Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a323030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a323030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          8bEkcSzl12tGyl7eE5cDL+m1hvRXLQhp76V5hkUM+LY=
Subject key identifier:   02:51:7D:51:D0:56:69:CC:CE:77:A1:D2:2A:8E:7B:FC:74:2B:42:AB
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       75508B92442A01BBF9238A2873A10BEB0EFF33BE
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a323030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:21 +0000
ROA not before:           Fri 03 Apr 2026 23:57:21 +0000
ROA not after:            Sat 03 Apr 2027 00:02:21 +0000
asID:                     270764
IP address blocks:        2804:7110:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:50:8b:92:44:2a:01:bb:f9:23:8a:28:73:a1:0b:eb:0e:ff:33:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:21 2026 GMT
            Not After : Apr  3 00:02:21 2027 GMT
        Subject: CN=02517D51D05669CCCE77A1D22A8E7BFC742B42AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:df:77:70:af:80:15:51:df:e2:d8:33:93:
                    73:ff:75:ba:06:01:29:7d:ea:e8:b8:6b:b7:a1:74:
                    a7:6c:36:8c:3b:e5:61:b8:38:3b:6e:f7:d5:f0:69:
                    ea:58:70:92:fe:2c:74:ef:8c:f6:b0:9b:d7:bf:14:
                    d1:2c:b0:10:ac:0b:b9:5c:2b:01:7b:d5:b6:8d:15:
                    82:2f:12:55:32:9d:f0:50:0a:f4:d2:15:08:db:35:
                    8d:d9:c3:ca:85:74:6d:de:7b:5a:13:28:a1:03:a7:
                    d0:13:91:b4:e9:14:06:20:85:66:bb:5f:46:7e:3c:
                    a0:76:2f:d7:0b:78:20:f2:3a:fa:da:29:d2:b1:2d:
                    e8:b1:3e:28:e5:82:5e:a6:64:98:49:79:88:8c:61:
                    92:83:5d:ba:4c:da:44:a9:7f:0c:e7:00:7d:7c:5f:
                    0d:ba:57:26:41:93:4c:a4:b6:6b:f7:4d:2c:5d:2d:
                    5b:9d:f3:80:46:69:a2:83:1a:3e:86:b9:9b:3f:66:
                    a9:85:6a:65:72:84:0a:78:a9:e7:7a:7b:b0:b3:90:
                    ad:34:76:8e:26:7e:ad:dd:4f:cc:75:aa:66:b3:7e:
                    45:d6:43:e7:bb:06:2a:9c:a4:e0:85:a6:e3:a2:c3:
                    50:60:d5:ab:74:5e:30:a3:e8:46:e9:a0:5d:95:50:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:7D:51:D0:56:69:CC:CE:77:A1:D2:2A:8E:7B:FC:74:2B:42:AB
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a323030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:e0:ac:0f:8f:9f:0a:df:df:00:ae:8d:f6:aa:21:49:6d:c9:
         12:fb:81:33:c9:19:33:82:72:3c:9c:ed:84:f3:82:f8:3d:af:
         fc:5d:a1:11:d3:69:cd:62:7d:4a:8c:d1:65:39:34:7c:7d:6e:
         3b:d3:e0:f4:a9:77:76:9d:c5:ff:52:af:67:5e:f7:c1:40:0c:
         a5:ea:80:58:71:94:fc:2e:bf:44:a4:96:52:50:d0:50:f1:99:
         15:77:fe:5a:c5:7f:d8:72:70:93:41:04:01:24:62:6d:b7:b8:
         fa:ec:bb:e4:5f:33:18:b7:93:a2:e2:bf:93:e0:a3:52:c4:97:
         68:25:9e:94:86:d7:ca:98:1d:c6:90:b0:45:c3:34:94:08:6b:
         f7:64:5b:5b:00:11:6b:f8:b1:ac:4d:43:17:59:84:1f:88:2e:
         61:cd:2a:35:fb:ef:9e:0d:53:fc:c1:02:87:c2:0f:85:b2:5f:
         08:75:cc:9f:b2:54:e2:72:3b:91:f1:92:25:14:dd:4e:b2:e8:
         68:e2:32:fd:67:b7:b4:5e:fa:39:23:68:6a:81:0e:83:73:0b:
         37:49:6f:08:42:32:28:61:20:e3:9a:02:ab:ae:13:08:b9:65:
         f7:d6:c7:14:26:d6:94:7f:54:b7:f7:f5:f8:5d:79:ad:37:21:
         f3:fc:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:36:37 2026 by rpki-client