Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a38313a3a2f34382d3438203d3e203533313037.roa
File:                     323830343a376238383a38313a3a2f34382d3438203d3e203533313037.roa (raw, json)
Hash identifier:          kCObE4X+MV6ECPpevPOkaLYc6PJERYYYjuI7QPCOx0k=
Subject key identifier:   FB:7A:1A:FC:83:1B:1F:B6:AB:53:26:22:22:CD:DE:C1:03:2D:FB:63
Certificate issuer:       /CN=53A5B699AFED13BD0E022CA41D2E6E4F14DCF934
Certificate serial:       2CFD13C542CA626335B9B6CCE16547475921DA62
Authority key identifier: 53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a38313a3a2f34382d3438203d3e203533313037.roa
Signing time:             Sat 07 Mar 2026 22:15:04 +0000
ROA not before:           Sat 07 Mar 2026 22:10:04 +0000
ROA not after:            Sat 06 Mar 2027 22:15:04 +0000
asID:                     53107
IP address blocks:        2804:7b88:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.crl
                          rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Mar 2026 11:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fd:13:c5:42:ca:62:63:35:b9:b6:cc:e1:65:47:47:59:21:da:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53A5B699AFED13BD0E022CA41D2E6E4F14DCF934
        Validity
            Not Before: Mar  7 22:10:04 2026 GMT
            Not After : Mar  6 22:15:04 2027 GMT
        Subject: CN=FB7A1AFC831B1FB6AB53262222CDDEC1032DFB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:23:e5:30:5e:1a:ec:f3:25:cc:3a:53:ae:
                    2f:40:38:ac:a4:f7:19:93:5b:47:b3:9a:10:ac:48:
                    ad:a6:49:1f:34:68:67:cf:64:11:7c:af:f9:0d:68:
                    61:6c:8d:8f:dc:11:8b:d8:1e:d9:84:30:7d:c4:91:
                    83:93:43:2e:d6:f8:13:d1:f9:9c:07:b7:b8:6a:68:
                    da:a7:be:6a:2f:fd:e2:70:4e:73:9b:9d:4e:76:1b:
                    20:eb:28:8e:42:7d:6d:a3:18:ab:79:c3:db:9a:44:
                    00:b5:de:c7:cd:eb:dc:ab:0c:c0:7f:8a:7e:65:f6:
                    75:d0:46:c5:41:40:c2:c1:42:b9:c2:43:7c:f9:26:
                    fd:6b:dc:00:ac:fe:d9:26:c5:99:e4:4b:43:22:65:
                    c8:fe:05:f7:1a:a6:0d:d9:b5:c5:24:00:43:65:eb:
                    d3:27:33:e6:0d:18:cc:b4:35:06:fb:59:0c:18:16:
                    07:47:5e:20:bd:c0:43:6d:04:8d:8b:a2:ff:10:9e:
                    b7:65:13:00:4e:12:f7:d2:63:22:4e:d8:84:91:2c:
                    01:fc:18:d9:b0:f5:73:2f:c7:fe:dd:c8:18:cc:ae:
                    06:52:4e:4b:f7:14:1d:64:c7:68:38:c3:23:40:8d:
                    99:93:52:d2:c0:b5:a2:35:2c:fd:14:ec:52:94:5a:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7A:1A:FC:83:1B:1F:B6:AB:53:26:22:22:CD:DE:C1:03:2D:FB:63
            X509v3 Authority Key Identifier:
                keyid:53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a38313a3a2f34382d3438203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b88:81::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:28:d7:e6:8b:48:a3:6f:06:4d:7f:af:6b:39:5d:2f:9d:
         87:97:0d:af:7b:08:e5:d4:4b:22:5f:ba:f5:11:9d:4b:e8:94:
         89:6d:4f:02:f6:6e:a2:45:ba:c4:2f:a7:49:83:58:8b:8a:cd:
         20:d0:c7:2e:fe:48:42:97:cb:68:49:11:1c:c7:9c:61:12:1d:
         33:0b:72:67:8a:1b:82:16:78:4d:07:71:17:13:68:4d:68:0d:
         e4:ac:24:3d:a9:99:37:b7:eb:3c:7e:c6:d3:b2:75:55:8d:1b:
         eb:7b:a3:89:24:08:d1:7b:b9:3e:c1:a5:85:4f:d5:d1:f1:ca:
         de:f8:f5:14:16:98:d7:07:5d:1e:f6:d6:47:b6:d4:99:5a:ae:
         ad:2a:10:bc:02:28:fe:03:1d:2e:74:29:c6:ff:13:05:0f:87:
         b4:f8:fe:eb:99:02:c8:ca:1c:d0:30:8d:be:71:5e:c2:45:54:
         f8:cd:d0:fd:ab:18:56:b1:6d:82:c0:78:5e:c9:79:c1:12:1b:
         3f:be:b0:f1:76:91:cc:b4:aa:c3:71:a6:fb:33:d2:86:d0:f5:
         b3:7e:af:09:91:b9:c1:2c:16:a6:e5:18:9e:28:12:39:ce:d6:
         84:82:b4:56:d7:1a:d7:07:3d:94:30:7e:58:7b:1f:5b:2a:43:
         e1:e5:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:55:21 2026 by rpki-client