Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3333203d3e20323639313735.roa
File:                     323830343a316634633a3a2f33322d3333203d3e20323639313735.roa (raw, json)
Hash identifier:          Wa7Azgvjc34o9tBKeUYE7ALtIlK7RWElexACUg1izXE=
Subject key identifier:   99:9F:F0:19:A4:67:EF:3C:CA:54:7D:D7:F9:E0:02:47:95:E4:97:7C
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       19DF4193DD15FC70DA20CC0D34FCDCE11C79F6CF
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3333203d3e20323639313735.roa
Signing time:             Fri 27 Mar 2026 13:19:10 +0000
ROA not before:           Fri 27 Mar 2026 13:14:10 +0000
ROA not after:            Fri 26 Mar 2027 13:19:10 +0000
asID:                     269175
IP address blocks:        2804:1f4c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 00:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:df:41:93:dd:15:fc:70:da:20:cc:0d:34:fc:dc:e1:1c:79:f6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Mar 27 13:14:10 2026 GMT
            Not After : Mar 26 13:19:10 2027 GMT
        Subject: CN=999FF019A467EF3CCA547DD7F9E0024795E4977C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:d1:6f:90:fd:87:48:53:42:1c:48:0c:0e:
                    c3:12:18:47:6b:ab:85:f9:08:23:f2:39:d0:36:75:
                    5b:64:38:8c:62:2a:4d:2f:f8:cc:cf:3b:cc:37:f3:
                    08:ed:8f:0b:f4:b5:ce:f8:4f:17:76:94:5d:b9:06:
                    98:91:31:4f:fd:c8:73:8a:0e:d8:bb:4a:49:d7:fc:
                    23:68:a6:5a:89:5e:0e:cd:31:59:79:6c:8b:b8:6f:
                    4b:8a:ff:19:e8:cc:d1:f5:fd:45:17:1f:64:ab:95:
                    a6:9f:62:95:da:20:73:69:b7:4f:a2:32:b4:b2:12:
                    23:ee:e0:aa:e8:19:e3:25:ee:c6:6c:79:49:58:4f:
                    1a:d2:c4:83:53:c9:74:cc:40:0b:b3:d6:d0:1b:16:
                    6b:d8:f9:3b:19:6e:32:ba:a5:84:dd:d7:1b:75:7e:
                    d8:92:9f:8f:47:9d:77:38:81:86:6e:29:38:d9:eb:
                    ce:c5:52:e4:2e:4e:2f:60:98:37:97:22:48:74:97:
                    60:4c:62:c0:35:71:9c:eb:7c:35:4b:e5:39:9a:53:
                    0d:d9:27:f6:d4:dc:6b:b2:06:e6:34:20:b4:43:f8:
                    20:5c:c9:33:9e:3a:59:c1:1d:73:80:f3:73:11:b4:
                    f7:0e:6b:be:74:c3:39:5d:55:9e:87:b6:e2:ab:de:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9F:F0:19:A4:67:EF:3C:CA:54:7D:D7:F9:E0:02:47:95:E4:97:7C
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3333203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:d8:a8:e1:d2:a8:6b:c0:a3:bc:38:9d:04:34:02:73:02:2a:
         97:62:1f:93:a8:10:e9:4b:51:96:bd:a2:b6:ec:5c:24:ff:95:
         b2:3d:5b:33:c7:9b:a7:1d:eb:49:fe:6b:5b:0a:9d:df:f0:7b:
         28:66:c9:e5:0d:6b:bc:ab:1a:31:b8:eb:28:27:9b:17:3a:c4:
         a4:85:f9:87:dc:94:98:9f:c5:a4:34:c8:c6:60:ad:81:d0:6f:
         c4:f8:ef:de:ab:39:08:ed:dc:26:3c:a0:d5:08:ba:37:26:8c:
         e2:31:e8:14:eb:5f:9c:dd:ce:90:7f:32:19:9e:13:06:82:bf:
         6d:41:7d:ca:1a:34:0b:0a:65:39:8e:31:44:8b:9a:d8:e4:af:
         b7:7d:9e:f2:9a:6d:fb:0d:9f:8c:3a:4c:e4:e8:97:93:59:a7:
         4d:6e:6f:ab:9b:f5:f9:7c:91:1c:2b:4e:69:80:16:12:f2:40:
         5e:2f:15:7e:a8:65:90:76:f7:f1:1b:66:10:33:be:fe:ae:0c:
         18:bf:17:db:38:c9:ff:c6:e8:52:2e:0f:cb:5d:39:49:a0:af:
         8f:4c:9b:6d:38:5d:37:0c:fa:c9:44:78:94:a2:3f:bb:b9:10:
         5d:10:62:45:10:cd:76:f7:04:55:c5:73:29:d3:42:30:d2:4f:
         39:17:a4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:14:18 2026 by rpki-client