Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          jfYpBujcF9BZTeO1XIZOkZ7yJ+tTjTNSqLYCao2XPI0=
Subject key identifier:   5D:D2:F6:A5:F8:48:8A:45:F8:7D:17:58:F8:59:97:B2:7F:6E:9F:52
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       0632AA66B97F28CE43CEB6DA7C0BFC841AF0BA63
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Thu 02 Apr 2026 20:54:33 +0000
ROA not before:           Thu 02 Apr 2026 20:49:33 +0000
ROA not after:            Thu 01 Apr 2027 20:54:33 +0000
asID:                     52916
IP address blocks:        2804:2b10:200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:32:aa:66:b9:7f:28:ce:43:ce:b6:da:7c:0b:fc:84:1a:f0:ba:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: Apr  2 20:49:33 2026 GMT
            Not After : Apr  1 20:54:33 2027 GMT
        Subject: CN=5DD2F6A5F8488A45F87D1758F85997B27F6E9F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:d1:82:a1:da:08:37:ee:fa:82:a1:7b:e7:
                    a0:bb:57:53:88:78:0b:88:b2:68:a1:95:84:5c:20:
                    fa:b1:b1:19:b3:1e:84:e0:a6:65:98:77:ae:0b:10:
                    3b:f3:66:67:b9:e5:f5:7c:35:b9:a1:36:79:f4:97:
                    c5:14:35:3c:b8:19:7b:5c:8b:39:4d:6b:d5:7c:41:
                    62:02:c7:25:50:d1:7f:c6:b7:d9:02:72:dd:fd:c3:
                    f4:36:bc:0f:2a:53:d6:d4:ab:68:1b:9a:00:41:0c:
                    86:52:b5:9a:1c:00:fc:f3:6c:6b:27:87:aa:62:00:
                    92:5e:ad:ae:22:71:8e:9f:4a:ef:b9:54:e0:95:3c:
                    7a:fc:a0:33:49:ec:ed:cd:3b:52:51:d2:e3:16:63:
                    c5:4b:d8:b1:af:79:6f:3d:10:15:25:ca:5b:53:d4:
                    9a:6a:03:75:13:22:4a:ff:48:a9:14:1d:90:39:e2:
                    c6:3c:7c:b5:71:fd:9a:19:ea:e0:66:0b:50:c2:e8:
                    94:39:14:cb:7d:b3:4c:bc:f6:fa:11:78:03:40:26:
                    bb:64:b7:82:76:eb:6a:26:f5:11:02:5e:cf:0a:f2:
                    15:27:88:cd:6d:9c:b2:a3:14:e5:67:36:62:ce:5b:
                    f5:03:b4:cc:73:b0:00:a8:5e:d5:d0:26:47:d6:e2:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D2:F6:A5:F8:48:8A:45:F8:7D:17:58:F8:59:97:B2:7F:6E:9F:52
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         1c:d1:9c:10:a2:c2:82:cc:a2:37:e7:6c:af:27:ef:68:ef:c1:
         8b:2a:ff:aa:4e:44:81:6f:0a:cb:7f:9e:73:8c:78:6f:c6:d1:
         53:76:93:6d:70:9a:22:62:7b:86:93:89:c0:71:3d:fa:eb:92:
         31:90:69:b7:ce:6f:7a:bb:ca:e7:a9:86:60:fc:07:56:bb:63:
         a0:03:b1:d3:f7:ee:03:49:bd:2a:e1:16:b0:a8:9a:49:8a:e0:
         7c:a3:0d:d0:c2:d6:2e:3b:72:f9:f6:93:cc:71:af:c8:57:25:
         ce:0c:e6:aa:ea:47:be:0e:fb:7d:03:3d:d7:8f:7b:cc:b2:80:
         84:32:49:cc:05:76:1f:bf:52:62:20:28:d0:eb:a5:44:03:9c:
         8b:6c:1a:7a:31:f9:92:41:29:bc:fa:a3:a0:4e:5e:9d:f5:4a:
         22:49:3e:8e:66:ab:6d:6d:68:b2:f9:3b:7d:e0:78:20:d0:bf:
         b2:d4:d4:1a:11:65:6c:4c:d4:11:c2:7a:a4:4a:42:be:49:b1:
         bc:71:18:1a:2b:d5:be:7d:15:90:00:27:18:c8:e0:cc:76:5b:
         00:f8:ba:be:6c:eb:4b:2b:57:62:8a:9c:df:b5:be:30:45:80:
         f8:0b:b3:15:20:e0:93:34:99:b4:b7:65:e0:97:35:99:e2:b3:
         ae:4d:73:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:42:13 2026 by rpki-client