Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/323830343a343935343a3a2f33322d3438203d3e20323637313738.roa
File:                     323830343a343935343a3a2f33322d3438203d3e20323637313738.roa (raw, json)
Hash identifier:          HcpnPQIIAqNZONDpurwy9zVVj90rpL9N73QjKDANbyg=
Subject key identifier:   94:42:71:5B:AF:93:A3:BF:2A:9E:3D:68:8F:58:DB:7B:6E:05:E9:0F
Certificate issuer:       /CN=1208C3DCE5E08C8ED597842657C523508713FABA
Certificate serial:       6B09D7C5EFFE3446DD6AAD01C22AE4121609A286
Authority key identifier: 12:08:C3:DC:E5:E0:8C:8E:D5:97:84:26:57:C5:23:50:87:13:FA:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1208C3DCE5E08C8ED597842657C523508713FABA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/323830343a343935343a3a2f33322d3438203d3e20323637313738.roa
Signing time:             Wed 08 Apr 2026 18:43:18 +0000
ROA not before:           Wed 08 Apr 2026 18:38:18 +0000
ROA not after:            Wed 07 Apr 2027 18:43:18 +0000
asID:                     267178
IP address blocks:        2804:4954::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/1208C3DCE5E08C8ED597842657C523508713FABA.crl
                          rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/1208C3DCE5E08C8ED597842657C523508713FABA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1208C3DCE5E08C8ED597842657C523508713FABA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 15:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:09:d7:c5:ef:fe:34:46:dd:6a:ad:01:c2:2a:e4:12:16:09:a2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1208C3DCE5E08C8ED597842657C523508713FABA
        Validity
            Not Before: Apr  8 18:38:18 2026 GMT
            Not After : Apr  7 18:43:18 2027 GMT
        Subject: CN=9442715BAF93A3BF2A9E3D688F58DB7B6E05E90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:9d:53:22:ed:c1:b1:e0:4a:56:05:c2:60:
                    50:f0:9a:4d:8b:03:d5:ae:03:22:dd:00:ac:92:27:
                    99:59:cf:54:0a:c3:cd:21:a8:0e:72:3f:b3:e4:8b:
                    2d:fa:df:ba:09:83:60:a2:c1:23:35:1e:8f:03:8f:
                    45:91:d8:10:05:a3:46:66:3e:ea:76:5f:bb:55:af:
                    fc:13:2f:1d:3e:85:64:4f:2f:5d:55:41:5d:13:5a:
                    6a:73:00:7e:85:cc:f0:2d:69:b7:c6:25:e3:ea:09:
                    4e:b1:59:c0:4a:87:49:34:16:73:8f:e5:77:b2:a7:
                    90:f1:6e:19:67:45:b7:6e:b0:bd:ac:cb:bf:a2:78:
                    f0:58:f0:20:24:85:2c:2b:d8:ae:e3:98:7a:52:d3:
                    10:20:db:d1:f5:be:1e:35:b6:23:4c:be:9c:bf:69:
                    63:c2:1b:c8:01:66:3d:e0:83:05:87:3f:7c:dc:e1:
                    87:d2:22:53:d7:fd:e7:6a:80:50:de:f7:44:39:0f:
                    2b:55:7c:89:e7:6f:76:9d:95:81:2d:13:41:fd:50:
                    7d:94:e6:80:c0:2e:ab:0d:9d:77:9f:9b:29:85:22:
                    ab:2d:30:19:29:6e:76:4e:63:3c:92:06:62:1a:60:
                    95:a8:5b:30:ec:fa:6f:71:5d:98:88:c3:83:ce:27:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:42:71:5B:AF:93:A3:BF:2A:9E:3D:68:8F:58:DB:7B:6E:05:E9:0F
            X509v3 Authority Key Identifier:
                keyid:12:08:C3:DC:E5:E0:8C:8E:D5:97:84:26:57:C5:23:50:87:13:FA:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/1208C3DCE5E08C8ED597842657C523508713FABA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1208C3DCE5E08C8ED597842657C523508713FABA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/323830343a343935343a3a2f33322d3438203d3e20323637313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4954::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:9f:6c:22:cb:5e:fc:a0:6f:29:b1:4f:49:ad:e1:b0:13:78:
         54:16:99:88:68:78:bd:94:04:b7:c1:cf:5c:fc:ed:99:c7:9c:
         27:ca:74:8a:4a:b4:86:82:61:e3:a9:5d:a3:47:5c:c7:6f:f7:
         9d:45:fc:4c:2b:b5:65:0a:d7:44:88:26:13:fa:41:1d:84:22:
         8a:ca:0d:3c:2b:77:26:00:c6:a6:85:f9:18:7c:9a:3d:f3:80:
         e6:c6:42:ac:cd:1c:9c:87:bc:3b:cd:5f:04:54:ab:2f:f4:c4:
         55:1f:88:14:92:e9:ec:bc:34:d7:2d:8d:ce:7b:1e:ca:43:2e:
         92:e7:95:79:c2:0b:60:7c:52:99:50:15:18:dd:ab:f8:6d:82:
         e7:57:dd:fd:89:e2:23:36:77:87:49:7a:15:3c:80:4d:3f:4e:
         37:4b:48:3d:99:e5:ee:f5:47:91:fb:e4:31:12:ca:13:fa:84:
         8f:50:d4:52:38:65:5a:23:05:13:eb:85:d1:58:7a:9e:ee:03:
         d3:38:4f:84:cc:d5:e0:f5:99:97:1b:e6:29:aa:3c:ad:8d:a7:
         03:1d:35:76:a4:92:31:ff:34:6b:e8:0a:05:f1:26:d1:74:13:
         79:1d:3a:8f:33:be:b0:a5:6e:b7:0f:13:e8:53:35:18:fd:04:
         1b:df:b5:f1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUawnXxe/+NEbdaq0BwirkEhYJooYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIwOEMzRENFNUUwOEM4RUQ1OTc4NDI2NTdDNTIzNTA4
NzEzRkFCQTAeFw0yNjA0MDgxODM4MThaFw0yNzA0MDcxODQzMThaMDMxMTAvBgNV
BAMTKDk0NDI3MTVCQUY5M0EzQkYyQTlFM0Q2ODhGNThEQjdCNkUwNUU5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBM51TIu3BseBKVgXCYFDwmk2L
A9WuAyLdAKySJ5lZz1QKw80hqA5yP7Pkiy3637oJg2CiwSM1Ho8Dj0WR2BAFo0Zm
Pup2X7tVr/wTLx0+hWRPL11VQV0TWmpzAH6FzPAtabfGJePqCU6xWcBKh0k0FnOP
5Xeyp5DxbhlnRbdusL2sy7+iePBY8CAkhSwr2K7jmHpS0xAg29H1vh41tiNMvpy/
aWPCG8gBZj3ggwWHP3zc4YfSIlPX/edqgFDe90Q5DytVfInnb3adlYEtE0H9UH2U
5oDALqsNnXefmymFIqstMBkpbnZOYzySBmIaYJWoWzDs+m9xXZiIw4POJ9eNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlEJxW6+To78qnj1oj1jbe24F6Q8wHwYDVR0j
BBgwFoAUEgjD3OXgjI7Vl4QmV8UjUIcT+rowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9kVXNnZmphTDE2ODFLeFpuRGZNd29yZFBLWGNoSHdkOXF5Zk15eHE4eDh6
LzAvMTIwOEMzRENFNUUwOEM4RUQ1OTc4NDI2NTdDNTIzNTA4NzEzRkFCQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xMjA4QzNEQ0U1RTA4QzhFRDU5
Nzg0MjY1N0M1MjM1MDg3MTNGQUJBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
VXNnZmphTDE2ODFLeFpuRGZNd29yZFBLWGNoSHdkOXF5Zk15eHE4eDh6LzAvMzIz
ODMwMzQzYTM0MzkzNTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3MzEz
NzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARJVDANBgkqhkiG9w0BAQsFAAOCAQEAsZ9sIste/KBv
KbFPSa3hsBN4VBaZiGh4vZQEt8HPXPztmcecJ8p0ikq0hoJh46ldo0dcx2/3nUX8
TCu1ZQrXRIgmE/pBHYQiisoNPCt3JgDGpoX5GHyaPfOA5sZCrM0cnIe8O81fBFSr
L/TEVR+IFJLp7Lw01y2NznseykMukueVecILYHxSmVAVGN2r+G2C51fd/YniIzZ3
h0l6FTyATT9ON0tIPZnl7vVHkfvkMRLKE/qEj1DUUjhlWiMFE+uF0Vh6nu4D0zhP
hMzV4PWZlxvmKao8rY2nAx01dqSSMf80a+gKBfEm0XQTeR06jzO+sKVutw8T6FM1
GP0EG9+18Q==
-----END CERTIFICATE-----
Generated at Thu Apr 9 17:53:00 2026 by rpki-client