Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33322d313238203d3e20323639323833.roa
File:                     323830343a363233383a3a2f33322d313238203d3e20323639323833.roa (raw, json)
Hash identifier:          vfGA1Rd2uFV+j+uM53XtnJ1+NXaczcpR96XCgihaQA0=
Subject key identifier:   18:27:D3:6E:40:4D:54:40:C5:FC:04:14:00:97:70:3D:80:29:83:3B
Certificate issuer:       /CN=E0DAB0F74391224418A77A05A78A3BE9DD57E910
Certificate serial:       0482D6A53A739BDB4C4486E8CC45D2D7CEF31527
Authority key identifier: E0:DA:B0:F7:43:91:22:44:18:A7:7A:05:A7:8A:3B:E9:DD:57:E9:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0DAB0F74391224418A77A05A78A3BE9DD57E910.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33322d313238203d3e20323639323833.roa
Signing time:             Tue 17 Mar 2026 16:29:58 +0000
ROA not before:           Tue 17 Mar 2026 16:24:58 +0000
ROA not after:            Tue 16 Mar 2027 16:29:58 +0000
asID:                     269283
IP address blocks:        2804:6238::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/E0DAB0F74391224418A77A05A78A3BE9DD57E910.crl
                          rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/E0DAB0F74391224418A77A05A78A3BE9DD57E910.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0DAB0F74391224418A77A05A78A3BE9DD57E910.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 16:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:82:d6:a5:3a:73:9b:db:4c:44:86:e8:cc:45:d2:d7:ce:f3:15:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0DAB0F74391224418A77A05A78A3BE9DD57E910
        Validity
            Not Before: Mar 17 16:24:58 2026 GMT
            Not After : Mar 16 16:29:58 2027 GMT
        Subject: CN=1827D36E404D5440C5FC04140097703D8029833B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:46:ca:35:8a:56:ba:e7:69:89:a4:1e:e3:bf:
                    d0:b5:b7:2e:b7:c9:ec:39:bb:66:58:78:8a:f2:1d:
                    d5:fb:f2:6c:90:38:fc:44:91:f4:58:b4:e9:d3:7e:
                    26:96:cf:7f:bc:c5:fd:71:ba:63:ce:4d:4a:56:42:
                    72:47:e7:33:3d:bf:8f:29:05:78:22:6c:a4:f4:7e:
                    11:38:e4:de:ed:70:c6:79:69:e8:49:c4:59:59:7c:
                    ff:d3:0b:5b:02:f5:b2:d3:57:41:20:84:47:f4:69:
                    5a:a1:64:cf:8f:61:8e:ed:c8:ed:ce:99:77:19:cb:
                    61:9a:29:4e:1c:25:1c:e8:fd:73:f3:52:59:1c:c0:
                    11:77:ff:6f:a9:67:b1:11:9d:5e:3e:a1:fc:6f:ef:
                    5b:e0:bf:a8:49:46:55:ab:13:6a:f6:4c:85:50:02:
                    15:34:18:42:7e:8b:58:33:99:36:c8:17:a3:94:9d:
                    c7:00:14:dd:58:13:5d:a2:8b:0e:e0:14:b8:7d:c7:
                    29:00:f8:c9:1b:ae:94:a6:1c:2c:05:8a:30:b2:d0:
                    1c:04:e6:0f:08:97:3e:e8:b1:54:8f:ac:be:a4:c1:
                    7d:27:95:41:bb:b4:aa:1b:b0:c8:18:78:f1:db:a4:
                    fb:06:8a:68:e3:94:de:40:dd:20:00:12:9c:78:c6:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:27:D3:6E:40:4D:54:40:C5:FC:04:14:00:97:70:3D:80:29:83:3B
            X509v3 Authority Key Identifier:
                keyid:E0:DA:B0:F7:43:91:22:44:18:A7:7A:05:A7:8A:3B:E9:DD:57:E9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/E0DAB0F74391224418A77A05A78A3BE9DD57E910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0DAB0F74391224418A77A05A78A3BE9DD57E910.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33322d313238203d3e20323639323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6238::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:7c:57:c3:b5:c3:82:c3:a4:23:7d:7b:bd:57:bc:c4:77:
         c5:8f:da:08:8b:5c:c2:02:8a:da:98:ec:97:90:f6:96:f0:15:
         e2:c1:6d:19:b6:3d:7b:6f:d1:fc:3b:9b:fc:3c:33:16:27:17:
         22:cc:0b:bf:be:c9:1c:4b:c8:2e:b6:af:0a:af:d5:f9:30:ce:
         d8:6d:c1:2b:03:d5:21:aa:a1:15:8b:ad:f9:f2:9b:d1:dc:d5:
         88:21:dc:46:ba:9e:7b:58:6f:ff:9d:c3:ab:78:0e:6f:f7:74:
         d4:52:65:9b:85:8b:9e:0d:1b:0f:d8:93:1e:d4:da:e7:e3:8b:
         51:b2:be:47:ac:73:81:12:c6:25:5e:e4:d3:df:d5:45:df:53:
         f5:e2:de:9f:ee:72:59:a6:c0:19:7f:bc:2a:19:e5:af:5e:51:
         3d:78:8a:2b:4f:f8:06:d5:71:d6:b9:57:1f:5d:d4:89:0d:1e:
         d2:1c:80:3b:a3:bc:02:b9:5f:7a:9a:ea:c5:90:dd:5e:74:ce:
         7f:20:f9:19:95:97:e3:11:8e:46:94:ee:1e:99:de:6c:d2:5d:
         69:37:65:5a:25:be:1b:75:e5:0e:8b:38:4f:e0:1e:ff:e2:c9:
         70:31:fa:06:1d:a1:dd:d9:a9:8b:29:9c:60:74:82:c7:d4:b9:
         b7:5a:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:51 2026 by rpki-client