Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/323830343a326236343a3a2f33322d3438203d3e20323635313531.roa
File:                     323830343a326236343a3a2f33322d3438203d3e20323635313531.roa (raw, json)
Hash identifier:          J1cv5AedVNgGCRrTxJmFiM1+zglFYZ9zNlZ0JQcLH6I=
Subject key identifier:   81:A3:BE:43:46:66:86:97:06:51:BE:AC:D4:91:A5:07:85:75:57:75
Certificate issuer:       /CN=4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1
Certificate serial:       5EDAF96AF305FBA50B4A73667180C9DB0A23C599
Authority key identifier: 4B:CF:85:DB:B0:20:C6:E3:B8:8E:4F:9C:76:E6:5F:65:C0:73:C4:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/323830343a326236343a3a2f33322d3438203d3e20323635313531.roa
Signing time:             Mon 30 Mar 2026 16:27:34 +0000
ROA not before:           Mon 30 Mar 2026 16:22:34 +0000
ROA not after:            Mon 29 Mar 2027 16:27:34 +0000
asID:                     265151
IP address blocks:        2804:2b64::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.crl
                          rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:da:f9:6a:f3:05:fb:a5:0b:4a:73:66:71:80:c9:db:0a:23:c5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1
        Validity
            Not Before: Mar 30 16:22:34 2026 GMT
            Not After : Mar 29 16:27:34 2027 GMT
        Subject: CN=81A3BE43466686970651BEACD491A50785755775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:0b:64:c1:7c:64:92:1f:49:72:d5:1a:0a:
                    7a:0c:9c:20:63:b5:24:d4:f4:66:ea:da:4f:e6:83:
                    22:9c:be:53:37:f2:71:60:94:ff:6c:9a:4a:c0:af:
                    55:d5:cb:4a:0d:5f:77:e8:40:dd:bc:c2:fb:25:fc:
                    c8:7d:7f:25:70:38:c9:0b:c2:5e:8e:04:41:d3:b8:
                    74:65:ab:56:fe:80:dd:e0:c0:bb:a8:5b:46:a4:29:
                    e3:49:ea:34:6b:60:69:b9:f5:f8:86:91:df:68:f6:
                    98:7b:57:67:13:1a:6a:6f:85:1e:8d:ca:d5:65:78:
                    35:5e:26:da:06:a1:62:38:44:61:b2:45:26:7b:23:
                    62:ad:77:e5:77:4e:4f:52:63:d6:0d:b6:1a:f9:2b:
                    fb:09:3f:f3:ee:3a:04:7f:98:40:09:82:88:8d:c5:
                    40:df:ee:6a:08:6b:32:e6:de:f6:31:90:db:ab:74:
                    8b:e9:8a:8c:80:3d:92:9e:15:84:c0:a7:63:0b:89:
                    92:c5:7a:1c:a1:66:fa:87:0a:61:24:3c:44:78:20:
                    ce:2e:5a:09:57:ac:0f:7f:a3:2b:ee:9d:4e:ea:a6:
                    4b:53:c0:ef:fc:43:1e:94:42:ad:c8:42:90:2c:79:
                    c3:67:79:9c:04:7a:2f:4d:c9:c7:8f:ce:37:b3:cf:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A3:BE:43:46:66:86:97:06:51:BE:AC:D4:91:A5:07:85:75:57:75
            X509v3 Authority Key Identifier:
                keyid:4B:CF:85:DB:B0:20:C6:E3:B8:8E:4F:9C:76:E6:5F:65:C0:73:C4:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/323830343a326236343a3a2f33322d3438203d3e20323635313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b64::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:31:98:11:67:6d:07:72:21:76:4d:0e:bc:5b:4e:3a:f3:c3:
         22:1d:46:53:58:c5:a7:45:c6:e0:21:8f:5b:77:1f:ed:47:b8:
         f3:86:41:72:ab:81:0f:ce:82:88:3e:96:f4:dc:aa:e9:09:e3:
         73:c6:88:bd:bc:fc:b9:5c:99:36:ab:82:ed:78:99:fb:68:96:
         67:0c:ea:6b:50:a3:ff:a5:cb:1c:8c:94:f2:3e:1f:b5:b1:ec:
         98:3c:0b:d5:65:9a:0f:1d:ff:46:32:60:f2:08:0e:32:0c:23:
         72:da:82:9e:d6:24:e4:78:e6:af:4f:aa:1e:a0:ae:a7:bc:5b:
         17:0f:55:00:45:c3:77:f8:70:e1:df:ff:05:80:de:67:5f:fc:
         2d:db:8c:6b:ad:cb:c4:87:19:ec:17:ba:69:dc:3a:2a:63:74:
         3c:2e:ae:e9:82:87:a6:5a:1a:2f:79:93:82:20:4f:ca:7b:3d:
         67:8c:6b:78:28:80:b4:4b:9d:13:a2:0e:9c:cb:3e:64:fc:80:
         01:51:03:3c:90:f6:15:73:dd:39:4b:ab:64:58:a7:2b:c1:dc:
         74:2a:bb:61:27:9e:88:1f:26:cb:11:15:c2:b6:e8:c4:96:5f:
         c7:87:26:db:b7:02:23:08:78:8c:f4:4a:75:0a:0c:49:9c:0d:
         58:86:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:39:15 2026 by rpki-client