Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/323830343a353565303a3a2f33322d3438203d3e20323637393632.roa
File:                     323830343a353565303a3a2f33322d3438203d3e20323637393632.roa (raw, json)
Hash identifier:          aO5l5BrVtJQ1Tl+8flvd8htdKO8sVrUVZyltyzH9ED4=
Subject key identifier:   40:5B:BD:FC:B0:CD:F9:78:4D:31:29:B7:38:41:69:B3:13:33:C7:3B
Certificate issuer:       /CN=93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B
Certificate serial:       46DAE8CE6C933A73981BA7D8FD3FC00D0C1881E8
Authority key identifier: 93:40:43:25:EF:A1:1B:DB:A0:40:1F:5D:1F:F2:DA:84:D0:A5:7F:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/323830343a353565303a3a2f33322d3438203d3e20323637393632.roa
Signing time:             Wed 08 Apr 2026 06:30:11 +0000
ROA not before:           Wed 08 Apr 2026 06:25:11 +0000
ROA not after:            Wed 07 Apr 2027 06:30:11 +0000
asID:                     267962
IP address blocks:        2804:55e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.crl
                          rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:da:e8:ce:6c:93:3a:73:98:1b:a7:d8:fd:3f:c0:0d:0c:18:81:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B
        Validity
            Not Before: Apr  8 06:25:11 2026 GMT
            Not After : Apr  7 06:30:11 2027 GMT
        Subject: CN=405BBDFCB0CDF9784D3129B7384169B31333C73B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:dd:52:6f:72:72:a9:eb:77:ab:07:49:2e:
                    f5:1c:5c:82:21:d9:61:78:e5:4d:a7:43:d4:7d:37:
                    8a:0f:88:d5:13:9e:e1:e5:1d:19:c1:de:3d:68:ee:
                    b9:6f:85:a5:04:6d:ff:f1:e2:0f:20:37:ac:aa:c0:
                    59:51:c3:dd:63:dd:b3:93:4d:75:b6:21:51:d9:f3:
                    3b:f7:a8:bc:71:86:ac:7b:6d:9f:18:73:b3:02:a9:
                    78:8b:67:b5:7e:93:73:3d:e1:f2:c5:5c:94:a8:f8:
                    53:d0:4d:59:ae:a4:4e:26:4e:ac:28:3a:a5:53:13:
                    bb:8f:57:ef:5e:9b:c6:13:8e:5d:6b:a2:e4:1a:2e:
                    4c:48:d3:10:df:60:2e:a6:0c:fd:b5:7f:bc:9a:b9:
                    28:c8:41:22:a6:c0:8f:f9:9c:22:5e:ab:c4:a6:bf:
                    28:c2:5c:19:b5:8f:35:39:32:92:8f:a0:ac:40:00:
                    ff:29:55:d2:d5:52:45:76:8d:cc:13:97:cd:bb:4e:
                    ea:60:d5:0a:2a:ce:25:f7:74:1a:c0:94:51:1f:09:
                    04:58:81:10:33:6c:31:25:16:6f:10:5b:d8:89:38:
                    9d:4c:0c:61:9b:54:01:14:d3:22:63:30:ea:7c:6d:
                    1c:7d:03:b5:2c:b9:18:e2:4a:b0:72:d8:92:f1:d5:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:BD:FC:B0:CD:F9:78:4D:31:29:B7:38:41:69:B3:13:33:C7:3B
            X509v3 Authority Key Identifier:
                keyid:93:40:43:25:EF:A1:1B:DB:A0:40:1F:5D:1F:F2:DA:84:D0:A5:7F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/323830343a353565303a3a2f33322d3438203d3e20323637393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:21:2a:14:d1:2d:17:ee:4e:ed:9a:76:ee:1e:dd:fd:c4:45:
         ff:02:f8:a1:e8:6a:6d:28:40:f4:16:c9:34:f9:c7:e9:f9:dd:
         51:26:cc:72:6f:9f:8f:77:de:bc:df:f7:53:3f:88:04:9c:3c:
         a3:01:2e:a8:be:5a:22:75:27:47:2c:68:6f:8e:b8:6b:51:97:
         01:24:f6:40:b2:25:54:0d:62:33:70:c8:29:ac:40:1e:be:d8:
         1b:15:a9:09:94:e8:c1:4f:75:d4:91:43:dc:0a:34:33:eb:8b:
         21:16:dc:2c:aa:b4:3f:c0:a3:b4:53:07:51:a7:20:dd:eb:a7:
         1c:ea:d5:b6:0d:ae:92:a9:46:10:d2:92:43:6f:2d:60:54:37:
         aa:df:cb:3e:93:2e:b9:a8:8c:9d:2a:43:f7:fa:9d:cc:fc:ae:
         a1:45:be:e6:24:2c:7f:6b:a9:27:04:6d:7d:e5:fe:09:4b:89:
         fd:53:5d:c1:fd:49:6d:7c:49:2f:12:28:6e:bf:b5:f5:81:d7:
         61:6b:21:65:30:1a:32:37:7a:5d:91:f7:0b:8a:bb:ee:5e:25:
         d9:12:ae:7b:ef:d2:ac:e8:e0:d1:23:43:fd:b2:0d:00:12:da:
         2c:d1:2c:11:53:2e:fe:2d:80:3a:6d:84:0b:05:22:fa:ac:db:
         40:97:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:58:35 2026 by rpki-client