Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
File:                     323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (raw, json)
Hash identifier:          4CfHBUBDDkPgL617GWa3jtvOo0guxUqxP4b4fmNYQYA=
Subject key identifier:   A8:EB:33:03:BD:0F:1D:6C:52:95:F5:08:43:29:B2:4D:28:3E:71:EB
Certificate issuer:       /CN=624F0468FC714CC37AD7B531FC42ED69C25ADF2C
Certificate serial:       362E1C6921978CF777BD7369822A66DA061C8CCF
Authority key identifier: 62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
Signing time:             Mon 06 Apr 2026 15:58:30 +0000
ROA not before:           Mon 06 Apr 2026 15:53:30 +0000
ROA not after:            Mon 05 Apr 2027 15:58:30 +0000
asID:                     11432
IP address blocks:        2804:138:a000::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2e:1c:69:21:97:8c:f7:77:bd:73:69:82:2a:66:da:06:1c:8c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624F0468FC714CC37AD7B531FC42ED69C25ADF2C
        Validity
            Not Before: Apr  6 15:53:30 2026 GMT
            Not After : Apr  5 15:58:30 2027 GMT
        Subject: CN=A8EB3303BD0F1D6C5295F5084329B24D283E71EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:63:44:47:d8:cd:bc:a5:9c:06:84:32:6e:
                    05:c1:3c:be:71:cc:69:7d:06:1e:e9:81:87:09:f7:
                    72:43:a8:b5:a2:17:e2:65:d0:33:c7:db:ae:06:67:
                    75:23:85:03:d2:05:30:12:f5:e7:16:64:b8:52:50:
                    41:71:f8:ee:43:d6:ed:9d:ba:76:fd:ce:6a:30:fc:
                    09:70:08:db:88:f0:1e:bb:75:a4:be:35:6a:90:0b:
                    36:1a:f2:4b:99:d0:d4:7d:1e:87:d9:00:f5:9a:46:
                    49:51:0a:c9:5d:1f:77:d7:f8:f3:00:26:a8:86:81:
                    83:f3:f6:0d:b8:48:04:a6:75:6c:95:96:7f:aa:fc:
                    29:78:ec:d2:c5:c9:08:31:b0:56:c8:21:88:49:52:
                    b4:20:92:b0:30:3d:5f:58:e7:7d:99:c3:b1:ea:b8:
                    65:aa:82:f2:03:01:c7:c1:48:81:f9:00:cc:fd:79:
                    f6:ca:a0:7f:dc:4d:63:b0:94:ae:3c:3f:aa:a2:ca:
                    b9:9b:d7:61:b7:8e:77:65:d4:11:a4:d7:63:3c:84:
                    01:74:45:39:40:04:3e:4a:c5:f3:51:43:60:fb:5b:
                    4a:c4:93:1b:dc:7d:af:00:01:0f:aa:ba:65:ee:b9:
                    da:1e:39:9b:c0:1e:34:62:18:7a:9c:fe:5f:00:4b:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EB:33:03:BD:0F:1D:6C:52:95:F5:08:43:29:B2:4D:28:3E:71:EB
            X509v3 Authority Key Identifier:
                keyid:62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:138:a000::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:b1:5c:fd:b8:86:d4:3b:d4:37:43:9b:47:d9:4a:69:d3:1d:
         0f:3c:19:d3:a9:a4:a8:25:36:31:59:97:4d:45:04:26:0c:e5:
         c1:4f:c7:d6:a9:69:e7:0d:7b:0e:de:a6:2f:97:2c:08:7e:f7:
         e3:58:9e:ef:71:be:69:1f:98:0b:0c:99:95:1d:38:1c:05:80:
         05:be:a8:ed:58:cd:cd:98:62:7d:05:01:46:c3:e1:8b:8e:fd:
         24:16:f0:85:61:a9:9c:73:94:94:ef:57:af:93:8a:df:25:f1:
         0a:3d:67:ae:53:fb:29:6c:a7:f9:8d:0e:df:31:80:9a:36:f4:
         2b:12:44:75:47:0d:90:8f:9f:d8:65:9f:1a:76:e9:bd:67:8d:
         62:65:36:6c:2e:18:93:7c:0d:65:b5:47:5c:61:af:5c:de:7a:
         bb:e0:7f:01:5e:ba:05:99:89:67:13:37:84:de:6f:90:35:ed:
         6c:e5:e1:4d:cb:18:f0:07:a2:28:df:4f:b0:40:71:13:d4:9a:
         60:de:8e:41:29:2c:26:9d:0f:06:44:9e:31:9b:05:2a:37:44:
         5d:fb:2b:b7:95:ef:da:81:15:78:00:c1:f8:e8:de:1a:f7:e2:
         5b:8c:ce:e1:9f:d8:ec:38:4a:77:e4:34:bb:2f:fc:04:b9:d3:
         91:c1:5f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:23:39 2026 by rpki-client