Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/323830343a343664303a3a2f33322d313238203d3e20323637303133.roa
File:                     323830343a343664303a3a2f33322d313238203d3e20323637303133.roa (raw, json)
Hash identifier:          lvy+xmAAVCenXAOgoQZyvZtVWutJz+/HLqIWGB+gTKE=
Subject key identifier:   B0:55:D8:25:2B:80:D2:9D:FF:31:54:76:68:0C:62:3B:0E:9F:D9:A6
Certificate issuer:       /CN=1C4D72EE314EFB7CE350AF052C58D3C8818D7575
Certificate serial:       3B431BAC637F83554DF035F732767BEA37AAC7CB
Authority key identifier: 1C:4D:72:EE:31:4E:FB:7C:E3:50:AF:05:2C:58:D3:C8:81:8D:75:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/323830343a343664303a3a2f33322d313238203d3e20323637303133.roa
Signing time:             Wed 11 Mar 2026 21:42:38 +0000
ROA not before:           Wed 11 Mar 2026 21:37:38 +0000
ROA not after:            Wed 10 Mar 2027 21:42:38 +0000
asID:                     267013
IP address blocks:        2804:46d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.crl
                          rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:43:1b:ac:63:7f:83:55:4d:f0:35:f7:32:76:7b:ea:37:aa:c7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4D72EE314EFB7CE350AF052C58D3C8818D7575
        Validity
            Not Before: Mar 11 21:37:38 2026 GMT
            Not After : Mar 10 21:42:38 2027 GMT
        Subject: CN=B055D8252B80D29DFF315476680C623B0E9FD9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:b8:02:ef:1a:d8:cd:8f:ec:4d:94:67:f0:
                    24:a7:f1:47:4a:71:0e:e7:9a:34:b9:c7:f8:f3:2f:
                    ac:96:04:4f:25:80:1b:c1:17:59:2c:d5:14:1a:0c:
                    f0:01:5c:1b:c4:be:ed:d1:53:04:ef:f7:17:2f:54:
                    4a:53:96:d1:07:c2:65:c7:d0:02:69:1f:24:88:32:
                    15:8d:5c:4d:38:d8:d1:04:30:4f:39:dd:3b:b1:73:
                    16:48:bf:f3:8d:4c:02:c2:a9:4c:97:b2:fb:0d:3e:
                    a3:b8:00:03:61:cb:8c:90:a8:6c:e3:61:bf:d8:e9:
                    c3:d2:7d:ee:c9:03:b5:82:e9:6d:d3:fe:9e:4b:c8:
                    d6:f5:19:5b:36:94:38:dc:bc:8f:56:d4:d3:ae:d6:
                    57:ed:52:91:2e:22:3d:0b:3c:41:ea:23:2e:ff:77:
                    07:ed:7f:b1:5d:b4:a5:a4:8c:fa:58:0a:70:6d:a3:
                    c0:03:26:25:6a:45:01:92:b6:42:5a:07:ce:b7:eb:
                    7c:8f:94:a0:8a:67:30:57:95:b4:a9:cd:2d:fe:5c:
                    25:9c:40:1b:d5:0e:3e:3c:85:f4:6b:26:74:c7:2d:
                    85:58:92:ff:cd:ea:5f:d8:13:f3:23:e6:a4:2a:94:
                    ce:78:6d:bf:ac:02:e2:77:5f:6e:5b:83:6c:c3:c7:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:55:D8:25:2B:80:D2:9D:FF:31:54:76:68:0C:62:3B:0E:9F:D9:A6
            X509v3 Authority Key Identifier:
                keyid:1C:4D:72:EE:31:4E:FB:7C:E3:50:AF:05:2C:58:D3:C8:81:8D:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/323830343a343664303a3a2f33322d313238203d3e20323637303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:f7:41:95:0e:f5:59:5c:58:63:2b:3b:cf:7d:5b:26:ed:f1:
         ce:ab:94:0f:f2:54:d6:7e:96:32:13:70:f9:8e:ee:ff:28:b7:
         9d:3e:c3:a1:8c:57:f9:cc:27:c3:42:42:9f:0b:b4:46:09:be:
         e7:b8:2b:93:34:b2:cf:a2:73:c8:69:33:ff:93:46:c1:07:91:
         56:ec:be:f8:7f:bf:78:cf:a1:5b:65:9d:52:ad:a3:90:76:53:
         9c:29:f2:7f:1c:f9:46:83:6f:62:01:91:1e:7f:77:58:2e:73:
         4a:9f:cd:7d:9f:d7:ba:40:48:e9:18:27:96:b4:92:99:78:90:
         93:55:79:cf:0d:9d:27:25:04:1e:3e:79:27:63:d5:0f:83:74:
         39:a2:a7:13:9d:b4:89:a2:8a:81:a2:28:20:39:f3:2c:cb:8b:
         94:57:a0:18:1e:46:cf:cb:b4:d5:8d:02:eb:14:f6:9f:11:6a:
         7f:10:1a:14:df:f8:94:59:bf:2c:6a:9d:17:07:b3:89:e5:b1:
         b5:07:d1:4f:0c:45:35:a9:f9:2e:32:6f:65:15:d9:a1:ed:ee:
         50:ed:f2:d0:d1:2e:f5:e9:14:dc:3c:a7:fc:11:00:2a:85:c7:
         08:f9:3c:d6:8a:88:23:f1:34:da:e2:d1:e8:62:14:d9:43:d1:
         37:4b:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:35:35 2026 by rpki-client