Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa
File:                     323830343a313563633a3a2f33322d313238203d3e20323633343131.roa (raw, json)
Hash identifier:          oNXcrVYU0zUWhzfbsOnjpouywg3r3QMYWoUzPSt+OHE=
Subject key identifier:   5A:DC:5D:CE:4D:82:1D:11:DD:EC:8D:61:E3:52:AD:0B:BC:A1:55:E1
Certificate issuer:       /CN=7FA75A5ADB98BF2455840AA939EFCCE9267C7AD9
Certificate serial:       3744DF72789BD21F784B500F06F24818858233C4
Authority key identifier: 7F:A7:5A:5A:DB:98:BF:24:55:84:0A:A9:39:EF:CC:E9:26:7C:7A:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA75A5ADB98BF2455840AA939EFCCE9267C7AD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa
Signing time:             Mon 23 Mar 2026 17:07:42 +0000
ROA not before:           Mon 23 Mar 2026 17:02:42 +0000
ROA not after:            Mon 22 Mar 2027 17:07:42 +0000
asID:                     263411
IP address blocks:        2804:15cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/7FA75A5ADB98BF2455840AA939EFCCE9267C7AD9.crl
                          rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/7FA75A5ADB98BF2455840AA939EFCCE9267C7AD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA75A5ADB98BF2455840AA939EFCCE9267C7AD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:44:df:72:78:9b:d2:1f:78:4b:50:0f:06:f2:48:18:85:82:33:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA75A5ADB98BF2455840AA939EFCCE9267C7AD9
        Validity
            Not Before: Mar 23 17:02:42 2026 GMT
            Not After : Mar 22 17:07:42 2027 GMT
        Subject: CN=5ADC5DCE4D821D11DDEC8D61E352AD0BBCA155E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:42:1a:79:e4:69:ca:b5:08:3a:5b:8d:61:
                    6a:2b:d9:b4:f2:3a:f7:db:c1:0f:fa:68:92:5c:d0:
                    89:75:38:06:75:c5:e9:80:af:4a:ee:50:6d:29:7d:
                    d0:04:2d:94:6b:09:33:82:a9:bc:ce:08:09:be:ec:
                    c4:25:31:00:66:e2:28:ef:f9:e3:00:d4:21:31:45:
                    04:63:d1:2b:7b:52:42:30:05:35:05:fd:5d:04:86:
                    01:aa:f2:59:8e:6e:d6:d1:d3:cf:6f:b8:83:aa:52:
                    c9:24:55:47:74:a5:1c:24:13:99:08:86:8a:e0:5c:
                    71:cf:5a:f0:c2:fc:08:93:a8:3b:c2:9f:ee:75:8b:
                    07:17:95:4b:a2:50:3e:14:d7:cf:a6:f4:ac:be:7d:
                    d7:32:27:04:f1:fa:87:10:a7:0f:25:b0:e5:36:7c:
                    6a:98:7c:4b:2d:1d:ca:77:3a:49:a6:40:65:7d:c3:
                    69:b2:33:fe:cc:c7:f5:97:83:8b:65:53:2d:37:cd:
                    54:61:1e:97:ba:b8:51:ad:20:22:15:2c:65:21:93:
                    23:86:8f:8b:e7:b7:d1:f9:cb:95:6c:cd:60:10:1f:
                    17:5c:eb:1c:6c:f5:d3:00:59:9a:50:70:4d:34:25:
                    65:c7:83:87:23:7d:89:81:fa:ff:bf:15:35:cd:f3:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DC:5D:CE:4D:82:1D:11:DD:EC:8D:61:E3:52:AD:0B:BC:A1:55:E1
            X509v3 Authority Key Identifier:
                keyid:7F:A7:5A:5A:DB:98:BF:24:55:84:0A:A9:39:EF:CC:E9:26:7C:7A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/7FA75A5ADB98BF2455840AA939EFCCE9267C7AD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA75A5ADB98BF2455840AA939EFCCE9267C7AD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:3e:82:f3:41:c7:28:ef:fe:8a:98:48:f1:dc:ac:ce:27:d1:
         45:46:f1:86:6d:65:d7:28:a1:af:e1:58:80:7a:c3:c6:eb:eb:
         f0:06:97:91:bb:94:ef:c3:19:eb:71:8a:01:6c:c5:0c:83:b3:
         a8:5a:a7:7f:2f:e1:06:b9:48:53:94:d1:35:9f:04:4a:d8:eb:
         9d:c8:78:84:6b:0f:e9:e0:38:77:98:68:97:40:4f:fc:24:dc:
         4b:09:c0:a0:b4:78:e0:14:23:78:d5:7f:98:c1:51:89:88:ba:
         91:ab:de:d7:72:bb:82:34:79:c5:e1:e4:cb:d1:a1:c0:65:d5:
         90:8f:65:63:30:f8:4b:8b:da:2d:c8:22:59:ad:e8:37:9a:dd:
         e8:32:77:b3:d8:c1:89:9a:2f:fe:f2:58:56:22:8b:a0:10:e3:
         58:f5:08:47:3d:5a:45:9b:f6:4a:b4:c8:07:cb:1e:d5:aa:9f:
         ca:8a:85:21:ff:3c:8b:8f:79:90:60:35:cd:fc:4b:a2:ba:31:
         95:75:a2:ad:3e:6b:dd:22:e4:17:25:e6:ca:02:5f:50:e1:56:
         64:a2:3e:17:15:12:00:00:bd:bd:e9:17:96:0a:2a:7f:0f:f6:
         d9:07:b4:f7:b6:6d:10:94:0b:b0:fa:36:dc:e5:76:33:8f:6a:
         24:05:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:27:17 2026 by rpki-client