Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d313238203d3e20323638333439.roa
File:                     323830343a346663383a3a2f33322d313238203d3e20323638333439.roa (raw, json)
Hash identifier:          2haSMO2H9hY2AEvQRAYMIaZC0TqIA/lvoXjh5niYzZU=
Subject key identifier:   D4:51:B1:DA:8E:06:B3:1E:BC:EC:6C:7A:63:CC:29:1E:91:AD:4C:88
Certificate issuer:       /CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Certificate serial:       5A599889C301728CAC2AA93CA1BC30BB70033C24
Authority key identifier: F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d313238203d3e20323638333439.roa
Signing time:             Fri 27 Mar 2026 20:08:16 +0000
ROA not before:           Fri 27 Mar 2026 20:03:16 +0000
ROA not after:            Fri 26 Mar 2027 20:08:16 +0000
asID:                     268349
IP address blocks:        2804:4fc8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl
                          rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:59:98:89:c3:01:72:8c:ac:2a:a9:3c:a1:bc:30:bb:70:03:3c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
        Validity
            Not Before: Mar 27 20:03:16 2026 GMT
            Not After : Mar 26 20:08:16 2027 GMT
        Subject: CN=D451B1DA8E06B31EBCEC6C7A63CC291E91AD4C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:29:60:c0:86:65:69:53:31:03:be:8d:b3:
                    b7:08:20:86:0f:30:53:db:1d:c5:e1:4e:b4:02:97:
                    4f:1e:40:87:ae:54:c7:1f:27:36:d0:b8:7e:bf:20:
                    46:a5:3b:1b:ec:52:8b:a4:84:6b:68:25:46:16:55:
                    9a:bd:bf:ab:b3:7d:71:52:b6:e0:4a:23:85:10:c1:
                    b7:96:99:11:19:e1:5d:a4:8f:7c:26:72:56:84:a9:
                    67:3c:05:d1:e1:a3:cc:09:6a:21:d3:ee:aa:f1:0a:
                    1e:26:e0:b3:6f:5a:1a:44:72:20:e0:2c:b5:e5:2e:
                    3b:2d:e2:f4:f1:c9:9d:6b:d3:f0:da:b1:48:e2:b7:
                    a4:52:59:c9:c5:34:38:66:35:49:93:2f:3b:aa:3b:
                    b6:13:a2:77:89:b2:eb:5d:44:53:92:3a:09:bd:12:
                    5c:c6:2a:9c:e6:40:3f:a3:20:43:4e:f0:2d:10:15:
                    f7:18:63:87:14:0d:94:c8:a8:73:7d:7b:56:90:97:
                    94:62:f4:95:ea:43:e8:a1:ae:a1:ae:23:e3:a6:58:
                    39:77:49:7a:31:ec:c5:8d:c1:3a:95:69:11:57:12:
                    1a:a5:5c:d3:0e:77:37:f9:cc:7a:17:98:1a:b3:ed:
                    3a:81:3d:be:e0:68:2c:cd:8d:73:32:4d:08:07:73:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:51:B1:DA:8E:06:B3:1E:BC:EC:6C:7A:63:CC:29:1E:91:AD:4C:88
            X509v3 Authority Key Identifier:
                keyid:F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a3a2f33322d313238203d3e20323638333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:1f:aa:04:f6:e5:97:0f:d7:5a:27:2a:4e:f2:9a:5b:83:0d:
         b6:43:3e:51:4c:6e:5a:1e:40:bf:a5:24:6b:1c:9c:1c:71:0a:
         9b:d2:e6:cf:93:f7:2d:fe:f2:24:01:98:75:e4:27:bc:36:53:
         dd:bf:02:b8:7b:f9:87:f4:16:17:72:66:70:b9:22:39:73:75:
         ea:90:ca:0a:53:51:83:c7:2f:c4:64:35:5f:d6:3f:aa:16:11:
         97:e8:62:3c:b8:96:7a:41:37:1b:d4:94:f6:e3:f2:36:4b:10:
         b1:dc:c5:b3:48:69:60:1c:57:57:58:3d:26:3c:61:53:ef:dd:
         d9:cd:7b:5e:b2:fb:5c:e2:a4:cf:46:7c:cf:72:fe:b4:08:e7:
         58:22:e6:d9:66:c2:1d:13:a8:f0:99:0b:df:4c:6c:88:cf:ca:
         49:21:fe:70:9a:9f:4e:30:f2:de:b1:76:09:37:37:ae:55:7a:
         17:b2:73:81:bb:54:a5:60:d2:2d:bb:e2:0c:03:8c:54:05:95:
         3c:e0:41:ef:f0:78:d1:37:9b:81:d2:e8:36:2d:96:f8:7a:af:
         54:37:2f:bd:b1:31:12:ba:c4:06:d9:ea:38:5c:b4:39:f3:2e:
         62:77:a2:04:f6:b9:4f:c5:a6:d2:07:69:c4:6b:25:d8:d4:bf:
         23:3f:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:06:59 2026 by rpki-client