Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/323830343a343338633a3a2f33322d3430203d3e20323632393131.roa
File:                     323830343a343338633a3a2f33322d3430203d3e20323632393131.roa (raw, json)
Hash identifier:          /5QE+TFnPvJPVIuefYfg0yoDGwEnHw27sOYuidLeATw=
Subject key identifier:   57:3B:0A:AE:B3:42:E5:20:E4:30:7F:54:DB:6B:51:73:81:10:C4:CD
Certificate issuer:       /CN=0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25
Certificate serial:       1C3C170524F887470C50A318907A3F4084D3299D
Authority key identifier: 0E:29:F6:87:E6:D6:6C:FB:82:50:E6:2C:7F:B0:CE:F9:8C:9A:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/323830343a343338633a3a2f33322d3430203d3e20323632393131.roa
Signing time:             Wed 01 Apr 2026 12:45:58 +0000
ROA not before:           Wed 01 Apr 2026 12:40:58 +0000
ROA not after:            Wed 31 Mar 2027 12:45:58 +0000
asID:                     262911
IP address blocks:        2804:438c::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl
                          rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3c:17:05:24:f8:87:47:0c:50:a3:18:90:7a:3f:40:84:d3:29:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25
        Validity
            Not Before: Apr  1 12:40:58 2026 GMT
            Not After : Mar 31 12:45:58 2027 GMT
        Subject: CN=573B0AAEB342E520E4307F54DB6B51738110C4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:5e:3e:22:bb:87:5c:7e:67:d3:e2:e1:3b:
                    88:ae:c3:23:fd:44:d9:b2:23:67:4e:b7:ac:9f:f0:
                    82:e5:f5:20:56:d3:38:75:03:c7:82:7c:68:05:75:
                    3a:4a:c9:2b:de:d2:f7:bf:91:5f:52:f3:3e:7b:ce:
                    05:40:bf:85:ae:89:c4:e0:77:54:2a:ae:e5:2b:06:
                    bc:b5:53:07:2e:d6:ba:2d:49:3a:a3:0d:24:3f:9e:
                    16:15:d5:e2:08:f5:14:24:f7:23:4d:d3:4e:f1:0a:
                    30:d8:c8:c9:74:a5:fe:66:f9:af:0e:12:11:68:9a:
                    b2:6e:10:db:d1:e0:08:2a:ec:12:53:1c:9f:ad:c0:
                    84:30:08:48:3d:2f:24:90:b9:23:9d:24:f9:32:4e:
                    aa:d2:75:3a:16:5c:f6:ac:ec:09:65:99:1c:81:da:
                    ca:03:7f:4e:11:8d:38:6d:4e:7c:91:49:df:99:f5:
                    bd:44:be:fd:9b:47:67:3a:0e:5a:ae:47:ab:a2:73:
                    7c:b2:97:eb:7e:79:f9:ad:b4:ce:d2:4c:5b:50:77:
                    fb:4d:82:5a:e9:a9:57:ed:04:58:de:a0:fb:70:f7:
                    df:ab:e1:4a:c8:6e:9f:74:01:df:ee:99:da:d6:4b:
                    60:4d:82:d7:74:e0:c4:0c:0e:e8:8e:a7:36:c3:4f:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:0A:AE:B3:42:E5:20:E4:30:7F:54:DB:6B:51:73:81:10:C4:CD
            X509v3 Authority Key Identifier:
                keyid:0E:29:F6:87:E6:D6:6C:FB:82:50:E6:2C:7F:B0:CE:F9:8C:9A:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E29F687E6D66CFB8250E62C7FB0CEF98C9A2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/323830343a343338633a3a2f33322d3430203d3e20323632393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:438c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:50:ae:78:be:ab:53:47:1a:87:a9:1b:ac:df:3b:49:15:54:
         a4:b6:12:d2:67:ae:f6:14:23:46:8e:da:ac:ee:7e:ce:1f:c4:
         05:e9:87:69:82:64:5b:4e:59:11:2b:70:5e:4f:fe:be:d5:ee:
         40:38:0b:fe:50:8a:d1:2d:5d:41:50:3d:0c:1c:1e:f8:c8:fa:
         ea:d2:ef:ed:1e:3c:29:b9:88:85:15:82:ad:f9:1c:7a:13:76:
         42:08:40:2d:a4:77:d5:77:c6:f7:9e:e8:54:5b:f7:35:bb:c7:
         4f:95:eb:45:44:50:e6:ce:0c:aa:81:5e:94:a3:49:0c:03:a6:
         ae:6c:27:0d:8a:58:74:63:4c:d9:47:f5:6e:d3:d1:b1:1f:75:
         30:9d:6b:17:35:9e:4e:af:23:80:6b:33:82:4a:54:7d:2c:2a:
         7f:d1:21:13:2b:a6:c6:a0:60:f4:b9:88:8a:17:b3:62:62:06:
         48:a6:b9:32:ea:be:94:bf:20:7d:04:ff:71:6c:4d:37:fa:10:
         7e:fb:88:d2:51:01:51:1d:ab:0a:63:d8:e8:a0:1b:42:a5:58:
         2f:a5:c6:ec:0a:32:25:09:ea:30:c2:cb:5b:a1:f0:ab:4b:b4:
         38:01:64:64:f0:53:69:cd:b5:71:b9:8b:60:03:73:0d:89:62:
         80:cb:c7:f1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHDwXBST4h0cMUKMYkHo/QITTKZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUyOUY2ODdFNkQ2NkNGQjgyNTBFNjJDN0ZCMENFRjk4
QzlBMkQyNTAeFw0yNjA0MDExMjQwNThaFw0yNzAzMzExMjQ1NThaMDMxMTAvBgNV
BAMTKDU3M0IwQUFFQjM0MkU1MjBFNDMwN0Y1NERCNkI1MTczODExMEM0Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWFV4+IruHXH5n0+LhO4iuwyP9
RNmyI2dOt6yf8ILl9SBW0zh1A8eCfGgFdTpKySve0ve/kV9S8z57zgVAv4WuicTg
d1QqruUrBry1Uwcu1rotSTqjDSQ/nhYV1eII9RQk9yNN007xCjDYyMl0pf5m+a8O
EhFomrJuENvR4Agq7BJTHJ+twIQwCEg9LySQuSOdJPkyTqrSdToWXPas7AllmRyB
2soDf04RjThtTnyRSd+Z9b1Evv2bR2c6DlquR6uic3yyl+t+efmttM7STFtQd/tN
glrpqVftBFjeoPtw99+r4UrIbp90Ad/umdrWS2BNgtd04MQMDuiOpzbDT6UlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVzsKrrNC5SDkMH9U22tRc4EQxM0wHwYDVR0j
BBgwFoAUDin2h+bWbPuCUOYsf7DO+YyaLSUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVp4Wm9DbzYzOXFGbkZqdVp3ZlQzdE50dEJvWUI5ZlhDMU14cmZOeE1u
NWcvMC8wRTI5RjY4N0U2RDY2Q0ZCODI1MEU2MkM3RkIwQ0VGOThDOUEyRDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFMjlGNjg3RTZENjZDRkI4
MjUwRTYyQzdGQjBDRUY5OEM5QTJEMjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VaeFpvQ282MzlxRm5GanVad2ZUM3ROdHRCb1lCOWZYQzFNeHJmTnhNbjVnLzAv
MzIzODMwMzQzYTM0MzMzODYzM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjMy
MzkzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARDjDANBgkqhkiG9w0BAQsFAAOCAQEAE1CueL6r
U0cah6kbrN87SRVUpLYS0meu9hQjRo7arO5+zh/EBemHaYJkW05ZEStwXk/+vtXu
QDgL/lCK0S1dQVA9DBwe+Mj66tLv7R48KbmIhRWCrfkcehN2QghALaR31XfG957o
VFv3NbvHT5XrRURQ5s4MqoFelKNJDAOmrmwnDYpYdGNM2Uf1btPRsR91MJ1rFzWe
Tq8jgGszgkpUfSwqf9EhEyumxqBg9LmIihezYmIGSKa5Muq+lL8gfQT/cWxNN/oQ
fvuI0lEBUR2rCmPY6KAbQqVYL6XG7AoyJQnqMMLLW6Hwq0u0OAFkZPBTac21cbmL
YANzDYligMvH8Q==
-----END CERTIFICATE-----
Generated at Thu Apr 9 14:12:02 2026 by rpki-client