Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383030303a3a2f33332d3333203d3e20323634303232.roa
File:                     323830343a323939303a383030303a3a2f33332d3333203d3e20323634303232.roa (raw, json)
Hash identifier:          h6AHw2KYzrDWuvDL8aZkPFSDThuTU5e78ZIy1s4od14=
Subject key identifier:   3D:FF:EE:7D:EE:41:C2:FB:50:C9:54:EE:38:0C:3D:D5:AA:0C:3D:04
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       67C1469EC2F0CC83061A214C0A15003D76B64724
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383030303a3a2f33332d3333203d3e20323634303232.roa
Signing time:             Fri 27 Mar 2026 14:35:08 +0000
ROA not before:           Fri 27 Mar 2026 14:30:08 +0000
ROA not after:            Fri 26 Mar 2027 14:35:08 +0000
asID:                     264022
IP address blocks:        2804:2990:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c1:46:9e:c2:f0:cc:83:06:1a:21:4c:0a:15:00:3d:76:b6:47:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Mar 27 14:30:08 2026 GMT
            Not After : Mar 26 14:35:08 2027 GMT
        Subject: CN=3DFFEE7DEE41C2FB50C954EE380C3DD5AA0C3D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:19:56:aa:b0:db:39:39:57:8f:70:2d:92:
                    08:f8:07:11:96:72:c0:d4:7d:ef:c3:e5:f4:22:38:
                    7d:7e:ed:e8:aa:5b:e7:df:1f:2b:01:ca:e8:a4:98:
                    a4:d8:b8:0d:09:72:91:db:f6:13:a1:f1:df:7b:ed:
                    d0:e9:bd:80:8e:22:a1:40:c0:3d:dc:8e:00:e7:14:
                    8a:8d:9c:73:c2:39:06:dc:74:8c:fa:cf:d3:8f:d7:
                    00:35:8c:60:e1:5d:ea:e1:77:33:7d:b4:2c:03:23:
                    38:d0:ae:20:e6:90:5c:0d:b2:c0:b0:08:8d:8d:08:
                    55:c0:4c:c6:b8:4e:b7:4d:19:c7:18:13:59:59:ca:
                    2b:7b:d1:ff:c6:7e:e0:9b:24:34:87:9c:30:c7:6b:
                    14:3b:1a:2c:5c:9a:4c:d7:9a:d6:f1:b0:11:c0:f5:
                    bc:11:a6:48:a3:36:d5:3c:f3:fa:66:f1:30:24:cb:
                    44:30:c0:14:7a:e5:9d:5c:d7:47:c2:6a:f7:1d:7a:
                    78:c4:25:6b:21:df:d6:2c:42:65:98:f1:7f:6e:f4:
                    77:86:f7:d9:c5:ca:6e:e9:67:f6:c6:aa:d7:6f:22:
                    48:02:8a:9e:14:86:17:e7:37:e2:15:41:7d:fe:ea:
                    95:22:9e:87:6c:92:2c:c3:77:92:20:45:2e:20:82:
                    ad:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FF:EE:7D:EE:41:C2:FB:50:C9:54:EE:38:0C:3D:D5:AA:0C:3D:04
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383030303a3a2f33332d3333203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:0b:5e:9d:53:cd:16:04:4b:72:d4:3a:5e:b4:cb:37:50:f2:
         3b:4d:20:64:1d:9e:cb:e6:d4:1c:ef:76:d3:e4:93:3a:c4:96:
         d7:b9:e6:6c:59:35:2d:b3:f9:c8:db:bd:1c:91:fa:34:8c:87:
         b7:3d:db:04:68:d7:ac:e6:27:84:45:07:34:09:e5:51:64:13:
         aa:9b:88:04:2b:59:2c:e9:ca:78:fe:0c:62:9c:97:8b:0f:a9:
         65:34:ce:6c:1b:61:08:b3:4e:0f:a4:c9:e8:04:a4:90:36:b8:
         57:3e:ff:9f:b4:4b:39:a2:7a:5b:59:75:fc:9a:da:0d:5c:af:
         f6:5a:1e:68:7d:35:2c:50:36:30:33:f9:3f:be:5a:3e:a0:79:
         42:af:49:bf:25:24:dc:d9:94:f2:38:7f:b1:7f:46:1d:8a:4e:
         3b:2e:80:28:6c:7c:fb:6d:a8:7f:ae:bf:03:b2:72:f5:5b:a3:
         d7:f8:96:ce:95:8e:3a:49:39:e9:b8:45:65:fe:51:d1:10:31:
         03:d5:53:7d:a1:7c:bc:4b:26:90:42:c2:ce:8b:f4:fe:6e:6c:
         7b:71:21:74:4c:40:5b:27:7a:ef:ba:2b:74:9e:42:6a:78:a7:
         62:54:2a:1c:a3:d9:15:cf:67:57:37:82:99:64:cd:49:3b:c0:
         0b:c9:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:43:54 2026 by rpki-client