Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa
File:                     323830343a373935303a3a2f33332d3438203d3e20323731323938.roa (raw, json)
Hash identifier:          rhuqp1qVKEyDN3iAJkFUIBDyCBlND6sba0No32BvaOw=
Subject key identifier:   8E:F7:95:90:48:65:88:52:6E:58:19:0B:A0:B3:77:6B:95:B8:87:22
Certificate issuer:       /CN=315DDEA82F4151678E22C7DE6D37282137387EEA
Certificate serial:       6B85F89601D93F790432C7E47C682EA14812858D
Authority key identifier: 31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa
Signing time:             Wed 29 Apr 2026 16:21:33 +0000
ROA not before:           Wed 29 Apr 2026 16:16:33 +0000
ROA not after:            Wed 28 Apr 2027 16:21:33 +0000
asID:                     271298
IP address blocks:        2804:7950::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl
                          rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:85:f8:96:01:d9:3f:79:04:32:c7:e4:7c:68:2e:a1:48:12:85:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315DDEA82F4151678E22C7DE6D37282137387EEA
        Validity
            Not Before: Apr 29 16:16:33 2026 GMT
            Not After : Apr 28 16:21:33 2027 GMT
        Subject: CN=8EF79590486588526E58190BA0B3776B95B88722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:56:01:54:9f:76:64:71:3a:c4:25:36:8a:
                    86:31:db:ba:f1:61:94:dd:6b:50:12:79:72:56:94:
                    bf:e2:df:96:5d:67:63:63:5b:fb:8c:37:b6:30:40:
                    21:16:cd:03:5f:fe:78:eb:a7:99:ac:74:55:c9:4a:
                    cc:85:69:b8:46:33:08:95:d0:a7:53:d8:6d:6a:af:
                    ba:87:a4:e7:e6:cc:14:47:9c:b2:9c:2e:44:0d:cb:
                    ca:3a:4f:e5:e7:51:4b:8d:b5:c0:7b:dc:5e:bd:8b:
                    40:4d:b7:c6:b7:cd:60:1c:ee:53:b9:09:ff:97:d2:
                    b1:9e:fd:37:38:48:88:52:ad:6a:6e:47:e8:d4:6c:
                    b4:d7:df:c7:95:8f:d8:bf:73:71:c4:f1:3f:80:6f:
                    91:50:7b:80:0d:6f:c3:bc:fc:ce:9c:3f:c5:6f:7f:
                    8c:25:29:64:a6:b4:5f:d0:62:a1:68:44:3a:4b:14:
                    15:1a:ce:bb:1d:11:a7:46:f4:02:2a:ea:3a:ba:ac:
                    0b:b1:42:40:93:f1:c2:82:a0:61:18:69:ee:75:e5:
                    a2:6e:82:1b:36:5e:a0:81:ac:17:06:fc:f7:15:d8:
                    a3:38:5d:f6:71:ed:12:cc:fb:f5:dd:75:7a:c4:11:
                    8f:e7:a6:bc:ae:70:a8:f4:b3:08:8b:e5:61:c0:8d:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F7:95:90:48:65:88:52:6E:58:19:0B:A0:B3:77:6B:95:B8:87:22
            X509v3 Authority Key Identifier:
                keyid:31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950::/33

    Signature Algorithm: sha256WithRSAEncryption
         7a:e2:16:e0:45:58:86:8f:b3:13:c2:90:8a:c6:4c:ad:6a:51:
         50:61:89:97:2e:66:e3:c0:2d:d8:8b:9d:bf:dc:90:27:01:22:
         a7:4e:e6:d2:b2:dd:0e:b6:e1:db:b5:8a:0a:de:f4:7d:95:d6:
         33:69:37:bb:c2:9c:40:a4:34:ae:d8:df:b1:27:51:53:e2:d3:
         b0:04:19:79:4e:78:be:ff:12:e6:3d:b7:f3:9b:69:11:60:bd:
         cc:87:73:68:46:25:d8:83:a2:6d:e8:53:69:4b:6e:b8:66:65:
         79:32:c1:46:8b:87:37:f8:29:ad:f5:56:56:6b:99:a0:6c:4a:
         c9:32:a9:f4:14:d6:ea:bc:b2:5f:d2:f3:ad:e7:1e:49:06:56:
         f8:f4:4a:a8:a4:3b:e2:ee:d3:06:f8:4f:f3:e2:88:9d:93:4d:
         a4:b5:54:68:52:ab:82:27:43:01:26:d6:ad:d5:49:6e:3b:35:
         1b:33:a9:e6:66:c1:f0:b2:91:72:24:20:5b:94:ed:ca:ba:59:
         07:7b:8f:04:a1:cd:93:ac:54:64:15:0e:3d:3c:58:95:2d:7e:
         b9:38:34:c0:27:59:4d:b4:04:c8:ed:5f:98:f5:f2:d3:34:0d:
         d0:13:ad:4f:56:df:1c:32:7c:0d:bf:31:36:0a:b8:7e:68:47:
         bc:68:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:45:16 2026 by rpki-client