Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33332d3333203d3e20323637333330.roa
File:                     323830343a346263633a3a2f33332d3333203d3e20323637333330.roa (raw, json)
Hash identifier:          kZBBncNea2zzeAkH0soldBLUH3Ch/ywwYcAkGoDLgKs=
Subject key identifier:   B5:44:22:78:4F:FB:A8:89:E1:CD:43:12:F9:D1:2C:76:21:BF:17:9F
Certificate issuer:       /CN=0A467B137635F43F91188ECBB9D30961A5B090C1
Certificate serial:       7C1755205BABC629601AFA0EE73CD5D41EE87692
Authority key identifier: 0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33332d3333203d3e20323637333330.roa
Signing time:             Thu 02 Apr 2026 13:04:04 +0000
ROA not before:           Thu 02 Apr 2026 12:59:04 +0000
ROA not after:            Thu 01 Apr 2027 13:04:04 +0000
asID:                     267330
IP address blocks:        2804:4bcc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl
                          rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:17:55:20:5b:ab:c6:29:60:1a:fa:0e:e7:3c:d5:d4:1e:e8:76:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A467B137635F43F91188ECBB9D30961A5B090C1
        Validity
            Not Before: Apr  2 12:59:04 2026 GMT
            Not After : Apr  1 13:04:04 2027 GMT
        Subject: CN=B54422784FFBA889E1CD4312F9D12C7621BF179F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:51:a5:57:26:de:21:84:e0:73:3f:86:56:
                    dc:d1:93:19:52:b6:4d:a2:3a:91:80:34:03:f1:ec:
                    fa:6e:a3:f5:9d:1a:07:cc:d5:f1:5f:78:bf:88:a2:
                    92:85:2d:b9:b7:97:72:f4:79:83:35:80:33:f2:f9:
                    1e:ec:8d:b0:4d:50:39:ae:00:15:cf:c9:77:b8:69:
                    0c:d8:d2:25:14:dd:4a:20:9e:66:48:b3:f5:6c:86:
                    2e:0e:34:b0:b4:de:d2:4d:e2:2c:bf:f6:cc:a7:56:
                    a3:1c:f1:e8:11:c2:f0:b0:e6:bb:f6:99:e6:f0:30:
                    75:f3:d4:4f:b5:21:21:79:84:37:6d:f4:d9:73:09:
                    95:14:28:c8:1c:1e:63:56:bd:94:9b:14:e3:32:42:
                    2a:fd:36:8d:8a:ea:1e:82:71:99:39:43:54:61:5a:
                    7d:f2:5f:51:c0:7b:3c:41:a0:22:36:22:df:ea:ea:
                    2b:94:b0:0a:99:1e:a2:5c:13:1a:6d:1a:4f:5d:d6:
                    1d:65:e7:78:c6:27:45:02:f4:df:05:46:a1:a1:b9:
                    6e:c3:96:6e:dc:b9:ac:30:8c:ae:41:a2:bc:f0:20:
                    a5:8e:96:30:6b:c5:be:69:7d:ee:8f:da:07:68:d9:
                    01:47:7d:11:b4:88:57:db:23:79:8c:44:f6:48:50:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:22:78:4F:FB:A8:89:E1:CD:43:12:F9:D1:2C:76:21:BF:17:9F
            X509v3 Authority Key Identifier:
                keyid:0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33332d3333203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:75:98:84:2c:21:92:b5:c5:7d:6f:f9:32:ef:0c:b4:19:23:
         e9:93:bb:d5:12:92:8d:fd:19:03:41:4e:93:a8:b6:99:47:fc:
         16:b4:08:a6:40:86:55:de:e5:dc:56:5d:3a:30:7d:b4:89:96:
         8b:d8:86:82:7d:fc:1d:94:0d:db:99:b2:d5:97:bb:5c:12:b6:
         cf:10:42:42:2f:fc:73:e4:4c:7d:2b:ab:d6:65:1f:81:b4:50:
         c6:50:d9:66:85:c9:a0:60:21:e7:7f:0a:68:d3:5a:db:17:36:
         9d:14:18:a0:0c:c4:c5:7e:26:86:23:68:ab:71:4a:7d:c2:20:
         fc:44:3b:f0:ca:6e:1e:eb:21:8f:5e:4a:ce:bf:c3:e2:92:16:
         bc:a0:ce:15:be:4e:8e:71:b6:a3:04:78:72:42:45:af:24:8f:
         10:17:78:d3:52:3c:cb:dc:35:b3:a4:ce:b7:de:c2:21:b0:d7:
         ba:6d:7c:73:1b:46:12:19:b4:13:09:f5:5f:5e:db:cf:ff:49:
         af:c6:b6:b9:1f:9c:de:fc:c0:0b:77:47:cb:52:0d:86:e8:dd:
         15:8e:d0:8c:5e:47:b5:bb:e9:49:16:c9:25:99:63:0a:45:1e:
         0d:fb:b4:f9:bc:95:82:af:ee:8b:8b:ee:ad:b8:a3:c1:c4:2b:
         70:2c:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:37:57 2026 by rpki-client