Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a3a2f33322d3332203d3e20323634303232.roa
File:                     323830343a323939303a3a2f33322d3332203d3e20323634303232.roa (raw, json)
Hash identifier:          sDrCg+2Uuby1SbIewU1OuZjGND+h6G+TfoJ1Ke8ydvM=
Subject key identifier:   FF:B6:BD:00:6C:DB:8F:E7:C1:B3:24:D0:3C:03:4E:F0:70:42:04:99
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       6720E4DE459D97DEB27581D10972F930A3A6AC5A
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a3a2f33322d3332203d3e20323634303232.roa
Signing time:             Fri 27 Mar 2026 14:35:08 +0000
ROA not before:           Fri 27 Mar 2026 14:30:08 +0000
ROA not after:            Fri 26 Mar 2027 14:35:08 +0000
asID:                     264022
IP address blocks:        2804:2990::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:20:e4:de:45:9d:97:de:b2:75:81:d1:09:72:f9:30:a3:a6:ac:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Mar 27 14:30:08 2026 GMT
            Not After : Mar 26 14:35:08 2027 GMT
        Subject: CN=FFB6BD006CDB8FE7C1B324D03C034EF070420499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:2c:3d:2f:2e:80:52:20:09:83:3b:47:dd:
                    c5:ac:3c:14:01:f5:4a:d8:e6:f2:05:f0:72:86:d6:
                    90:fb:5c:b3:57:42:9e:ea:b4:2c:43:30:d8:09:cb:
                    83:d6:38:e2:b3:0f:53:15:1f:4a:21:18:86:d9:82:
                    30:c3:2d:53:b9:71:b6:f5:89:16:c5:50:d1:0a:f9:
                    3d:e8:35:da:23:4e:f1:0e:49:76:a9:81:84:55:76:
                    8d:b4:11:f1:73:ee:9c:23:32:a6:0b:5a:a9:55:fe:
                    c7:e6:53:3a:60:58:55:77:1c:ba:4b:2b:4f:64:62:
                    77:45:30:e7:87:24:d0:3e:8c:aa:d0:f1:25:c2:2a:
                    a0:b8:99:f4:f5:57:5c:76:0e:b2:b4:9d:fb:52:97:
                    9f:6f:42:6d:1c:a1:73:24:d1:63:10:bf:70:17:94:
                    3c:dd:52:a9:04:7e:33:d3:5e:20:8e:11:9d:4a:0c:
                    c8:44:c6:e4:ce:5e:e2:8f:52:9b:ad:91:cc:a2:18:
                    2b:2e:60:3d:17:fd:e4:1c:31:46:4c:f8:f0:13:16:
                    99:dc:e7:3b:49:37:64:a1:ff:86:23:1b:e4:9b:80:
                    bd:2a:c6:5d:82:cf:99:f2:82:37:1a:fb:fd:47:2e:
                    0c:10:8b:f4:f1:18:b5:24:7a:60:8f:79:ba:7f:75:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B6:BD:00:6C:DB:8F:E7:C1:B3:24:D0:3C:03:4E:F0:70:42:04:99
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a3a2f33322d3332203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:ec:03:0d:db:46:01:b0:c6:7d:26:60:ed:cc:e8:a6:c9:7d:
         fa:8b:93:15:29:18:7c:ea:5f:47:19:21:1d:dd:6d:80:df:a9:
         19:30:70:50:b4:2b:8e:0b:91:00:54:dd:f6:fc:d1:4d:67:76:
         1d:27:fe:f7:d4:41:e7:b7:25:22:c3:f8:ad:f5:af:bd:29:1f:
         c2:e2:f4:1d:e5:7f:77:9a:12:1d:c8:a8:24:84:3c:8a:c3:92:
         91:f6:3e:19:af:44:58:40:07:76:80:34:59:ba:3a:6d:78:27:
         b2:31:34:ca:1e:b4:f4:e4:37:82:38:71:ec:9e:de:23:a1:a8:
         96:96:ef:36:6a:85:76:bd:63:1b:49:70:eb:3f:e0:19:24:c5:
         83:80:40:67:fb:ba:35:bc:31:b4:03:d6:cb:24:e0:6b:5c:76:
         1e:ab:78:f0:d6:02:d5:0c:70:9e:3d:3f:3b:a5:42:81:a1:df:
         10:c6:b1:d1:b6:cc:41:06:0c:1f:ef:eb:e0:4f:b0:98:8e:d3:
         7e:01:69:4c:be:c4:ef:08:3b:64:cf:53:d6:be:de:e6:53:c5:
         67:1f:89:12:92:0f:ba:1c:5c:10:1b:dc:14:c6:89:4c:26:dd:
         00:3f:3c:af:4a:3d:cc:72:c2:e7:c9:09:b1:a7:1c:a1:3e:92:
         24:4c:f6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:53:05 2026 by rpki-client