Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3438203d3e20323632363735.roa
File:                     323830343a6134343a3a2f33322d3438203d3e20323632363735.roa (raw, json)
Hash identifier:          7uwKKYyZQmnJ5Gf3pwYwDg101xt+qP1U3cDkW0pE7mY=
Subject key identifier:   7F:16:F0:4E:30:5E:5D:2F:1A:08:55:46:23:2E:47:8F:95:A7:24:A3
Certificate issuer:       /CN=F941A54E9C2DEE49C72D90951902E8AD2E877566
Certificate serial:       456FAF3B10F2F9C09F4535E2B6AE37497CA1F3A5
Authority key identifier: F9:41:A5:4E:9C:2D:EE:49:C7:2D:90:95:19:02:E8:AD:2E:87:75:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F941A54E9C2DEE49C72D90951902E8AD2E877566.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3438203d3e20323632363735.roa
Signing time:             Thu 02 Apr 2026 18:18:57 +0000
ROA not before:           Thu 02 Apr 2026 18:13:57 +0000
ROA not after:            Thu 01 Apr 2027 18:18:57 +0000
asID:                     262675
IP address blocks:        2804:a44::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/F941A54E9C2DEE49C72D90951902E8AD2E877566.crl
                          rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/F941A54E9C2DEE49C72D90951902E8AD2E877566.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F941A54E9C2DEE49C72D90951902E8AD2E877566.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 05:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6f:af:3b:10:f2:f9:c0:9f:45:35:e2:b6:ae:37:49:7c:a1:f3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F941A54E9C2DEE49C72D90951902E8AD2E877566
        Validity
            Not Before: Apr  2 18:13:57 2026 GMT
            Not After : Apr  1 18:18:57 2027 GMT
        Subject: CN=7F16F04E305E5D2F1A085546232E478F95A724A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:43:80:df:33:1e:bd:ff:de:fa:ba:3a:1c:
                    13:32:11:19:02:9d:46:f5:c1:75:c5:99:0a:22:97:
                    4c:5f:2e:2b:5c:60:82:97:fa:99:f8:9c:bc:aa:6f:
                    92:04:71:13:81:d7:75:56:d5:30:fa:b7:77:79:72:
                    b7:3d:16:2b:bd:c5:3d:f2:7d:ad:f3:2a:13:15:8d:
                    fd:bf:a0:c1:05:db:c7:51:78:54:51:de:f7:2d:d0:
                    c9:5b:48:62:5a:2d:1d:01:09:b9:31:05:59:51:5b:
                    a7:e2:87:e4:ca:d0:a7:34:6b:68:ff:9a:81:58:31:
                    85:76:86:0c:4a:0e:14:90:b4:36:d4:a7:c1:6c:d5:
                    c5:6e:72:4b:73:c7:c8:17:54:a2:53:84:fb:ac:b7:
                    cf:07:fd:71:8c:48:a8:ff:d2:53:2f:c7:a7:8f:9a:
                    b4:9f:f5:68:5c:cc:27:0c:99:3f:84:d5:c9:64:2e:
                    ab:43:15:99:6d:88:62:c3:50:a4:a2:2a:11:76:1d:
                    82:c3:14:98:7e:15:f7:55:85:e1:6e:5c:3b:25:95:
                    29:22:fd:2b:54:db:85:bd:f5:85:b0:73:80:8e:76:
                    e0:37:c6:27:a8:f8:60:3e:62:8e:31:9d:8f:6a:f6:
                    ac:91:0e:57:14:25:5b:5f:f1:b4:ad:af:db:42:0c:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:16:F0:4E:30:5E:5D:2F:1A:08:55:46:23:2E:47:8F:95:A7:24:A3
            X509v3 Authority Key Identifier:
                keyid:F9:41:A5:4E:9C:2D:EE:49:C7:2D:90:95:19:02:E8:AD:2E:87:75:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/F941A54E9C2DEE49C72D90951902E8AD2E877566.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F941A54E9C2DEE49C72D90951902E8AD2E877566.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3438203d3e20323632363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a44::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:37:62:d5:bb:2c:ee:ce:b4:37:16:ee:59:c7:45:0f:98:4a:
         f2:ea:14:b1:fa:ab:2c:97:68:20:7f:d3:e6:bc:bf:65:3f:d8:
         25:9d:77:27:ce:50:3d:c1:41:f5:e9:85:2c:ba:26:b7:91:62:
         82:39:85:77:c8:2d:4b:7c:b4:7b:7f:d2:4c:f2:d4:95:3a:9b:
         1b:d4:f3:c6:b0:bc:13:bc:65:5a:d8:2d:51:8a:55:42:cb:70:
         26:ae:64:e9:b6:6b:ba:fe:16:f3:e6:4d:4c:19:31:fd:17:91:
         53:cc:14:03:01:e3:a0:7f:b0:1d:e1:d0:38:d4:fa:f8:1e:41:
         7c:e4:da:69:11:8f:38:a7:d6:0a:52:73:4c:18:79:c0:7b:ee:
         2a:63:13:04:a0:5f:f0:b6:0f:c3:05:0d:8a:87:3e:f7:5d:e9:
         af:b0:b3:ea:06:3a:86:b9:c9:55:33:78:dc:51:3a:9d:12:c8:
         e4:e6:91:b3:f8:cc:2e:07:c6:50:0d:05:a8:ef:67:02:54:58:
         a5:32:73:d9:e4:79:38:f0:40:7d:1e:06:ee:b1:18:73:38:e7:
         a9:bb:7d:fa:ac:e2:de:6f:3e:c0:cd:de:8d:21:09:09:49:aa:
         3b:7d:c1:9d:60:4a:f3:72:f6:e9:2b:d6:9f:fa:25:07:f1:a2:
         4c:c4:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:42:57 2026 by rpki-client