Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/323830343a386333343a3a2f33322d3336203d3e20323733373837.roa
File:                     323830343a386333343a3a2f33322d3336203d3e20323733373837.roa (raw, json)
Hash identifier:          ZX7Xo0jWa3ZG7gf68QXeswu0lFRjYrkBAKIVWIvPcpM=
Subject key identifier:   A2:73:01:9D:F4:AF:B5:2A:3B:39:E9:44:BA:0F:8B:BD:90:8D:0C:E8
Certificate issuer:       /CN=39CFD8E08767B7EDB074E84F592154C51141B85D
Certificate serial:       4549B634678015D9DE003D54C074D6D2D2601874
Authority key identifier: 39:CF:D8:E0:87:67:B7:ED:B0:74:E8:4F:59:21:54:C5:11:41:B8:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CFD8E08767B7EDB074E84F592154C51141B85D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/323830343a386333343a3a2f33322d3336203d3e20323733373837.roa
Signing time:             Fri 20 Mar 2026 14:31:14 +0000
ROA not before:           Fri 20 Mar 2026 14:26:14 +0000
ROA not after:            Fri 19 Mar 2027 14:31:14 +0000
asID:                     273787
IP address blocks:        2804:8c34::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/39CFD8E08767B7EDB074E84F592154C51141B85D.crl
                          rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/39CFD8E08767B7EDB074E84F592154C51141B85D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CFD8E08767B7EDB074E84F592154C51141B85D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:49:b6:34:67:80:15:d9:de:00:3d:54:c0:74:d6:d2:d2:60:18:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CFD8E08767B7EDB074E84F592154C51141B85D
        Validity
            Not Before: Mar 20 14:26:14 2026 GMT
            Not After : Mar 19 14:31:14 2027 GMT
        Subject: CN=A273019DF4AFB52A3B39E944BA0F8BBD908D0CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:dd:45:e4:f9:bb:27:c9:6b:33:ed:63:ca:
                    72:84:df:e0:3e:db:f5:76:29:79:06:44:a0:e9:6c:
                    3e:27:cf:c4:f5:48:58:c6:97:16:7a:9e:ea:d2:8f:
                    94:0e:81:af:e2:8d:f9:af:2b:b0:fd:00:7e:82:dc:
                    d3:33:be:6d:3d:45:87:00:2c:c4:8b:1e:db:67:89:
                    5d:95:cd:bc:69:e6:0f:0c:10:21:7e:2c:9f:91:b0:
                    7b:fd:9d:76:15:ad:8f:36:33:82:9b:5a:50:90:df:
                    75:ac:15:6e:d1:f2:46:9d:3d:eb:02:bb:7c:77:69:
                    71:11:b2:5c:45:b1:85:2b:26:68:d1:58:df:a9:8c:
                    46:8d:4a:c9:98:eb:24:15:14:85:40:3c:ae:cf:60:
                    d4:50:42:8b:59:20:77:16:5c:1a:91:bb:7f:e3:79:
                    72:14:18:8d:01:a7:49:38:80:7e:63:fb:3c:a5:cd:
                    24:9c:b2:3b:c5:8b:fe:a8:e1:15:6a:c5:f8:5e:a3:
                    22:9c:e1:4d:6d:2f:bc:3d:e2:be:70:02:c1:fd:65:
                    e6:f2:fc:9e:ba:ef:1c:cd:d7:17:e8:89:a5:d6:ea:
                    2c:90:d9:56:4f:11:d9:bb:ad:eb:3f:12:3f:3b:0d:
                    dd:6f:bd:a3:ce:12:a7:e7:b0:f5:04:67:c0:e0:fe:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:01:9D:F4:AF:B5:2A:3B:39:E9:44:BA:0F:8B:BD:90:8D:0C:E8
            X509v3 Authority Key Identifier:
                keyid:39:CF:D8:E0:87:67:B7:ED:B0:74:E8:4F:59:21:54:C5:11:41:B8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/39CFD8E08767B7EDB074E84F592154C51141B85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CFD8E08767B7EDB074E84F592154C51141B85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56wuQLSFhXjCZTJcwGZeGqM5rCd1PoxrLT9ruzVdJcZC/1/323830343a386333343a3a2f33322d3336203d3e20323733373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c34::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:82:95:8b:be:6c:23:a7:c8:a5:cc:13:8b:f3:bd:0f:11:1b:
         ef:09:dc:82:22:b7:19:4d:9a:0f:6c:00:35:c0:42:47:4d:d9:
         51:ee:ec:73:71:8e:06:cf:5f:71:22:ba:0c:ee:e0:e5:46:e3:
         82:91:c1:5a:ea:15:cd:ad:fa:50:61:6d:f7:d6:77:b7:06:4c:
         1f:7d:ce:84:b0:a7:5a:c0:59:a3:8c:cf:35:2b:0a:0d:3f:24:
         64:47:fb:f9:e1:71:10:e1:ba:df:fb:a9:8a:e6:09:38:93:ee:
         d6:7a:71:6f:50:60:5d:e3:e4:f3:c3:b4:db:d0:71:cf:4e:a6:
         3b:3a:f3:bf:0c:9b:5a:85:c3:d8:06:29:d9:87:90:42:60:5c:
         6d:8f:c9:53:ef:17:1d:94:49:a3:fa:55:5c:85:1c:59:a5:05:
         6d:9e:86:62:8e:92:69:b2:f3:49:70:93:ad:2b:22:a9:35:58:
         0d:b3:b3:e2:26:a5:eb:c7:cc:b1:c3:30:44:cc:fa:fb:d1:82:
         0e:b6:bf:29:8c:63:c1:d5:81:1d:20:73:4e:7c:29:cd:02:d2:
         6d:f5:e4:8e:b2:64:8f:02:37:ec:66:f4:5f:19:6e:dd:61:e1:
         e1:b2:91:80:99:58:be:94:23:a9:30:76:1e:22:6c:29:19:b5:
         26:97:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:52:52 2026 by rpki-client