Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33342d3334203d3e20323639313833.roa
File:                     323830343a363061633a3a2f33342d3334203d3e20323639313833.roa (raw, json)
Hash identifier:          j5xa8W4v8DKISzMj/iKd8WAsWmINhja5wfgvGPSrFXA=
Subject key identifier:   70:85:1F:86:F8:01:D0:91:D5:8B:72:42:CF:1C:0E:93:B0:D6:38:65
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       523FC10C07FE88B3D5CFCA1D83C236D583899278
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33342d3334203d3e20323639313833.roa
Signing time:             Fri 03 Apr 2026 18:26:00 +0000
ROA not before:           Fri 03 Apr 2026 18:21:00 +0000
ROA not after:            Fri 02 Apr 2027 18:26:00 +0000
asID:                     269183
IP address blocks:        2804:60ac::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
                          rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3f:c1:0c:07:fe:88:b3:d5:cf:ca:1d:83:c2:36:d5:83:89:92:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Apr  3 18:21:00 2026 GMT
            Not After : Apr  2 18:26:00 2027 GMT
        Subject: CN=70851F86F801D091D58B7242CF1C0E93B0D63865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:e5:8d:0e:cd:19:cc:9d:21:16:6c:c1:75:
                    63:2a:7a:d1:25:45:82:2a:ac:bb:6c:0d:41:3f:cd:
                    fa:7a:fc:47:f1:94:5c:09:4a:29:ee:60:26:51:a0:
                    d0:17:22:b8:dd:5a:64:75:98:fd:2e:69:af:15:d6:
                    ee:19:36:4f:de:12:0c:5b:31:6c:37:30:89:a1:fb:
                    2b:4a:15:5f:be:d7:6f:b8:59:cb:60:13:fb:90:9a:
                    78:7e:8e:a0:cb:fa:15:a9:b7:dd:36:18:5f:7d:17:
                    4e:2f:71:89:cd:ff:97:10:80:1a:7e:89:54:46:3c:
                    6f:ed:f3:00:83:04:8a:28:32:4e:58:0b:ec:2b:a9:
                    04:d3:e2:de:a4:8f:7b:e3:23:9c:40:e2:5d:32:76:
                    87:c4:85:41:72:89:49:ba:6d:ba:fa:c5:ab:2f:3f:
                    15:e1:48:f8:31:b1:21:af:db:12:2d:04:08:b1:e7:
                    3f:f3:0c:2d:f9:36:fa:76:53:a3:16:8d:60:4c:fe:
                    74:53:1b:e7:21:64:5c:5a:7e:18:1c:c3:76:71:33:
                    b9:c0:e1:04:28:33:56:48:a0:3f:2c:d5:b7:94:5c:
                    f5:d0:52:41:21:86:68:ae:87:89:a1:d9:3e:eb:a3:
                    fd:48:82:b2:67:04:4b:92:11:d0:67:9f:73:be:57:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:85:1F:86:F8:01:D0:91:D5:8B:72:42:CF:1C:0E:93:B0:D6:38:65
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a3a2f33342d3334203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60ac::/34

    Signature Algorithm: sha256WithRSAEncryption
         47:e8:bd:1c:74:e0:36:a8:2a:c9:59:94:ca:b0:64:3f:5d:29:
         76:09:25:06:ba:61:91:03:bf:69:44:f8:45:4a:41:33:a6:cf:
         30:80:17:a4:93:97:4e:64:9d:b5:e8:c4:10:7d:fb:20:9c:b0:
         30:fb:84:a5:56:49:36:b1:10:ac:e5:f1:87:3d:63:36:4a:c8:
         e9:4a:09:f2:bc:3b:08:45:9b:66:df:8e:aa:83:4d:ab:99:02:
         4d:56:eb:eb:67:01:ad:7d:a0:57:69:dc:4b:76:e0:16:c8:23:
         27:d0:d4:03:e3:9d:8c:0b:cf:03:1b:20:28:02:1f:e9:a3:7d:
         14:53:6f:79:a3:bc:95:b0:4e:22:8d:a9:27:6c:aa:a3:76:0b:
         22:5f:e5:b0:cd:07:23:43:39:4c:d6:01:30:96:4e:9e:f2:9a:
         24:ce:a2:6f:61:cf:ed:2d:e0:09:da:06:a3:6e:d8:74:2d:f1:
         74:28:d3:92:68:06:6e:e8:b2:49:ea:f5:67:dc:dd:d5:6b:bd:
         3b:c2:67:4f:5f:a7:fc:d9:12:87:ad:29:b1:b2:71:fd:6d:b5:
         a1:d9:c6:00:22:84:f5:0c:ee:18:cf:4e:1e:f6:9c:81:e9:18:
         db:54:7e:5b:de:3e:ad:27:00:21:97:8e:81:59:90:13:92:b9:
         a2:71:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:47:17 2026 by rpki-client