Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a3a2f33322d3332203d3e20323637353330.roa
File:                     323830343a343264343a3a2f33322d3332203d3e20323637353330.roa (raw, json)
Hash identifier:          gg7SR/2jdbd/mkxi5XH8yUKR4ZDX0vlgqv0PMou/IzI=
Subject key identifier:   E9:A6:CC:F9:0C:51:F0:CE:34:22:EF:A9:CF:DD:4E:32:6E:48:C1:8A
Certificate issuer:       /CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
Certificate serial:       73E85E48C8C1C17B5261583695A12C98B42FDE8F
Authority key identifier: CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a3a2f33322d3332203d3e20323637353330.roa
Signing time:             Thu 19 Mar 2026 19:44:25 +0000
ROA not before:           Thu 19 Mar 2026 19:39:25 +0000
ROA not after:            Thu 18 Mar 2027 19:44:25 +0000
asID:                     267530
IP address blocks:        2804:42d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl
                          rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e8:5e:48:c8:c1:c1:7b:52:61:58:36:95:a1:2c:98:b4:2f:de:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
        Validity
            Not Before: Mar 19 19:39:25 2026 GMT
            Not After : Mar 18 19:44:25 2027 GMT
        Subject: CN=E9A6CCF90C51F0CE3422EFA9CFDD4E326E48C18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:da:48:65:16:83:36:81:30:7c:7d:da:4d:
                    7a:01:f8:a1:c3:fa:e2:23:0e:aa:fc:a0:71:dc:e0:
                    1b:63:93:6d:e6:22:c0:d6:61:fb:f0:ed:cd:e4:3b:
                    ae:92:a0:36:ca:54:e2:5b:37:4b:19:04:82:27:99:
                    f9:6f:c7:f0:60:e1:48:f2:b4:1b:32:02:e3:a7:70:
                    ae:f3:6d:d6:78:8d:ea:b3:2c:79:32:3f:52:b8:77:
                    06:e7:d9:a3:0b:f8:85:ab:6b:76:8b:ee:65:56:db:
                    69:1c:6c:04:6a:96:36:d6:10:ac:d7:7b:d8:d5:d5:
                    d7:95:e4:29:1d:33:e3:fe:e6:ea:c5:fb:f3:84:97:
                    98:da:cc:e6:97:18:a2:4c:64:3f:14:7a:63:f0:9a:
                    f9:fe:e2:50:d9:6a:3c:04:22:fe:48:c4:de:69:60:
                    74:72:11:1d:28:38:64:0e:3d:ee:09:66:15:da:b8:
                    17:5e:8b:a5:d7:b9:d3:65:01:f4:66:13:51:e1:f0:
                    f9:9b:a1:81:49:88:e4:d7:1a:c7:06:41:63:15:22:
                    f7:65:8e:17:c9:05:63:7e:8d:b7:ea:f1:24:d2:6e:
                    45:17:33:5e:c9:06:80:97:d8:71:14:6a:d5:eb:0f:
                    52:11:32:73:0f:3e:e6:25:96:fd:00:18:1a:0f:68:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:CC:F9:0C:51:F0:CE:34:22:EF:A9:CF:DD:4E:32:6E:48:C1:8A
            X509v3 Authority Key Identifier:
                keyid:CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/323830343a343264343a3a2f33322d3332203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:54:ef:d0:36:23:2b:41:71:99:16:1d:70:62:49:b2:c8:cb:
         07:ed:b5:2c:db:99:5d:f9:14:2d:57:c3:3e:d1:5e:26:37:05:
         1a:28:69:d4:0d:5f:1c:71:f0:97:b0:40:a7:28:fd:b6:65:41:
         2e:82:77:a9:2a:35:de:37:d1:2d:f6:0e:64:50:fc:c9:ec:05:
         8a:dc:42:78:c9:54:84:ae:6a:b6:1a:65:a8:41:92:8e:0e:9b:
         25:38:7e:7b:59:2d:d9:a0:d2:c3:c4:a0:f2:81:c7:5b:b8:ca:
         34:59:0a:54:79:64:83:17:be:d0:4a:e7:62:81:b8:00:a5:ee:
         64:31:62:b6:2f:4c:39:84:3e:68:31:46:ca:37:2a:57:42:3f:
         b7:5b:9b:de:48:8b:2c:c6:9b:d3:58:6c:e4:81:46:ca:50:b3:
         ea:60:29:04:56:b8:0d:98:f1:73:f4:97:33:98:31:e2:87:d6:
         b8:47:64:88:d2:67:2e:ee:bb:f3:e4:df:a0:7e:fd:a9:74:df:
         ba:f8:8f:75:31:60:c0:49:f9:3b:53:29:7a:2f:df:08:fd:a7:
         a6:ff:a0:4b:de:b5:9a:86:1b:1c:31:00:5c:58:c6:90:f2:28:
         f0:00:44:f0:33:2f:a7:f3:b0:aa:8d:e4:be:f5:a8:51:aa:e1:
         95:1c:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:20:11 2026 by rpki-client