Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a383030303a3a2f33342d3334203d3e20323639313833.roa
File:                     323830343a363061633a383030303a3a2f33342d3334203d3e20323639313833.roa (raw, json)
Hash identifier:          pw/MYMwewFWh1w0yI8ie9Mydo/sf3SSrXIWITEbA8EU=
Subject key identifier:   4D:10:2C:F4:92:74:E4:4F:E6:CA:6D:22:9D:A3:44:77:3B:CD:02:53
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       64F4EDF223D3E880ADD6BD32CC94F45CFDAB0050
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a383030303a3a2f33342d3334203d3e20323639313833.roa
Signing time:             Fri 03 Apr 2026 18:25:59 +0000
ROA not before:           Fri 03 Apr 2026 18:20:59 +0000
ROA not after:            Fri 02 Apr 2027 18:25:59 +0000
asID:                     269183
IP address blocks:        2804:60ac:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
                          rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f4:ed:f2:23:d3:e8:80:ad:d6:bd:32:cc:94:f4:5c:fd:ab:00:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Apr  3 18:20:59 2026 GMT
            Not After : Apr  2 18:25:59 2027 GMT
        Subject: CN=4D102CF49274E44FE6CA6D229DA344773BCD0253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:5f:f7:0d:50:2a:0f:64:87:f0:b8:ae:d1:
                    e5:27:ad:b5:0c:dd:a0:57:11:c4:4f:bc:e1:1b:b9:
                    89:59:6f:04:ee:c1:1d:af:6c:dd:21:b8:83:22:58:
                    dd:eb:49:ea:95:ac:44:01:5d:7a:34:57:a2:3e:fa:
                    b3:44:9f:50:87:24:9f:c2:4d:f5:ca:33:06:3a:b1:
                    50:45:27:9e:86:8b:58:56:ea:77:a8:06:df:b5:3d:
                    a1:ad:11:c3:cb:13:4f:92:01:86:3b:db:70:ba:e5:
                    b3:d1:ae:d7:e8:5d:fe:d8:b0:72:39:92:77:24:76:
                    8b:c9:64:e1:e5:bc:cc:35:eb:37:d6:ea:61:a9:ca:
                    e2:0c:ee:24:64:9e:d3:78:a7:f7:bf:b6:38:cb:a5:
                    73:9b:6b:19:a1:ef:8f:e2:c4:fb:c9:6f:98:5a:f3:
                    ab:c8:1e:82:67:6f:66:14:8b:31:7a:d6:34:5f:b5:
                    61:1c:95:22:9c:e2:0b:58:3b:08:e5:46:da:72:3c:
                    c2:bc:f1:0c:10:8e:5d:d4:25:e4:54:e4:10:20:ea:
                    57:52:a8:33:0d:db:0f:18:c4:e6:33:5c:6e:15:ca:
                    9f:33:5c:80:ed:99:f9:5b:d5:0c:27:3e:a4:c6:74:
                    85:84:e8:7f:eb:c9:4c:b5:50:b5:28:4a:bb:53:55:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:10:2C:F4:92:74:E4:4F:E6:CA:6D:22:9D:A3:44:77:3B:CD:02:53
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a383030303a3a2f33342d3334203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60ac:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         97:a4:1e:7b:3e:26:3f:30:f9:3d:20:90:a9:2e:1e:0f:da:78:
         06:91:be:65:92:c0:6f:44:51:97:e1:66:7f:5b:82:19:de:f7:
         85:9e:d8:ce:cd:86:dd:52:9a:48:f8:58:f4:85:55:b1:f8:d7:
         30:36:9a:31:ef:4d:48:ca:0a:c1:2f:67:44:ab:a5:9e:6d:38:
         9b:c2:e2:e9:8d:51:95:e4:69:1f:95:51:b7:78:13:61:bf:28:
         1d:22:70:c1:c0:49:fd:61:21:c8:ae:6a:0a:c0:2c:ff:51:58:
         b3:cf:47:88:b0:44:b8:46:0a:fb:25:58:c1:d8:08:6d:c4:1f:
         5c:39:7c:51:d5:00:27:e3:f9:1b:5f:96:7b:c1:01:a5:02:eb:
         6f:b1:cc:f8:c7:2b:47:89:6c:9d:59:b9:5c:0c:6a:70:71:d8:
         c0:45:f5:a1:33:bf:7e:b4:0e:b2:8a:56:fd:f3:35:d3:f6:86:
         eb:9a:b5:b2:72:37:c4:8f:f4:2c:d7:07:4b:30:ae:1a:30:42:
         d9:29:68:c6:ef:f2:c3:bf:d4:5f:eb:ac:1f:79:0f:6a:20:f3:
         b5:dc:64:b7:15:48:f0:35:8c:32:e4:ad:db:fc:44:c2:19:ef:
         62:6c:b5:b2:ad:b3:80:c6:93:7b:f8:68:cd:ea:85:45:62:46:
         32:a0:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:48:41 2026 by rpki-client