Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa
File:                     323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa (raw, json)
Hash identifier:          BdSMfSRYxyHQaDhYqwADZowSpf9fCyGy8SkzO/L7/LI=
Subject key identifier:   85:04:C4:4B:95:90:04:7B:4C:68:E3:8F:C9:E6:64:53:78:C9:99:B5
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       9B6B177EA7FEC941751D48D739124866F60864
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa
Signing time:             Wed 08 Apr 2026 20:53:19 +0000
ROA not before:           Wed 08 Apr 2026 20:48:19 +0000
ROA not after:            Wed 07 Apr 2027 20:53:19 +0000
asID:                     263085
IP address blocks:        2804:96c:6300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9b:6b:17:7e:a7:fe:c9:41:75:1d:48:d7:39:12:48:66:f6:08:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: Apr  8 20:48:19 2026 GMT
            Not After : Apr  7 20:53:19 2027 GMT
        Subject: CN=8504C44B9590047B4C68E38FC9E6645378C999B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:af:b2:20:c8:da:e7:8d:1f:d9:b9:9e:bc:
                    fd:a4:a7:f4:08:c8:a8:8a:62:58:06:3a:63:ad:3d:
                    06:c4:56:a7:be:d2:17:14:39:fd:ff:72:df:83:30:
                    d8:aa:2a:8e:81:ea:db:12:96:76:c9:d8:bc:0e:9a:
                    e5:01:83:d8:76:c0:27:71:18:93:9e:97:98:2a:5a:
                    22:22:4a:41:e8:a5:0a:8f:b6:b2:88:9d:06:92:52:
                    ed:63:10:d0:35:7e:62:2d:58:1c:b3:0f:a5:83:c7:
                    39:94:8e:f1:3d:04:bd:75:80:3e:12:62:e0:23:dc:
                    ff:1b:98:f5:90:50:3d:d1:b9:a5:1c:d7:54:de:39:
                    ab:56:7b:88:ad:e6:ba:ed:0e:3c:7d:41:0a:07:c9:
                    e4:14:05:6f:07:c5:41:0c:e8:d9:8a:51:6d:01:ea:
                    3d:d3:92:de:d5:e7:86:e7:90:ed:27:22:25:51:7d:
                    fa:d7:a6:bd:87:f1:65:76:29:c0:42:32:3f:f0:2a:
                    b6:cf:b6:f2:87:8c:12:51:3d:20:36:3f:9f:8d:47:
                    34:ac:f2:ed:8f:f8:3c:9a:93:29:08:06:50:fb:9e:
                    e3:88:75:c3:aa:af:5b:b7:ec:fd:89:61:aa:24:f3:
                    8d:d7:dc:be:ee:0b:57:21:fd:a2:91:ab:b4:16:d8:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:04:C4:4B:95:90:04:7B:4C:68:E3:8F:C9:E6:64:53:78:C9:99:B5
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96c:6300::/40

    Signature Algorithm: sha256WithRSAEncryption
         d1:5a:68:31:84:70:a3:b1:4f:a2:d3:39:9c:c7:57:70:6d:96:
         38:e0:59:58:ee:1a:3f:c4:2a:e1:cd:e2:7d:49:e7:62:67:d4:
         c0:39:f7:23:c8:bb:d3:99:a2:66:a0:81:26:9b:5b:41:8e:f5:
         d4:2c:f9:30:dd:a3:5e:70:e7:d5:fe:73:d2:d1:d9:4c:4e:27:
         8c:7e:40:ba:21:f4:fd:f5:a5:c4:bf:7c:0b:25:e7:90:3b:fc:
         47:42:9e:3f:68:e0:dc:67:08:54:1b:98:e7:c6:e9:3b:79:d3:
         83:19:d1:c5:99:b6:e2:15:22:e4:2c:31:9b:5c:04:9f:f5:52:
         4c:93:72:c1:31:1b:43:42:3a:4d:af:3a:11:af:fe:f5:7c:2f:
         91:5b:7d:f2:f1:17:13:04:2a:5a:55:db:42:01:79:8d:d3:16:
         65:1f:fe:10:56:15:08:6e:e6:4b:96:e8:53:a1:08:05:82:96:
         74:4e:fd:2a:0e:ba:f9:62:97:30:b7:c7:2c:a0:4a:8c:cf:23:
         38:17:32:b4:72:bb:71:12:cc:ba:d3:ed:99:31:19:40:19:0c:
         85:97:7b:58:7e:6f:8f:2a:ad:06:d2:92:36:4d:c8:42:1a:b0:
         34:c5:b1:aa:37:2e:a9:28:be:ac:d2:ba:f3:bd:22:14:cb:e5:
         be:f5:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 21:59:00 2026 by rpki-client