Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d313238203d3e20323636353435.roa
File:                     323830343a336461383a3a2f33322d313238203d3e20323636353435.roa (raw, json)
Hash identifier:          4QniaKh4idvE2RqR2WBt+R3dyUiXYcha+mr6tud+YR4=
Subject key identifier:   1F:22:39:91:47:39:31:60:A7:39:C5:16:38:87:C0:B3:C2:EE:F8:F7
Certificate issuer:       /CN=4498EC92E2D9135B97226EBCC85EBA922F4A7004
Certificate serial:       4821BE30169BAED635B7A8BE5E55C1D5D1EF2EC2
Authority key identifier: 44:98:EC:92:E2:D9:13:5B:97:22:6E:BC:C8:5E:BA:92:2F:4A:70:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4498EC92E2D9135B97226EBCC85EBA922F4A7004.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d313238203d3e20323636353435.roa
Signing time:             Fri 03 Apr 2026 18:14:02 +0000
ROA not before:           Fri 03 Apr 2026 18:09:02 +0000
ROA not after:            Fri 02 Apr 2027 18:14:02 +0000
asID:                     266545
IP address blocks:        2804:3da8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/4498EC92E2D9135B97226EBCC85EBA922F4A7004.crl
                          rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/4498EC92E2D9135B97226EBCC85EBA922F4A7004.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4498EC92E2D9135B97226EBCC85EBA922F4A7004.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:21:be:30:16:9b:ae:d6:35:b7:a8:be:5e:55:c1:d5:d1:ef:2e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4498EC92E2D9135B97226EBCC85EBA922F4A7004
        Validity
            Not Before: Apr  3 18:09:02 2026 GMT
            Not After : Apr  2 18:14:02 2027 GMT
        Subject: CN=1F22399147393160A739C5163887C0B3C2EEF8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:8c:13:11:cd:5d:47:46:d0:2c:08:8a:1e:
                    1d:cc:8a:84:1a:2a:b6:a2:a0:7c:7e:fa:8f:57:84:
                    15:f1:64:36:34:ce:3c:0e:1b:e6:6a:e4:b3:fd:3a:
                    37:a2:eb:9e:6f:d0:39:8d:00:8f:94:f4:74:84:ba:
                    d0:9c:0f:6d:bb:12:2f:34:aa:3c:e5:aa:32:51:ae:
                    42:dd:28:4b:70:99:f0:60:05:f7:ed:02:22:a8:6d:
                    76:5b:5b:02:57:69:4e:f3:a7:9a:6d:16:27:a2:ef:
                    eb:e2:5f:a1:35:f3:5d:36:27:23:b6:07:72:14:26:
                    9e:11:73:cf:52:04:f8:66:a7:63:3b:30:00:c9:f7:
                    dd:07:61:10:b4:ba:f4:1f:d8:73:00:72:6b:a9:2a:
                    df:eb:8e:c9:ed:31:7c:8a:1e:7e:d2:6b:5c:e9:cf:
                    de:b1:b2:34:8a:8e:ff:ca:e4:c3:71:2a:85:24:54:
                    b5:b5:b2:37:9b:c0:c0:0f:cc:86:43:32:2e:12:2f:
                    e3:6e:75:33:b7:72:ee:43:7b:e9:7f:e1:b6:b5:a9:
                    f6:b7:52:fa:76:9c:ef:6f:69:8e:43:c2:4d:7f:09:
                    f0:52:b1:f0:15:42:30:51:f0:57:33:70:ec:d6:d3:
                    23:41:3e:46:aa:ef:bd:5c:e4:b5:a8:f0:fc:cf:a9:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:22:39:91:47:39:31:60:A7:39:C5:16:38:87:C0:B3:C2:EE:F8:F7
            X509v3 Authority Key Identifier:
                keyid:44:98:EC:92:E2:D9:13:5B:97:22:6E:BC:C8:5E:BA:92:2F:4A:70:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/4498EC92E2D9135B97226EBCC85EBA922F4A7004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4498EC92E2D9135B97226EBCC85EBA922F4A7004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d313238203d3e20323636353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:91:3f:3b:c0:50:c1:a4:e8:5c:33:0a:06:8c:10:f0:cf:b3:
         e6:1c:d7:f5:30:cc:97:81:1a:aa:02:bb:58:7e:e3:e7:8a:7f:
         97:b1:7c:b3:89:bb:ef:ea:71:a5:85:ef:eb:44:b7:09:ec:e1:
         a3:e3:b7:3a:ef:b5:92:eb:2a:65:4d:b5:ea:cf:cf:ab:89:d5:
         92:77:0f:fa:78:b1:9c:2f:cd:38:93:40:aa:bf:d8:52:0a:99:
         ba:5c:f5:cb:d3:43:b3:b4:3c:e1:b9:d4:5b:dd:db:5b:64:15:
         d2:f9:5f:46:d6:e9:55:51:4a:b7:7b:52:19:3c:8f:ac:28:89:
         fe:d2:62:6f:27:f6:9f:99:69:4d:35:2a:8a:6f:02:be:37:3e:
         32:d4:9b:e1:2d:3d:75:f2:f3:f0:a2:af:22:2f:bd:4c:c0:a4:
         54:5a:f1:26:09:6f:8c:80:2e:10:28:61:5e:ff:b5:f0:57:78:
         8f:1d:57:34:ee:b0:65:53:2a:8b:7c:1b:65:08:d3:4b:11:61:
         a7:d6:bb:17:65:f2:eb:46:1f:a2:8b:f2:76:5b:06:db:72:33:
         20:1e:2e:cf:7e:13:57:4e:d8:38:1c:5a:f3:1c:69:b4:da:c0:
         5e:41:4c:66:70:4c:66:68:55:88:f7:c6:9d:02:d9:b0:09:92:
         ca:82:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:32:52 2026 by rpki-client