Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3333203d3e20323731313032.roa
File:                     323830343a373634633a3a2f33322d3333203d3e20323731313032.roa (raw, json)
Hash identifier:          NzAd5GKPZyBrP8G0oTX1r0E5w1ocd3EjVm0GNhmNoWk=
Subject key identifier:   3A:6C:E2:48:A7:DF:DD:A4:84:04:3E:27:F3:CE:BE:56:2E:4D:CE:E0
Certificate issuer:       /CN=5A3B4E697A24607B6169C79F41A7C296B1430141
Certificate serial:       648B41DD2435645E90455A103D0226473F7B7131
Authority key identifier: 5A:3B:4E:69:7A:24:60:7B:61:69:C7:9F:41:A7:C2:96:B1:43:01:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3B4E697A24607B6169C79F41A7C296B1430141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3333203d3e20323731313032.roa
Signing time:             Sun 22 Mar 2026 05:16:41 +0000
ROA not before:           Sun 22 Mar 2026 05:11:41 +0000
ROA not after:            Sun 21 Mar 2027 05:16:41 +0000
asID:                     271102
IP address blocks:        2804:764c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/5A3B4E697A24607B6169C79F41A7C296B1430141.crl
                          rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/5A3B4E697A24607B6169C79F41A7C296B1430141.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3B4E697A24607B6169C79F41A7C296B1430141.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 04:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8b:41:dd:24:35:64:5e:90:45:5a:10:3d:02:26:47:3f:7b:71:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B4E697A24607B6169C79F41A7C296B1430141
        Validity
            Not Before: Mar 22 05:11:41 2026 GMT
            Not After : Mar 21 05:16:41 2027 GMT
        Subject: CN=3A6CE248A7DFDDA484043E27F3CEBE562E4DCEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:f8:25:27:d0:ff:ae:25:e9:cb:0c:4a:51:
                    79:a4:0a:cf:d3:3b:aa:1f:92:62:0f:e8:17:05:72:
                    82:8f:54:c7:4d:1c:12:05:bd:3b:ae:c6:1c:e5:d6:
                    f4:86:d4:48:c5:c5:b6:98:fc:0b:5f:06:db:94:31:
                    ad:0a:cd:56:f5:b2:50:57:d4:b1:98:85:11:6d:f1:
                    df:01:ac:1e:8e:e0:3b:0a:9e:91:70:71:0a:10:4d:
                    bb:fa:b8:29:a2:2b:6e:21:5d:f0:af:24:9a:25:23:
                    98:a3:17:f7:82:58:99:17:30:e5:36:28:42:18:ea:
                    02:71:4a:35:26:99:47:0a:7a:38:3e:32:44:f5:78:
                    3c:46:90:4c:2e:7d:a4:1b:5e:fe:b7:41:7b:e1:8d:
                    94:e4:de:50:bb:f3:27:fe:72:cb:bf:21:ae:43:54:
                    d3:ba:8b:4a:51:77:c3:45:9d:2e:3f:58:34:1e:65:
                    e2:10:93:6a:d8:a0:e7:54:9c:ed:4e:d1:1d:f5:76:
                    c2:75:17:ec:a7:d7:18:2a:6b:eb:19:46:6d:bf:fc:
                    6b:c3:69:6e:e5:45:47:42:c8:93:d4:62:20:70:0d:
                    81:46:12:3d:ad:27:62:20:25:f1:6b:dd:cc:e7:2b:
                    f2:22:43:68:26:d8:73:40:e1:f7:06:26:11:0b:b0:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6C:E2:48:A7:DF:DD:A4:84:04:3E:27:F3:CE:BE:56:2E:4D:CE:E0
            X509v3 Authority Key Identifier:
                keyid:5A:3B:4E:69:7A:24:60:7B:61:69:C7:9F:41:A7:C2:96:B1:43:01:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/5A3B4E697A24607B6169C79F41A7C296B1430141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3B4E697A24607B6169C79F41A7C296B1430141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3333203d3e20323731313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:764c::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:32:83:87:20:67:b1:65:03:c9:24:60:00:d8:40:71:74:95:
         e8:9f:d1:85:84:63:a3:ae:31:89:25:7d:7d:b6:60:24:43:ac:
         84:d8:2a:c1:d1:eb:07:5d:fc:d3:3f:b4:fd:9f:96:8c:da:d7:
         dd:66:f0:7d:50:2d:b5:f7:0f:5e:ae:43:e9:87:e6:09:2a:76:
         f7:51:9b:be:e9:ea:25:c0:c1:4f:39:a1:29:d4:75:06:f7:c2:
         9d:5b:ec:ce:53:79:a7:d5:cf:0d:94:ee:19:91:29:dc:19:9f:
         a7:8c:de:a4:72:7e:04:73:ee:33:49:54:46:f2:39:ab:20:d8:
         fd:86:4f:6e:46:6e:c8:ef:1d:18:3c:e1:c1:8c:f9:fb:fe:bd:
         a9:7d:af:7f:5a:a1:2e:d8:d2:35:df:93:c3:5d:62:d5:f4:95:
         b9:c8:39:2f:a0:8a:28:db:2c:cb:ce:2c:27:bb:d2:d1:e8:86:
         7a:1a:2b:68:9f:52:98:ef:1f:73:a2:c6:c8:d9:d4:b5:3d:02:
         41:57:3b:c4:66:77:a4:87:9c:13:a1:62:df:00:33:b3:be:7f:
         82:15:d5:65:23:66:e6:61:d6:bd:dc:a0:f1:25:b4:05:0a:ac:
         cb:a3:29:0a:6f:15:02:d7:62:fd:97:6a:54:20:d1:0b:07:05:
         2e:3e:b6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:44 2026 by rpki-client