Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa
File:                     323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa (raw, json)
Hash identifier:          Wv8M7r7Jn8s+H/nmcBSMN8nRMXy+7lNbYixELH+DZHU=
Subject key identifier:   B9:35:22:D9:70:68:44:AF:CD:9F:16:89:14:E1:36:A8:64:1F:38:4E
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       5E13BD0B41E39A38BCAC830D25902803BB386014
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa
Signing time:             Wed 01 Apr 2026 12:59:55 +0000
ROA not before:           Wed 01 Apr 2026 12:54:55 +0000
ROA not after:            Wed 31 Mar 2027 12:59:55 +0000
asID:                     52540
IP address blocks:        2804:e10:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:13:bd:0b:41:e3:9a:38:bc:ac:83:0d:25:90:28:03:bb:38:60:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Apr  1 12:54:55 2026 GMT
            Not After : Mar 31 12:59:55 2027 GMT
        Subject: CN=B93522D9706844AFCD9F168914E136A8641F384E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:59:93:1d:1c:fc:ab:4b:10:94:e6:9d:e6:
                    ec:af:74:b3:dc:ae:14:b8:a5:9e:12:13:c7:f6:b2:
                    02:d6:48:20:5e:1b:6d:cc:eb:76:a6:97:a9:44:61:
                    90:a5:d5:7e:3a:8c:68:b5:b5:cd:c7:de:a3:a4:16:
                    da:fa:84:a8:10:d9:e0:8e:8f:54:57:09:41:b4:16:
                    28:a0:1d:5e:05:75:f8:29:e7:58:d5:df:bd:8e:da:
                    7f:ea:57:6b:4c:44:41:7c:88:80:c5:75:10:23:9b:
                    14:74:02:3a:bf:8a:c2:0d:80:08:d2:05:27:1d:f2:
                    51:67:79:8a:d0:f7:d0:e5:83:ae:17:b8:6c:b2:0b:
                    cc:95:13:2b:6e:51:f7:99:b4:1d:e7:98:5d:74:03:
                    d9:34:df:66:1c:27:48:f2:30:b0:26:78:98:42:91:
                    ff:b9:73:10:78:99:77:2a:8e:f1:9c:57:07:f3:c0:
                    10:27:42:e6:75:d3:76:33:ed:87:4c:23:17:0f:e8:
                    81:98:9e:85:be:1d:8e:e4:a7:8b:2c:02:ce:16:22:
                    c1:2b:d4:98:ce:aa:f6:1a:e0:4e:e5:2a:2f:ea:87:
                    f2:bb:27:5b:66:17:7f:c1:1e:4c:71:81:c1:fc:3c:
                    e8:41:36:75:a5:1c:b8:69:d0:36:81:8d:98:c5:a3:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:22:D9:70:68:44:AF:CD:9F:16:89:14:E1:36:A8:64:1F:38:4E
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2f:86:53:87:fc:c3:1d:b9:47:4c:f3:e4:4c:e3:61:ab:90:29:
         ec:c5:92:b6:a5:6e:83:4d:24:cf:70:52:0e:e0:1e:83:cd:cc:
         fd:1f:ae:46:80:19:e2:e9:09:d8:2a:4b:6a:81:36:2a:7b:39:
         88:8b:a1:1e:f6:c4:87:1e:a6:82:87:db:b6:b2:44:37:b8:6d:
         b8:40:9a:5c:16:bd:66:a6:d8:83:b9:e0:21:9f:1c:f2:71:ef:
         f9:b7:39:c3:15:2a:c2:54:fa:dd:d7:58:27:59:30:c6:48:eb:
         38:d5:8e:0a:87:8f:61:91:f0:60:63:4c:01:5d:8b:8c:0d:87:
         43:73:30:57:e4:44:e7:4a:d6:8a:af:67:cc:6e:77:7b:36:3b:
         df:e4:94:ab:07:c7:f0:5a:60:85:75:ef:cf:26:8a:5a:4c:dc:
         60:2e:0b:eb:2f:b6:8b:25:08:e3:0a:1a:4d:ba:55:bb:88:42:
         ea:d5:1d:a0:12:74:7b:e5:38:8a:4b:36:a8:45:7f:12:b7:82:
         3e:87:05:8b:17:3d:cd:8f:4c:4f:9e:2c:2d:4c:be:14:58:60:
         e5:ab:84:1d:2d:bf:53:87:6c:51:b3:16:96:9d:71:d8:df:08:
         bd:8a:87:44:a7:32:c1:e5:a6:2e:1b:db:d8:66:41:51:39:a2:
         8b:2b:48:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:26:32 2026 by rpki-client