Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/323830343a6632343a3a2f33322d313238203d3e20323633353637.roa
File:                     323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (raw, json)
Hash identifier:          ld7VnCWF8HxskSMq4wE0vXgb+n09p5phX0KiPNsWlZk=
Subject key identifier:   C1:7D:B8:71:EC:AB:FB:50:0F:DA:0C:04:FC:6C:7C:C5:DE:7A:C8:0E
Certificate issuer:       /CN=AED36AA82B57139E4B06D06E0FFC7D2C151F332C
Certificate serial:       1145C74DA2D04788F16AA99EC7C7A2C603FD3B5C
Authority key identifier: AE:D3:6A:A8:2B:57:13:9E:4B:06:D0:6E:0F:FC:7D:2C:15:1F:33:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AED36AA82B57139E4B06D06E0FFC7D2C151F332C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/323830343a6632343a3a2f33322d313238203d3e20323633353637.roa
Signing time:             Mon 30 Mar 2026 13:27:52 +0000
ROA not before:           Mon 30 Mar 2026 13:22:52 +0000
ROA not after:            Mon 29 Mar 2027 13:27:52 +0000
asID:                     263567
IP address blocks:        2804:f24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/AED36AA82B57139E4B06D06E0FFC7D2C151F332C.crl
                          rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/AED36AA82B57139E4B06D06E0FFC7D2C151F332C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AED36AA82B57139E4B06D06E0FFC7D2C151F332C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:45:c7:4d:a2:d0:47:88:f1:6a:a9:9e:c7:c7:a2:c6:03:fd:3b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AED36AA82B57139E4B06D06E0FFC7D2C151F332C
        Validity
            Not Before: Mar 30 13:22:52 2026 GMT
            Not After : Mar 29 13:27:52 2027 GMT
        Subject: CN=C17DB871ECABFB500FDA0C04FC6C7CC5DE7AC80E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:87:89:fd:af:6b:ad:3f:4f:e3:f9:07:6f:
                    06:7e:13:4f:7c:22:43:77:1d:e6:22:01:e7:40:49:
                    b2:5c:e4:e7:8b:5e:3b:7f:cf:87:ef:c1:bf:ec:b8:
                    6a:70:07:24:12:90:4d:fa:0c:d9:70:8a:81:59:18:
                    7a:da:17:b0:64:eb:53:7c:cf:8c:bd:d6:05:06:bd:
                    c4:ae:51:22:23:de:42:2c:60:87:65:cd:fd:91:e0:
                    0b:04:9b:80:18:03:7f:c3:d1:40:4c:d4:48:5d:74:
                    cd:db:8a:3c:7a:5d:db:ea:71:92:60:48:1f:b3:53:
                    50:de:9d:d3:e6:54:d4:20:36:74:4c:fe:1c:90:07:
                    71:58:04:be:6a:df:be:41:17:db:cb:80:89:92:7c:
                    b1:7f:ea:d7:b0:e3:68:66:19:54:d6:0f:82:00:27:
                    97:e8:92:0f:7d:37:7d:a6:c2:69:f0:1c:8b:e3:d0:
                    2e:14:f5:b1:1e:a0:5f:70:5d:5f:19:55:6c:dd:c7:
                    ce:4e:2e:85:6a:ad:b2:be:77:0d:f7:47:b9:1f:ea:
                    a0:2a:e0:a9:fb:37:dd:56:b7:b7:44:53:9f:c2:02:
                    17:77:39:ec:ee:f2:d4:ef:10:b6:e0:2b:da:94:23:
                    ef:99:8f:d1:2b:f0:99:3d:bc:e4:65:d9:6e:eb:2e:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7D:B8:71:EC:AB:FB:50:0F:DA:0C:04:FC:6C:7C:C5:DE:7A:C8:0E
            X509v3 Authority Key Identifier:
                keyid:AE:D3:6A:A8:2B:57:13:9E:4B:06:D0:6E:0F:FC:7D:2C:15:1F:33:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/AED36AA82B57139E4B06D06E0FFC7D2C151F332C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AED36AA82B57139E4B06D06E0FFC7D2C151F332C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/323830343a6632343a3a2f33322d313238203d3e20323633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:c2:57:43:72:89:f6:8c:41:0e:3e:49:80:fc:f2:9e:06:88:
         6e:36:ec:06:24:c3:dc:19:96:28:e0:29:35:67:f6:e3:98:8b:
         3b:51:f5:8c:c0:8f:64:22:c3:c3:e5:bf:7f:02:b5:22:b1:8b:
         de:cf:fe:3a:76:d9:ac:38:8f:94:bd:36:78:fe:5c:d8:4d:66:
         e2:c6:33:fa:23:48:1e:cc:fb:6c:cd:fb:b8:3a:99:ab:37:7c:
         27:b0:7e:ef:1b:2d:58:6f:14:98:c5:05:61:03:33:b2:66:e3:
         9e:6c:a4:ed:a9:bc:d3:1b:98:72:fe:75:74:ff:29:f4:5d:b6:
         1c:b7:85:93:ae:70:42:61:88:e5:a4:4a:bb:0b:d3:46:81:c5:
         75:27:b0:c6:0a:ee:d5:22:af:9b:df:4b:bb:f3:3d:58:a1:07:
         7a:1a:45:29:60:d5:49:2e:aa:5e:38:ee:1b:9f:d5:05:1f:34:
         12:01:ea:14:d6:8d:49:09:ae:90:bc:0c:70:db:9c:26:73:8b:
         64:ff:6b:13:f7:26:35:d7:2e:28:58:4f:a8:d5:8f:6f:14:b7:
         fa:8a:88:20:57:42:e2:18:6d:fd:5f:69:78:3f:25:c0:3b:6f:
         a5:46:ac:a4:da:42:7f:79:19:01:dc:35:fc:2e:28:42:59:41:
         5c:c8:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:41:25 2026 by rpki-client