Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d313238203d3e20323638313535.roa
File:                     323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (raw, json)
Hash identifier:          nayI7J1KRks0fHXTEl8pAt5h3J97gzKS2iQ10pibVoI=
Subject key identifier:   C3:D4:C6:19:1A:FF:AF:00:89:F2:13:0A:48:69:68:8E:7F:67:53:B0
Certificate issuer:       /CN=14E397E75E3B5F90A92612DBF4DF1D897C61772D
Certificate serial:       3EE09BFD4F777711BCBF0307DB99A9FBA0BE9F6F
Authority key identifier: 14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d313238203d3e20323638313535.roa
Signing time:             Tue 24 Mar 2026 10:45:10 +0000
ROA not before:           Tue 24 Mar 2026 10:40:10 +0000
ROA not after:            Tue 23 Mar 2027 10:45:10 +0000
asID:                     268155
IP address blocks:        2804:58e0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl
                          rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 08:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e0:9b:fd:4f:77:77:11:bc:bf:03:07:db:99:a9:fb:a0:be:9f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14E397E75E3B5F90A92612DBF4DF1D897C61772D
        Validity
            Not Before: Mar 24 10:40:10 2026 GMT
            Not After : Mar 23 10:45:10 2027 GMT
        Subject: CN=C3D4C6191AFFAF0089F2130A4869688E7F6753B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:24:28:1d:bd:23:31:43:33:62:43:bd:8c:
                    8a:e5:04:99:11:5a:50:dc:d1:75:4a:1c:a9:5e:a8:
                    25:bc:0c:07:fd:c1:ae:60:3f:ab:4d:c6:58:5d:da:
                    58:88:d6:46:e7:dc:d8:df:54:88:79:11:cb:11:01:
                    0d:9c:06:f5:5b:42:0f:fa:3e:54:13:9a:7a:07:89:
                    99:2b:4d:73:78:a4:a9:93:b5:c6:fb:51:22:5f:82:
                    f1:f1:4c:83:99:6b:a3:b4:57:2d:fc:49:b1:ad:d4:
                    58:e8:ce:c2:9f:20:7b:58:4c:82:a2:9c:ce:ea:3a:
                    ac:d0:ab:b7:37:9e:ce:7f:f3:c6:22:fa:2a:f6:55:
                    19:29:88:6f:b2:c4:6d:43:66:c7:d9:a8:a7:03:4b:
                    df:52:3b:e6:09:1b:44:81:10:24:86:95:1d:4d:21:
                    21:55:b6:0a:fc:6b:6b:34:56:7e:fb:f5:44:c7:21:
                    cc:f3:07:c1:eb:c0:a2:a1:9c:bd:f6:ce:e9:e9:d6:
                    3e:16:ef:63:07:9f:a5:6a:d7:1f:ca:d9:54:2d:96:
                    e1:29:16:cf:cb:cf:ef:82:9d:70:48:ab:18:51:3c:
                    db:0f:48:12:2f:49:92:f3:3a:53:85:ed:df:06:d0:
                    3c:f2:ca:f5:76:08:e5:bd:a8:07:93:58:b8:2d:6d:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D4:C6:19:1A:FF:AF:00:89:F2:13:0A:48:69:68:8E:7F:67:53:B0
            X509v3 Authority Key Identifier:
                keyid:14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d313238203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:36:ac:fc:8b:b7:38:2b:d5:08:fb:58:e8:2a:bb:76:70:14:
         27:35:d5:1e:45:f2:46:7a:b7:f8:7d:2f:2b:84:bd:3b:bd:51:
         23:d4:1a:49:40:9a:8f:9b:38:25:1b:c4:8e:98:15:f3:66:da:
         29:dd:01:bd:18:c2:53:41:bf:8e:d1:33:26:5b:73:c3:fa:64:
         dd:8c:a3:0f:5b:f8:26:91:41:d6:09:db:03:2c:8e:50:d0:df:
         2a:cf:68:5f:2b:5f:ae:15:b5:cd:b5:ab:6e:71:8b:66:07:21:
         f6:94:98:27:e3:38:20:33:e8:db:4d:ea:04:b9:79:33:4f:76:
         34:bc:d0:62:42:d6:2c:8f:74:86:b6:7d:bc:0d:7b:b9:83:ca:
         92:fa:da:f6:61:79:4c:e6:73:d4:de:14:7f:d3:45:9b:87:44:
         0c:eb:f8:5a:cf:5b:b1:66:e8:df:45:12:09:03:96:19:61:4a:
         f4:65:cc:94:f2:ee:17:86:a4:ba:b8:b0:ca:a0:ba:8b:df:80:
         fa:18:85:ae:b5:18:d5:73:d2:85:99:7e:83:48:5a:15:73:3c:
         be:f1:dc:1c:a3:fe:81:99:09:28:2f:e4:a4:1d:19:a1:6b:65:
         b3:94:3c:8e:30:6a:72:ef:bc:a0:54:04:5b:2c:19:cc:f4:da:
         e4:19:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:54:16 2026 by rpki-client