Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/323830343a343135383a3a2f33322d3335203d3e20323637343237.roa
File:                     323830343a343135383a3a2f33322d3335203d3e20323637343237.roa (raw, json)
Hash identifier:          b42q+WIxC/DXcl7Fp2qxxqaY51JPTYB8h4q/rXefnX8=
Subject key identifier:   DF:9C:60:60:82:2B:0C:15:5A:2B:69:B0:30:CB:48:F4:D4:31:B4:7E
Certificate issuer:       /CN=488C735907C82A33DD56871CC305A21B88A9B353
Certificate serial:       6DB5B32FE734A7F4BD162F969D2D49A550765EFE
Authority key identifier: 48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/323830343a343135383a3a2f33322d3335203d3e20323637343237.roa
Signing time:             Wed 01 Apr 2026 15:18:50 +0000
ROA not before:           Wed 01 Apr 2026 15:13:50 +0000
ROA not after:            Wed 31 Mar 2027 15:18:50 +0000
asID:                     267427
IP address blocks:        2804:4158::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl
                          rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b5:b3:2f:e7:34:a7:f4:bd:16:2f:96:9d:2d:49:a5:50:76:5e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488C735907C82A33DD56871CC305A21B88A9B353
        Validity
            Not Before: Apr  1 15:13:50 2026 GMT
            Not After : Mar 31 15:18:50 2027 GMT
        Subject: CN=DF9C6060822B0C155A2B69B030CB48F4D431B47E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:93:52:4d:53:9b:fd:d2:76:9c:4a:18:7f:
                    72:99:e3:0d:96:d0:f5:59:35:4b:73:8c:a0:f2:38:
                    b8:2b:67:62:90:72:83:15:e1:03:7b:50:c2:15:07:
                    41:95:d8:7a:ce:cc:7d:a9:4f:62:47:db:05:82:d3:
                    d4:96:c7:c3:12:d5:78:f2:44:79:46:1b:2c:29:07:
                    65:26:a6:e1:3f:9b:b4:81:6a:79:62:e5:d2:6f:3b:
                    e8:70:54:51:83:d7:37:5b:f5:a7:d8:08:d7:94:c2:
                    49:1a:9d:b4:e8:50:eb:32:ef:18:05:6a:11:8f:b5:
                    80:9d:75:78:af:3e:26:30:63:3b:34:99:0c:28:4d:
                    fd:97:f4:5c:ff:b9:07:90:0a:12:23:0f:56:5b:93:
                    0f:9e:56:33:65:cd:1d:b6:17:3f:3c:8e:c0:4b:44:
                    05:f1:7e:1d:7c:30:27:a0:be:2e:33:36:95:4d:4e:
                    eb:11:e2:bf:f1:d6:1f:b9:2c:b6:ef:41:81:10:5a:
                    76:98:e2:9f:94:c7:0a:33:3c:42:d9:2f:b0:4c:66:
                    d9:ff:30:fb:f7:7a:36:b2:be:ba:0d:39:93:d2:c8:
                    9b:1c:54:67:c5:33:5a:df:80:44:5b:53:57:e0:b0:
                    7c:ca:db:f1:28:47:cc:cd:f0:31:7d:0d:69:e1:a8:
                    b5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9C:60:60:82:2B:0C:15:5A:2B:69:B0:30:CB:48:F4:D4:31:B4:7E
            X509v3 Authority Key Identifier:
                keyid:48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/323830343a343135383a3a2f33322d3335203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4158::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:47:40:6e:89:38:44:31:0b:96:5c:75:71:57:25:ae:3b:
         f0:f0:ab:ca:54:d4:05:d0:86:23:6c:70:4a:3f:78:f1:87:6e:
         ef:06:fd:34:b8:c0:16:85:7c:7c:25:b6:33:36:cf:20:fc:7b:
         5a:de:ac:74:cf:3f:9e:62:bf:73:08:a4:7c:a1:ef:d1:d5:37:
         fd:2d:94:34:98:f1:ff:64:a3:27:17:ec:01:f7:25:c6:18:7d:
         6f:c9:8c:5e:82:8e:13:1d:c7:a0:b0:b6:ed:07:3b:c5:45:92:
         f5:45:dc:8b:7d:c9:2f:1d:51:5e:e4:0f:47:e9:81:43:83:fa:
         29:9d:45:91:2c:f7:5c:d4:fc:d4:c1:ed:dd:f5:c9:8f:a0:7f:
         e9:34:e7:4c:57:ad:a6:6e:7a:f9:20:25:e3:e5:97:c3:6b:bf:
         8e:b8:1f:0b:ab:dc:dd:35:5d:d6:74:45:c7:db:58:39:c6:48:
         bc:64:5a:c9:cf:02:87:53:db:5d:97:da:9f:13:f0:ef:95:49:
         32:52:c0:ea:62:b4:c4:6e:c8:ee:db:4f:f3:13:ff:77:42:a6:
         19:17:05:87:45:2d:0f:c2:13:f7:00:af:14:bd:90:46:15:2d:
         19:ae:35:16:01:9f:06:64:b4:ad:9a:ec:f6:85:c9:63:bd:c4:
         c3:58:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:41:58 2026 by rpki-client