Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/323830343a373463383a3a2f33322d3334203d3e20323731303033.roa
File:                     323830343a373463383a3a2f33322d3334203d3e20323731303033.roa (raw, json)
Hash identifier:          r0QICRt+/jwvPgp0AVQL1jdP/CNC/Z7OVGt8PpqIa1o=
Subject key identifier:   5A:1A:96:B5:B2:D2:DD:0E:19:E4:B0:DF:B5:D0:AF:7D:44:64:2C:74
Certificate issuer:       /CN=3DE1F96CF0A9E750DD54B28CE66E521BC301C107
Certificate serial:       0510D52280AF12CB16AAB4F2706844D29C74F8A5
Authority key identifier: 3D:E1:F9:6C:F0:A9:E7:50:DD:54:B2:8C:E6:6E:52:1B:C3:01:C1:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/323830343a373463383a3a2f33322d3334203d3e20323731303033.roa
Signing time:             Thu 26 Mar 2026 11:25:10 +0000
ROA not before:           Thu 26 Mar 2026 11:20:10 +0000
ROA not after:            Thu 25 Mar 2027 11:25:10 +0000
asID:                     271003
IP address blocks:        2804:74c8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.crl
                          rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 02:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:10:d5:22:80:af:12:cb:16:aa:b4:f2:70:68:44:d2:9c:74:f8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DE1F96CF0A9E750DD54B28CE66E521BC301C107
        Validity
            Not Before: Mar 26 11:20:10 2026 GMT
            Not After : Mar 25 11:25:10 2027 GMT
        Subject: CN=5A1A96B5B2D2DD0E19E4B0DFB5D0AF7D44642C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:2e:77:71:d8:f1:b7:be:3e:20:d9:c6:0d:
                    57:17:64:75:9d:6c:4c:0c:c8:d9:cf:26:6c:6c:39:
                    70:0a:b1:b1:c1:28:5f:3b:a3:ca:f9:02:08:8a:8d:
                    e1:98:b1:56:b8:90:af:34:36:56:f4:25:10:29:6c:
                    da:3f:3d:69:a6:dd:0c:4c:30:0a:7b:4c:f9:d1:3b:
                    4f:70:b0:c2:ac:ee:5c:60:b8:cd:45:ea:0f:53:8b:
                    9f:a3:0b:cb:f5:16:93:5c:e7:14:2e:c5:ec:00:45:
                    3d:0f:c1:41:88:90:45:e8:5c:09:50:7c:a5:68:67:
                    66:b2:94:f9:72:34:72:a1:26:70:4d:81:a2:07:b4:
                    9d:ca:97:4a:ea:33:64:3b:01:d9:9e:13:34:4a:e4:
                    43:54:0c:9b:3e:27:92:2a:5b:5b:9c:c2:92:af:da:
                    84:39:22:12:bd:62:39:cd:23:2e:0b:7a:6d:c1:da:
                    8a:bc:c9:7d:8c:73:23:14:d6:25:a6:0b:bd:20:c3:
                    25:97:4d:c5:0d:4c:01:e0:31:ee:ab:16:84:9f:98:
                    aa:7f:46:36:68:c1:9b:73:87:fd:cf:02:86:bc:ff:
                    4c:25:37:24:a6:08:e4:54:99:bc:78:4e:3a:85:81:
                    b2:a5:8c:2b:db:03:5d:61:ac:ea:d1:fe:1d:f8:00:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1A:96:B5:B2:D2:DD:0E:19:E4:B0:DF:B5:D0:AF:7D:44:64:2C:74
            X509v3 Authority Key Identifier:
                keyid:3D:E1:F9:6C:F0:A9:E7:50:DD:54:B2:8C:E6:6E:52:1B:C3:01:C1:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/323830343a373463383a3a2f33322d3334203d3e20323731303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:82:6b:b2:bb:0f:ec:b0:d1:88:21:c5:b1:24:74:50:66:
         22:9f:89:5f:51:7d:23:91:47:af:76:d3:53:ea:f8:32:6b:40:
         bb:73:2e:85:cf:37:36:6f:e3:fd:8e:47:d8:9c:f1:c0:2f:d9:
         3c:29:83:b0:f8:be:a3:87:a2:b4:75:2a:55:3a:0e:2f:17:f8:
         20:ac:58:f5:23:5a:8e:9e:89:21:e2:75:f3:a7:67:38:9a:c7:
         65:eb:4e:77:25:0f:7d:48:14:58:17:4c:33:81:b3:8c:a9:b8:
         d3:e8:c5:f4:26:c3:d2:ca:8a:2a:c8:b7:bd:40:b4:f8:44:59:
         c5:2a:d5:f5:a4:7e:ef:6e:28:99:cb:0b:74:6c:c2:d5:65:b6:
         4c:45:81:d4:5b:17:e6:3c:3d:be:a1:0f:e1:3b:b0:8c:aa:54:
         b5:38:ac:56:7e:90:86:93:d1:f6:22:9f:16:5b:a9:8b:55:ac:
         1f:a9:7b:20:19:e4:b1:a4:23:6e:1b:44:07:b8:72:35:62:c7:
         4b:d4:54:ff:dc:dc:eb:3b:4c:97:23:f1:a9:ad:6c:26:46:49:
         eb:f0:eb:8b:aa:dc:53:18:00:37:a9:c4:9c:ea:01:75:eb:75:
         4c:4f:66:d5:37:0f:ca:38:3d:9b:0b:4e:a7:db:10:04:04:ba:
         ba:04:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:58:18 2026 by rpki-client