Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383130303a3a2f34302d3430203d3e20323730333530.roa
File:                     323830343a366161343a383130303a3a2f34302d3430203d3e20323730333530.roa (raw, json)
Hash identifier:          WXQEAwXRoeM1irvCxSXG8ecAFScleksmh/zJEJXWthQ=
Subject key identifier:   A9:5B:F9:D0:84:1D:30:40:E2:1A:B9:46:DA:EE:1C:76:FA:A1:1F:89
Certificate issuer:       /CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
Certificate serial:       0B903FD78B27DB385D5CCD9FAF93D1460C9A512C
Authority key identifier: 18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383130303a3a2f34302d3430203d3e20323730333530.roa
Signing time:             Fri 27 Mar 2026 21:11:14 +0000
ROA not before:           Fri 27 Mar 2026 21:06:14 +0000
ROA not after:            Fri 26 Mar 2027 21:11:14 +0000
asID:                     270350
IP address blocks:        2804:6aa4:8100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl
                          rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:90:3f:d7:8b:27:db:38:5d:5c:cd:9f:af:93:d1:46:0c:9a:51:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
        Validity
            Not Before: Mar 27 21:06:14 2026 GMT
            Not After : Mar 26 21:11:14 2027 GMT
        Subject: CN=A95BF9D0841D3040E21AB946DAEE1C76FAA11F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:ea:a3:45:67:d3:75:b6:95:a2:78:d5:35:
                    39:61:ac:21:bf:2b:78:3a:b5:7a:84:b8:5c:ae:b1:
                    69:58:fb:8b:6b:69:25:10:b7:04:8f:d5:1d:e3:7c:
                    75:5d:e8:60:86:27:3b:31:ec:c5:c8:10:32:2f:02:
                    ca:85:c6:c5:44:84:c1:f9:bb:77:3a:ec:e7:b4:e7:
                    59:3a:31:24:6f:d7:d8:c2:08:89:39:90:96:f8:b4:
                    c3:8d:87:87:14:7c:36:a4:d2:fa:36:90:b0:ce:11:
                    f0:da:aa:51:d3:ef:7e:97:d4:ef:a8:dc:08:c7:ec:
                    9d:be:73:ff:82:30:ca:81:39:2b:55:ee:8f:77:10:
                    76:95:64:a7:4b:b7:db:76:e8:9c:38:09:f8:96:27:
                    fd:44:b5:40:70:2c:33:29:b4:e0:a6:2d:94:c1:26:
                    08:1d:03:57:01:62:72:88:26:90:e1:9a:bc:6a:07:
                    9d:6d:61:e5:71:07:02:c6:24:6f:43:e5:29:68:d7:
                    0c:44:c5:21:aa:1d:a4:fb:58:15:d4:af:a6:05:60:
                    9b:34:0a:1f:2a:01:72:ab:d9:28:ad:96:31:67:7e:
                    03:de:85:e1:58:f7:96:a3:89:73:d2:c0:02:1a:33:
                    cf:70:3e:6c:05:9d:aa:5c:9a:7f:c4:a7:07:08:a0:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5B:F9:D0:84:1D:30:40:E2:1A:B9:46:DA:EE:1C:76:FA:A1:1F:89
            X509v3 Authority Key Identifier:
                keyid:18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383130303a3a2f34302d3430203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6aa4:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:0f:f5:8b:8f:b0:f8:b1:01:e2:24:84:29:d2:ef:16:21:
         ca:c9:6b:3f:70:10:53:68:21:a3:c5:3b:6b:40:99:9c:1c:b7:
         62:97:75:af:d8:f5:d7:c4:c7:30:ce:eb:cb:91:bf:56:25:45:
         15:f7:a4:67:a7:04:76:89:24:04:01:55:bc:33:ae:32:99:79:
         5b:96:9e:64:c7:63:c5:c0:d0:49:54:48:37:19:14:75:53:06:
         8d:62:b3:b6:00:88:e5:67:7c:67:63:a2:ff:a3:56:53:95:98:
         d6:1e:a5:2b:99:a2:ec:15:a6:a9:a9:1c:eb:aa:03:d0:56:32:
         9e:66:af:ac:85:67:63:9b:69:1b:9e:18:3e:10:a6:ca:5c:a5:
         0c:8a:95:bf:ae:4b:c9:5e:65:ff:66:48:6d:79:38:92:fe:aa:
         50:e7:f4:d9:f0:f7:1e:fb:04:43:cc:f2:9e:de:6d:da:34:e0:
         91:e6:32:13:75:8c:3d:2e:6a:de:68:bd:2e:32:28:4b:73:37:
         41:8d:67:91:a1:3f:ca:18:cf:17:23:87:09:42:a1:e6:cf:31:
         60:fd:68:3f:0a:6a:9f:55:c7:20:3b:4d:ca:d5:37:f5:3e:44:
         ef:6c:f4:86:37:c2:c9:35:46:b1:47:73:03:a0:b9:a6:e5:69:
         b3:0c:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:32:45 2026 by rpki-client