Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33382d3338203d3e20323639323632.roa
File:                     323830343a363165303a3a2f33382d3338203d3e20323639323632.roa (raw, json)
Hash identifier:          D41JANQ3zhvllxaN3SR13hzSzJg13CU5Or4wGcxQzS0=
Subject key identifier:   12:F3:99:01:DE:E6:DF:6E:44:7D:34:5B:3E:7F:23:38:98:F2:73:83
Certificate issuer:       /CN=EEA8B3997AFF147B3B052397FB3F022EC39DAAAA
Certificate serial:       0EC376654D2291D24B05784FD3471C876B777DE4
Authority key identifier: EE:A8:B3:99:7A:FF:14:7B:3B:05:23:97:FB:3F:02:2E:C3:9D:AA:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33382d3338203d3e20323639323632.roa
Signing time:             Thu 02 Apr 2026 20:54:32 +0000
ROA not before:           Thu 02 Apr 2026 20:49:32 +0000
ROA not after:            Thu 01 Apr 2027 20:54:32 +0000
asID:                     269262
IP address blocks:        2804:61e0::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.crl
                          rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c3:76:65:4d:22:91:d2:4b:05:78:4f:d3:47:1c:87:6b:77:7d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA8B3997AFF147B3B052397FB3F022EC39DAAAA
        Validity
            Not Before: Apr  2 20:49:32 2026 GMT
            Not After : Apr  1 20:54:32 2027 GMT
        Subject: CN=12F39901DEE6DF6E447D345B3E7F233898F27383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:41:e3:c1:cd:96:82:39:f1:55:c1:48:ff:
                    b7:40:ec:57:79:0d:c4:3c:de:89:6d:0d:fc:ed:e7:
                    75:5f:29:5e:24:f6:81:f0:bf:cd:46:05:8b:68:71:
                    68:d8:f4:dc:46:27:16:e8:16:ea:b3:42:6e:25:f8:
                    57:d1:c9:18:34:36:e0:1e:b7:35:7f:aa:50:f2:d7:
                    7a:cb:0a:a0:4a:30:da:30:ed:a6:a1:04:58:aa:c7:
                    7f:e3:30:be:8d:ab:92:e5:75:c0:0b:5e:25:7c:45:
                    d8:14:30:3a:9e:84:3d:88:7f:fe:ab:6e:77:7c:24:
                    10:18:e2:bf:61:e0:85:f4:ef:a8:22:26:6a:00:8a:
                    a5:c1:42:8e:69:3a:7f:88:8f:6c:92:3a:3c:f6:4b:
                    43:ff:89:e7:e9:8e:20:bb:37:47:2a:35:d8:13:5f:
                    9a:48:0c:ec:4b:8b:05:52:e9:57:3b:ce:5a:69:5e:
                    eb:c7:d0:43:25:ce:2e:30:8d:92:24:d3:7c:da:d9:
                    f2:6d:6b:87:83:6b:07:62:34:12:b7:d5:70:67:0c:
                    f8:08:7a:17:38:87:52:05:ca:ef:31:86:f9:8c:e2:
                    83:78:d7:97:6a:6e:9a:1a:6e:7d:b8:2e:b4:3b:b1:
                    9a:35:28:67:44:6c:53:03:79:d5:00:3c:75:dd:cd:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F3:99:01:DE:E6:DF:6E:44:7D:34:5B:3E:7F:23:38:98:F2:73:83
            X509v3 Authority Key Identifier:
                keyid:EE:A8:B3:99:7A:FF:14:7B:3B:05:23:97:FB:3F:02:2E:C3:9D:AA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33382d3338203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61e0::/38

    Signature Algorithm: sha256WithRSAEncryption
         cb:90:4d:13:f1:38:87:ad:47:a2:b1:2e:c3:f7:c4:0c:bd:3c:
         df:c9:0d:3f:ce:28:4f:b3:9f:d3:b8:a7:a8:37:94:2a:a8:95:
         77:74:e2:83:f4:46:15:87:44:86:d9:f5:fc:2a:3b:25:b7:d3:
         0c:72:94:36:74:c3:03:ce:13:cd:74:7c:64:0b:4b:fa:78:19:
         90:14:22:a3:16:2e:95:df:4a:57:00:f5:b0:f1:d9:fd:b6:f9:
         a0:3e:23:e3:db:fb:1e:22:97:71:c2:e3:87:35:31:ee:ba:35:
         2c:55:81:80:bb:9f:dd:b5:5c:0a:03:b0:e5:3c:e1:42:78:d2:
         10:42:31:61:d3:67:be:05:f6:9c:80:d1:5f:ae:ae:f2:88:22:
         9d:94:b5:b1:d4:9d:df:5d:3c:37:8d:19:5b:47:58:37:44:92:
         76:9d:89:df:25:a8:ad:8e:c5:c2:25:b7:c6:0e:51:fe:0d:91:
         93:8c:53:d4:1b:01:f1:e1:dd:84:90:e5:c7:e9:6c:41:fb:47:
         1c:e7:2d:71:54:fd:29:88:9d:3d:6a:2b:17:8a:21:d1:80:08:
         84:1f:db:b6:71:c5:d3:a0:4a:cb:f2:26:6a:3f:6e:2a:5c:18:
         df:f3:89:18:78:cc:93:cd:73:db:25:22:8f:5b:42:8c:ea:e5:
         b8:30:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:04:13 2026 by rpki-client