Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/323830343a313335303a3a2f33322d313238203d3e20323633353238.roa
File:                     323830343a313335303a3a2f33322d313238203d3e20323633353238.roa (raw, json)
Hash identifier:          yqW5ty7IWSGEP3yiN7bfr0oMZCgBCOekNZrISrdCCYU=
Subject key identifier:   3E:3E:A3:67:FD:65:28:2C:A4:67:CD:B4:5C:70:5D:8E:EB:47:70:D4
Certificate issuer:       /CN=1F7B940A7F746AC83D9CDA266811C4C47B7B3479
Certificate serial:       2DD4B9D8B074BAFE8555B95F5BF5A3FFC61F55D6
Authority key identifier: 1F:7B:94:0A:7F:74:6A:C8:3D:9C:DA:26:68:11:C4:C4:7B:7B:34:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/323830343a313335303a3a2f33322d313238203d3e20323633353238.roa
Signing time:             Thu 19 Mar 2026 20:31:05 +0000
ROA not before:           Thu 19 Mar 2026 20:26:05 +0000
ROA not after:            Thu 18 Mar 2027 20:31:05 +0000
asID:                     263528
IP address blocks:        2804:1350::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.crl
                          rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d4:b9:d8:b0:74:ba:fe:85:55:b9:5f:5b:f5:a3:ff:c6:1f:55:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F7B940A7F746AC83D9CDA266811C4C47B7B3479
        Validity
            Not Before: Mar 19 20:26:05 2026 GMT
            Not After : Mar 18 20:31:05 2027 GMT
        Subject: CN=3E3EA367FD65282CA467CDB45C705D8EEB4770D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:2b:8a:ff:3c:14:fd:98:de:ae:58:76:74:
                    16:73:02:04:48:d0:68:86:6b:3b:4f:2a:d5:fd:bd:
                    79:27:6b:f0:17:54:bf:ba:73:a0:90:aa:12:24:9c:
                    25:e0:a3:9b:a6:f8:41:8f:c9:5b:fd:8f:1f:04:fb:
                    21:71:d2:51:66:b1:78:2d:f1:ce:4d:db:19:4a:4c:
                    69:1b:ef:cf:7b:83:10:90:88:be:f6:03:7d:93:1a:
                    19:17:1b:b8:ea:6b:ea:61:cc:f8:dd:44:70:28:f5:
                    5b:99:8c:75:f9:88:98:70:2b:bd:c1:8a:73:d4:f7:
                    42:85:c5:0e:29:9a:5e:8b:55:e7:af:cc:1b:ab:cd:
                    0a:b6:75:cf:61:da:1f:dd:c9:26:31:06:d9:42:53:
                    a3:3f:47:91:c3:02:2f:6b:06:d5:8f:31:f0:dd:1c:
                    fc:ad:e3:42:26:03:86:00:f8:1a:e4:cf:f9:59:08:
                    25:ad:28:1c:ff:e9:23:1d:17:81:8b:ad:cc:5c:24:
                    96:45:ec:ae:31:82:85:68:23:c4:c8:3b:5a:dd:b8:
                    38:dd:71:c0:10:ed:40:5c:1f:55:86:d0:30:d3:d8:
                    d6:5b:f9:d9:d2:99:16:85:4b:35:3e:b6:b6:c2:84:
                    9f:34:ee:35:24:36:1c:25:43:8b:e2:ca:dd:32:b9:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3E:A3:67:FD:65:28:2C:A4:67:CD:B4:5C:70:5D:8E:EB:47:70:D4
            X509v3 Authority Key Identifier:
                keyid:1F:7B:94:0A:7F:74:6A:C8:3D:9C:DA:26:68:11:C4:C4:7B:7B:34:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/323830343a313335303a3a2f33322d313238203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1350::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:59:cf:46:ff:7f:bc:25:7f:09:77:83:9a:03:78:d0:e0:
         8b:b2:c7:27:8b:51:2c:22:6d:ba:e1:29:b1:09:5d:92:3c:24:
         90:7b:76:19:0f:d1:5e:37:f2:9d:08:7b:79:bd:39:c4:f7:71:
         5f:fa:eb:bb:11:18:f4:56:96:03:c9:77:f7:d6:c5:f5:78:f0:
         70:a2:af:d0:60:a6:b0:98:61:cd:9a:5d:bf:b6:1c:d1:17:b3:
         39:62:67:6e:5d:66:93:57:63:80:be:ee:4e:90:3b:d0:e9:26:
         a4:2f:a2:ee:5f:e2:90:b4:81:f0:f9:e2:4c:b0:e1:e7:6c:26:
         b8:ce:da:c5:eb:ce:e4:64:ed:e6:c0:98:7a:11:51:64:33:85:
         39:d3:31:1a:59:1e:10:ec:3c:1a:fc:c7:a7:8a:c4:1d:fc:65:
         96:54:0b:50:0d:d8:1b:28:ae:d7:b6:6d:e0:1a:e2:47:1d:92:
         bb:56:dd:9b:92:fd:61:e6:a6:bd:f5:68:3f:a0:73:73:79:94:
         3c:48:b3:d7:d6:e0:58:a3:d3:47:17:63:e7:6d:2e:09:e2:ef:
         97:bf:bc:ed:3c:3e:35:e7:be:45:2b:1b:5c:d3:35:e0:dc:77:
         05:23:8a:8a:15:de:7d:6c:97:29:ed:27:ec:a7:ea:6e:06:bf:
         96:71:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:57:22 2026 by rpki-client