Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31373a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31373a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          z56D+EMSCymU/Ockz5hDz1P2rXbkSWUWxRmxHqxfcxw=
Subject key identifier:   11:21:E5:17:F3:93:77:C1:A1:2F:D5:79:3F:CF:6C:2E:EB:84:4E:08
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       4B61E563DDE12FE8E1C4041E583CD3432956E2F3
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31373a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:21 +0000
ROA not before:           Wed 01 Apr 2026 19:23:21 +0000
ROA not after:            Wed 31 Mar 2027 19:28:21 +0000
asID:                     52580
IP address blocks:        2804:cf8:17::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:61:e5:63:dd:e1:2f:e8:e1:c4:04:1e:58:3c:d3:43:29:56:e2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:21 2026 GMT
            Not After : Mar 31 19:28:21 2027 GMT
        Subject: CN=1121E517F39377C1A12FD5793FCF6C2EEB844E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:26:b5:b9:da:ee:27:ab:00:ee:f2:59:af:
                    b2:d8:a8:7e:c7:f1:02:f5:ad:74:5a:bd:b5:8c:ec:
                    1e:fc:23:e9:3e:8b:f8:da:ea:95:7c:34:b2:97:8c:
                    2b:c4:46:79:b1:14:a6:12:96:a7:ca:32:ab:cf:93:
                    5f:77:e8:fb:a0:f3:f8:11:9e:5c:7a:80:fd:e2:60:
                    71:e2:a1:66:fc:ab:61:03:e9:02:93:ec:82:67:c7:
                    d6:25:25:bb:e5:3f:43:88:42:98:41:73:ed:81:d2:
                    d5:85:51:a1:d5:6d:a6:9e:41:f6:a5:bf:93:4c:44:
                    44:dc:95:1a:fc:7b:2f:5d:3a:08:26:3d:a7:f4:74:
                    fa:ab:c4:5b:5c:d4:aa:5f:01:22:5d:04:e3:5b:bf:
                    e7:bb:25:53:5e:b7:28:16:9b:43:47:5a:3c:15:07:
                    23:bc:c1:84:57:2d:2a:b1:3f:15:a4:82:82:06:84:
                    e9:eb:f3:2f:59:e8:c5:dd:3b:73:a4:6c:98:6c:b9:
                    eb:9b:f6:79:d6:e2:34:04:ab:80:7b:16:d0:bd:9c:
                    78:5e:b4:ae:26:61:67:4c:04:c5:cf:dc:1d:09:4e:
                    b2:b6:e9:40:2b:ac:99:26:e2:e3:c4:7d:83:1b:8f:
                    19:67:19:7f:87:f8:89:a5:f9:00:06:df:23:f2:88:
                    95:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:21:E5:17:F3:93:77:C1:A1:2F:D5:79:3F:CF:6C:2E:EB:84:4E:08
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31373a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:52:c3:f7:fb:fc:a9:84:87:0e:c3:ac:05:e6:ed:86:63:
         09:22:32:32:30:ed:ae:8c:f2:5d:3f:8e:6e:df:e1:9f:a0:cb:
         8c:a4:6e:0b:12:54:1e:01:c6:69:36:75:55:5c:8d:e3:e5:b2:
         c5:91:99:7a:c7:2b:d4:22:b0:4f:63:cd:1d:21:dd:be:1b:14:
         07:fc:c8:73:42:6c:b5:da:0e:66:1a:d5:c6:3d:94:a5:7f:2d:
         44:16:05:6d:84:2b:f4:95:c7:e0:9a:9f:dc:bc:e6:0f:0c:a4:
         23:83:e7:e8:92:89:be:70:a0:84:b4:77:7b:2a:c5:90:e2:b3:
         74:f6:eb:32:1d:bd:be:37:14:c8:31:81:34:70:5f:a8:ec:b4:
         f1:f4:7b:ae:e3:fb:0a:d4:e0:c4:47:6b:16:05:75:1b:15:42:
         1c:d0:ae:f8:be:12:a5:6d:0f:df:32:fe:47:65:6d:46:b5:c4:
         a6:b1:bc:da:77:54:0f:f1:9f:f3:eb:14:43:de:bc:d0:e7:9e:
         f9:9e:d8:75:61:dd:66:6b:74:b3:0d:71:cb:e9:7d:54:d2:08:
         e6:e4:c3:40:83:34:e8:52:bd:31:27:f4:a7:aa:c7:6c:1d:ad:
         11:e2:1c:9e:20:98:e3:3a:ef:8d:d6:38:56:f1:f0:d3:1b:41:
         2f:2c:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:02:49 2026 by rpki-client