWelihXQ2cx
DDt3rsSrQF7AB8xeOKS1J47oxUaoZHJk0caCohnnfK5BAVROEsYdoqkS0xEXGXXd
ZyvDXerdDdDjeDbJ+apUwlD1M0RQ41YPWwpG3aluT/jZSRO0bqU35lPKVDCBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUW3FAWgGS39qC8N1o/SvJP0k6ktkwHwYDVR0j
BBgwFoAUlwTjgt7gliWf4G9DHs3P5+wlbGowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SZEpuNUVmbW1nYkhuWkxDOEZaaVd1Vmo2eEhEYXgzTXduV1lUYVVhd3lL
LzAvOTcwNEUzODJERUUwOTYyNTlGRTA2RjQzMUVDRENGRTdFQzI1NkM2QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85NzA0RTM4MkRFRTA5NjI1OUZF
MDZGNDMxRUNEQ0ZFN0VDMjU2QzZBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
ZEpuNUVmbW1nYkhuWkxDOEZaaVd1Vmo2eEhEYXgzTXduV1lUYVVhd3lLLzAvMzIz
ODMwMzQzYTM3NjUzMTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMxMzYz
MDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAR+HDANBgkqhkiG9w0BAQsFAAOCAQEArUOTApy795fI
JtyMC85uF9HHOgpVXFHzLkz4WLGQmcxZWF5DVG/kJONFA8GUdtd0eBCxF/1KPgCK
JuacWG4AiXLCBwAY+r8r0XO4aVVt/y7z9ZhoOeNS1npz3o54MertUUJoA1gD1qsr
p7FFsLVdbKviy5g7wIMzY75RToulcjXndMgfMcfyesMquV786uzCdXct6KjHSDDT
EOGxHBaLvQkws4pWjVuSgUod1JOtne/ys7w7RNy2r0ifL1FLRUBTVv2dtT6O6Hle
laH2sj90AcZKnBKB8d5WFwgrNnGH3H8WreaIj9tYP/poNip/KtdFpci8SPAtZdRy
LoKqMBkDgw==
-----END CERTIFICATE-----
Generated at Wed May 13 18:57:45 2026 by rpki-client