Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030373a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030373a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          1+3DPAUfd+AZrOXScLPFx29a4jUGnSk7wrYVSC2pL9Q=
Subject key identifier:   0F:6B:66:7E:A0:3A:25:28:50:E7:3E:0E:F8:32:7A:25:E5:FC:48:CD
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       02BF6CDC96FE292E65527D7384569B14BF1BE692
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030373a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:31 +0000
ROA not before:           Wed 01 Apr 2026 19:23:31 +0000
ROA not after:            Wed 31 Mar 2027 19:28:31 +0000
asID:                     52580
IP address blocks:        2804:cf8:c007::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 17:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bf:6c:dc:96:fe:29:2e:65:52:7d:73:84:56:9b:14:bf:1b:e6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:31 2026 GMT
            Not After : Mar 31 19:28:31 2027 GMT
        Subject: CN=0F6B667EA03A252850E73E0EF8327A25E5FC48CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:9c:3d:ef:f3:36:7e:0c:1d:0f:f9:32:09:
                    c4:82:41:3c:14:fd:a8:c6:82:e4:f3:22:8c:7c:7c:
                    23:6d:86:21:53:a5:de:a1:22:73:e0:b2:cf:fb:5e:
                    71:97:bc:fe:2e:bc:b7:91:fc:41:9e:4c:01:ed:f9:
                    a6:f4:f5:37:03:98:f5:38:0c:02:3f:ce:d6:96:8b:
                    bd:11:25:7c:78:ed:ba:33:08:63:db:86:7c:bb:d6:
                    37:50:10:94:ae:c8:c0:58:0d:53:17:c0:fb:27:d6:
                    f5:d9:26:24:ff:6a:35:c5:98:ab:df:27:85:7c:8d:
                    e2:9e:f9:10:40:3c:08:2a:7f:8c:f2:1c:3a:f6:80:
                    81:95:a8:e4:40:aa:3a:33:64:a8:83:3f:62:ee:6f:
                    28:94:f2:24:26:ea:c3:7e:bc:7d:2f:11:9d:95:fc:
                    f1:7e:0f:b3:e6:5f:3b:2c:ab:af:4a:c2:42:58:d1:
                    d3:ee:92:ac:bf:ee:68:0c:33:8d:b5:2c:ee:01:15:
                    28:bb:19:d7:af:88:1c:40:f9:4b:a2:99:81:cc:09:
                    24:19:bd:5d:75:53:be:55:fb:33:10:31:7c:64:18:
                    98:1c:b2:1d:ce:29:ce:9b:6c:35:b5:6f:11:10:0d:
                    a8:a5:1b:68:73:9b:48:69:c2:f5:95:19:fe:d3:54:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6B:66:7E:A0:3A:25:28:50:E7:3E:0E:F8:32:7A:25:E5:FC:48:CD
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030373a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c007::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:e8:3d:aa:d6:e7:b6:ec:23:eb:4b:f7:10:ac:3c:f2:90:ca:
         5b:4f:51:a6:aa:4e:3a:d7:b9:22:07:10:f8:fa:61:95:12:71:
         2d:2e:6b:a0:60:07:78:22:74:3d:1a:a5:e7:59:4e:88:fb:08:
         c8:67:92:66:93:d1:81:99:a4:44:c5:86:db:c8:08:f7:32:23:
         88:fb:29:49:4a:16:26:a0:0b:ba:4d:65:27:f8:79:3d:91:75:
         7e:ba:4c:95:a4:79:64:aa:bf:1b:eb:1c:2e:27:bd:32:1d:46:
         40:5c:7c:25:4e:1a:f4:05:1f:ee:65:de:fb:18:1e:88:b0:b6:
         94:3a:6b:d3:a1:34:76:d1:ae:f2:de:9d:c3:ee:29:c5:fb:8c:
         aa:e9:63:aa:e7:c7:17:4e:f5:27:0d:de:60:25:2e:d1:a5:a0:
         34:47:57:d6:12:bf:81:c6:24:91:03:4b:6a:9e:c8:99:0f:f6:
         2e:ac:76:de:d3:3d:49:27:0c:f7:a2:d5:26:bc:0d:ae:79:0e:
         80:95:5d:fa:60:f3:ae:db:f1:ce:63:26:86:f1:7c:b1:5b:37:
         40:4b:36:98:cd:c9:3e:be:45:64:c5:bf:67:aa:5a:c0:1a:3d:
         73:fe:72:b5:22:58:d2:6b:68:93:57:29:61:4c:76:9b:4c:b9:
         2e:6e:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:04:40 2026 by rpki-client