Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a3a2f33322d313238203d3e20323633333834.roa
File:                     323830343a313535343a3a2f33322d313238203d3e20323633333834.roa (raw, json)
Hash identifier:          VywYJZ1maHunCAVnGLoV+SxsoqyzByUXCvgXQR+CVYA=
Subject key identifier:   CE:F6:4B:49:2F:67:C7:E6:87:FF:27:D6:A3:37:2D:AB:08:35:16:37
Certificate issuer:       /CN=6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA
Certificate serial:       125A4284BFC57924FCD7A825309C5D998FA7A09C
Authority key identifier: 61:53:A5:2B:8D:FD:2C:E8:1D:24:8A:76:94:5B:3A:E5:AC:2A:8A:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a3a2f33322d313238203d3e20323633333834.roa
Signing time:             Thu 02 Apr 2026 15:56:18 +0000
ROA not before:           Thu 02 Apr 2026 15:51:18 +0000
ROA not after:            Thu 01 Apr 2027 15:56:18 +0000
asID:                     263384
IP address blocks:        2804:1554::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.crl
                          rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 23:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5a:42:84:bf:c5:79:24:fc:d7:a8:25:30:9c:5d:99:8f:a7:a0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA
        Validity
            Not Before: Apr  2 15:51:18 2026 GMT
            Not After : Apr  1 15:56:18 2027 GMT
        Subject: CN=CEF64B492F67C7E687FF27D6A3372DAB08351637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:04:48:0e:51:20:ad:1d:96:b4:ea:98:79:
                    ec:80:34:44:c3:3d:76:38:74:61:84:83:25:2a:70:
                    04:be:6d:f4:55:b6:37:de:25:e8:29:7a:6c:f5:f7:
                    38:e1:da:53:f0:d0:51:9c:e8:92:35:68:ec:a1:89:
                    ef:0c:ec:2b:5d:07:a8:c3:a9:2a:36:bf:1d:84:da:
                    b8:9b:f5:04:b9:93:3f:31:c4:61:d3:40:5a:21:3f:
                    d3:20:45:09:69:f3:21:db:cb:78:66:80:0b:a5:fb:
                    ee:b6:d2:a8:02:60:3d:07:c7:92:92:7e:6b:54:fd:
                    6a:04:f0:84:59:ec:b7:45:b3:96:b5:e7:0f:1a:60:
                    14:51:03:0e:01:29:c6:f7:f8:1a:c4:91:30:0e:9b:
                    e1:ed:67:f4:78:fc:41:e6:da:02:23:6f:8e:00:68:
                    a6:44:a4:53:20:f4:ff:ef:9c:db:2c:cc:53:8d:9a:
                    5c:5b:42:d8:ec:86:cb:d0:ba:ce:87:b5:99:8e:65:
                    1a:51:1f:ac:46:d7:ae:b2:4e:5e:47:74:12:b5:97:
                    fd:d2:00:5e:fa:12:92:2f:dc:1a:1c:03:e8:dc:15:
                    ab:4b:b9:c7:db:8a:99:ce:39:51:c0:1f:d9:79:7f:
                    9e:77:f0:c2:ab:a4:31:c9:ac:c8:86:95:29:6b:00:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:4B:49:2F:67:C7:E6:87:FF:27:D6:A3:37:2D:AB:08:35:16:37
            X509v3 Authority Key Identifier:
                keyid:61:53:A5:2B:8D:FD:2C:E8:1D:24:8A:76:94:5B:3A:E5:AC:2A:8A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a3a2f33322d313238203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1554::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:53:0f:32:1d:74:ae:89:aa:19:48:b1:74:85:8c:ab:21:68:
         54:c8:3f:86:84:43:a9:ac:68:05:7c:a0:c3:67:33:4f:52:c9:
         a1:50:e5:79:58:3d:37:69:6d:64:1a:e9:78:d9:07:8b:03:95:
         ee:e7:32:f0:3b:ee:6a:a3:33:3e:fd:98:4c:cc:85:a4:ba:00:
         e9:c5:e0:bd:43:d2:4d:5b:fa:b8:b3:5c:22:4a:66:c2:02:a6:
         41:71:36:c6:db:e9:7e:04:c8:63:65:f1:33:d4:37:8b:e4:70:
         ff:ad:e1:bf:f0:c7:2e:78:fd:5b:b5:27:34:cf:56:f6:b3:f3:
         65:41:e3:e7:d1:f1:47:7b:5a:37:05:5b:8d:31:91:15:df:8b:
         b8:4a:40:61:ed:2d:ab:96:25:4a:81:a2:f1:d6:c2:ec:6c:00:
         10:ac:b5:02:09:c3:d4:bc:62:57:54:17:03:ba:4c:77:63:68:
         89:07:f3:1e:9f:cf:ce:99:90:71:43:32:05:73:0a:9d:3c:0c:
         83:69:45:25:47:1e:7d:b7:82:33:20:85:d8:84:43:96:fa:cb:
         39:a2:0e:df:ca:60:0e:23:4c:e3:59:36:9f:59:33:ac:c5:d2:
         1c:eb:d5:7e:a8:1f:d0:fa:f1:1a:ff:1d:05:f1:5a:74:97:11:
         6e:e0:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:26:28 2026 by rpki-client