Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a383030303a3a2f33332d3333203d3e20323635393739.roa
File:                     323830343a343063303a383030303a3a2f33332d3333203d3e20323635393739.roa (raw, json)
Hash identifier:          Vb8gDK5gJVrbcCU6ZStsIx+6bn0tI3DJvXfO1KLX0l4=
Subject key identifier:   4E:B3:56:5A:F8:01:05:E9:49:8D:8E:20:C4:D2:F2:BE:8D:EC:62:BF
Certificate issuer:       /CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
Certificate serial:       0416B28831E1BDA7CE585C9201E55A4BD65DCEAA
Authority key identifier: F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a383030303a3a2f33332d3333203d3e20323635393739.roa
Signing time:             Mon 09 Mar 2026 15:42:06 +0000
ROA not before:           Mon 09 Mar 2026 15:37:06 +0000
ROA not after:            Mon 08 Mar 2027 15:42:06 +0000
asID:                     265979
IP address blocks:        2804:40c0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl
                          rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:16:b2:88:31:e1:bd:a7:ce:58:5c:92:01:e5:5a:4b:d6:5d:ce:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
        Validity
            Not Before: Mar  9 15:37:06 2026 GMT
            Not After : Mar  8 15:42:06 2027 GMT
        Subject: CN=4EB3565AF80105E9498D8E20C4D2F2BE8DEC62BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:91:aa:31:3e:a5:98:74:76:f8:0e:41:87:43:
                    23:0c:00:50:cf:d1:87:72:14:cb:72:06:7a:5f:16:
                    12:28:1c:a5:ce:ed:9a:e3:0a:53:06:7f:e3:35:dd:
                    b0:4e:e3:95:02:89:13:43:4c:37:d5:2c:73:4e:b1:
                    b1:fe:2b:ab:3f:e2:cb:10:70:0f:ee:b9:1c:e4:51:
                    6b:f8:c3:d1:d3:27:0e:97:2b:9e:1f:94:92:ab:d5:
                    5e:cd:6d:a9:a4:b2:b6:2e:99:2a:ab:58:1d:19:b2:
                    87:61:48:64:5d:35:4c:d7:a2:2c:be:a3:e5:a0:90:
                    b6:f7:ab:33:cd:90:76:32:ce:11:d9:57:14:5d:d5:
                    64:9d:2e:82:c5:97:dc:a8:a5:6b:e9:c1:1e:3b:f6:
                    3d:34:0a:55:82:f3:10:9c:ea:42:7d:be:d1:b8:16:
                    83:5c:1e:5b:e7:ec:82:03:95:6e:a6:5f:86:4f:6b:
                    8e:63:15:09:ed:96:79:6c:21:0c:8b:6e:57:00:b7:
                    f7:1f:b4:d3:c4:01:a9:23:66:6c:a4:63:14:17:ab:
                    55:f9:d6:2f:aa:da:68:33:19:d0:37:af:63:ea:42:
                    d7:39:7d:b7:f9:6d:77:65:e7:4b:82:95:f9:bc:95:
                    98:2b:33:e8:ea:bf:cc:35:e3:f9:82:99:a7:12:41:
                    2c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B3:56:5A:F8:01:05:E9:49:8D:8E:20:C4:D2:F2:BE:8D:EC:62:BF
            X509v3 Authority Key Identifier:
                keyid:F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a383030303a3a2f33332d3333203d3e20323635393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:34:55:3a:15:de:02:8d:76:72:5f:df:3f:5b:80:c1:eb:
         ff:7d:54:c7:5f:25:9d:0e:f6:92:fa:fd:27:0d:63:f1:a1:03:
         47:75:b8:c6:95:e9:8a:31:3d:2e:32:36:0b:8d:46:90:14:f6:
         ed:ba:95:18:52:5e:b4:02:cf:8b:3a:67:67:60:d5:13:85:3f:
         e9:60:8e:4d:d3:e5:af:a1:17:bd:43:cc:5e:0d:d9:33:09:44:
         fe:bd:50:95:68:cd:11:94:39:50:15:3c:a8:e4:40:fc:b4:22:
         d0:12:ff:d1:94:e4:af:ab:8b:ac:91:d7:15:6e:44:a6:63:e0:
         07:ac:6d:7f:72:63:06:d9:c4:9b:7a:d5:75:68:45:81:97:69:
         44:5c:6f:a3:50:6e:38:2d:bb:f4:b1:e8:28:da:9c:ca:4f:e7:
         1d:77:99:3d:81:7b:23:21:c5:95:6f:23:58:3c:a5:81:43:04:
         14:ae:01:aa:fc:6e:a8:a2:48:51:1e:a3:1f:b2:00:87:e4:c4:
         f4:1a:65:ff:2f:93:86:8f:4b:16:97:b2:f5:68:02:69:30:c1:
         7b:5b:40:68:a2:74:e1:49:4f:14:e0:35:9a:a8:fb:e8:37:93:
         71:f2:ec:b6:b6:b9:09:b9:b3:39:79:b4:69:93:7e:fe:4f:59:
         0a:f7:eb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:10:06 2026 by rpki-client