Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a3a2f33342d3334203d3e20323633323935.roa
File:                     323830343a313639383a3a2f33342d3334203d3e20323633323935.roa (raw, json)
Hash identifier:          GxvVfEfRkFD5TERNSoa8+dDmxHiOyRTUGv/Z+/gnHQA=
Subject key identifier:   CA:B3:D8:F2:0C:19:D4:0D:26:DA:5F:B9:06:B8:77:BA:4F:80:7E:0E
Certificate issuer:       /CN=4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC
Certificate serial:       48D4FF65B6CF4C0747DE5985E0D45FA1520C7E86
Authority key identifier: 4F:A8:AB:A4:F3:F2:5A:2D:D6:D1:94:26:2C:47:FE:40:FE:E1:81:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a3a2f33342d3334203d3e20323633323935.roa
Signing time:             Tue 07 Apr 2026 16:23:51 +0000
ROA not before:           Tue 07 Apr 2026 16:18:51 +0000
ROA not after:            Tue 06 Apr 2027 16:23:51 +0000
asID:                     263295
IP address blocks:        2804:1698::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.crl
                          rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 06:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d4:ff:65:b6:cf:4c:07:47:de:59:85:e0:d4:5f:a1:52:0c:7e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC
        Validity
            Not Before: Apr  7 16:18:51 2026 GMT
            Not After : Apr  6 16:23:51 2027 GMT
        Subject: CN=CAB3D8F20C19D40D26DA5FB906B877BA4F807E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:bf:ad:82:3c:1b:79:f2:ae:98:3e:eb:c2:
                    5c:8b:66:4c:8a:4b:55:b1:5f:65:e4:02:77:ad:f0:
                    42:80:09:77:4e:b3:75:5c:7b:ec:36:bb:97:c5:6f:
                    f7:93:b3:d0:a2:c6:c3:70:a1:fe:14:98:a6:67:30:
                    54:68:5d:37:14:5d:09:26:ea:88:a4:a2:f4:15:8b:
                    82:25:07:ed:06:f3:36:c8:70:81:98:77:40:c6:82:
                    99:6c:de:99:c1:d2:35:af:68:da:cc:b2:3f:41:0a:
                    28:ca:7d:be:9e:6d:9e:c5:9c:f1:4f:28:2b:38:f8:
                    1e:c6:a7:8e:ee:44:c4:da:74:c3:17:4d:51:6c:c0:
                    ec:62:bc:63:c6:9b:7b:ee:2a:54:de:fb:79:f5:01:
                    b7:2d:a4:ac:5d:d6:bd:a8:43:36:4f:ea:af:b3:a1:
                    a5:76:e3:1b:7f:82:0a:72:11:97:3f:10:4a:86:ff:
                    6e:f5:54:92:b3:27:8b:b2:dd:9d:00:3b:c3:11:2f:
                    5d:00:c4:79:21:c2:5d:f9:56:7f:0c:27:f9:56:19:
                    63:c1:1f:b9:dc:67:2e:17:7b:9f:40:99:2d:22:e0:
                    58:06:76:ca:a5:45:1e:63:b5:ae:24:a6:33:b6:cf:
                    1b:f4:93:4c:de:05:94:ad:a3:c1:5e:89:83:14:9e:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B3:D8:F2:0C:19:D4:0D:26:DA:5F:B9:06:B8:77:BA:4F:80:7E:0E
            X509v3 Authority Key Identifier:
                keyid:4F:A8:AB:A4:F3:F2:5A:2D:D6:D1:94:26:2C:47:FE:40:FE:E1:81:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a3a2f33342d3334203d3e20323633323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1698::/34

    Signature Algorithm: sha256WithRSAEncryption
         df:fb:9f:0b:2e:4f:8a:7f:74:f4:2a:36:9a:2e:b3:47:60:f9:
         b3:3e:c5:f5:e7:a5:3c:e3:eb:ff:c0:59:aa:18:55:31:16:7a:
         78:79:0e:69:8c:2e:48:9c:06:94:c7:d1:02:a0:e7:3e:18:88:
         fd:df:db:cf:66:75:16:1d:89:54:21:b8:69:46:02:ef:eb:c5:
         72:7a:8d:52:09:9c:68:ba:ad:b3:6e:96:7e:6d:cb:df:6f:a8:
         fe:00:b5:ac:97:28:1e:db:5c:2d:7a:3a:08:15:98:c5:15:32:
         6a:c0:4f:90:13:94:7e:35:32:e5:f6:42:73:76:33:98:de:05:
         ee:4d:92:4e:25:65:c6:58:b4:42:69:a7:10:4f:e3:fa:75:23:
         3c:65:c8:03:b1:0e:aa:57:cc:b7:a6:5f:0d:fb:37:a2:03:07:
         b9:d8:79:77:72:67:ba:0d:90:ab:b2:52:4d:e9:4c:b0:e2:c2:
         52:22:4a:ac:c8:46:48:a2:3f:7f:83:80:be:0b:9f:31:6e:5e:
         ae:53:37:cb:f2:87:35:00:84:26:60:2c:4c:19:b2:6f:59:b2:
         b2:de:67:98:40:20:11:f6:71:21:ac:58:7e:69:14:8b:4e:b7:
         2b:30:45:8f:c5:cc:e3:09:c1:36:38:36:e7:f2:f6:1f:53:cf:
         94:04:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:39:52 2026 by rpki-client