Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/323830343a33633a3a2f33322d3438203d3e203238353736.roa
File:                     323830343a33633a3a2f33322d3438203d3e203238353736.roa (raw, json)
Hash identifier:          UFn9mcS4Y/8FOng1mSVaP3bCrg3mX2aPmGWOhYb4ENg=
Subject key identifier:   1B:CB:34:7E:F7:27:C4:87:6E:C9:F1:72:82:FB:96:D2:32:2A:A3:2F
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       604327F72B6C5B59208F500F16C182F25A1636AF
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/323830343a33633a3a2f33322d3438203d3e203238353736.roa
Signing time:             Fri 20 Mar 2026 15:30:31 +0000
ROA not before:           Fri 20 Mar 2026 15:25:31 +0000
ROA not after:            Fri 19 Mar 2027 15:30:31 +0000
asID:                     28576
IP address blocks:        2804:3c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:43:27:f7:2b:6c:5b:59:20:8f:50:0f:16:c1:82:f2:5a:16:36:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Mar 20 15:25:31 2026 GMT
            Not After : Mar 19 15:30:31 2027 GMT
        Subject: CN=1BCB347EF727C4876EC9F17282FB96D2322AA32F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:83:38:56:44:c7:74:0a:4c:8e:ae:b0:65:
                    b0:a2:4a:50:a6:96:cd:a4:ce:7a:45:43:17:45:46:
                    c5:7f:5c:f8:5f:3a:a8:1b:08:2b:e1:78:40:55:7f:
                    fc:3c:21:da:ac:07:85:70:fd:8b:b4:1d:68:53:2d:
                    ce:27:c0:58:5a:33:43:6f:47:e4:af:b2:9f:08:32:
                    bc:5d:9f:82:c4:8d:b7:00:69:0b:eb:61:2f:59:9a:
                    e0:3f:36:30:85:25:47:21:d9:95:98:21:bb:20:8a:
                    dd:41:2d:f6:4f:0a:73:55:fe:aa:31:7a:51:a3:8e:
                    e1:a5:28:76:73:92:d2:f2:e1:ef:b8:65:a4:4e:b8:
                    09:68:c5:1a:e8:90:1c:57:ea:2d:a7:51:c3:b9:cc:
                    b5:13:f1:32:17:0a:6b:9a:fe:06:ee:22:8b:e1:02:
                    ee:d2:d3:86:2f:83:e9:2a:8f:fb:59:dc:9d:78:a2:
                    d1:23:9a:25:20:ba:cb:c7:6a:97:5e:3a:ef:11:82:
                    be:a8:55:98:db:d0:4b:34:81:60:03:55:73:cd:3c:
                    cd:ae:f8:3a:c8:97:7c:90:6a:b7:a4:da:35:b9:84:
                    7a:95:43:64:bb:ef:32:a8:82:f9:dc:c9:d4:9f:74:
                    32:80:58:8b:3b:c2:c3:be:70:e1:38:5e:c6:56:53:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CB:34:7E:F7:27:C4:87:6E:C9:F1:72:82:FB:96:D2:32:2A:A3:2F
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/323830343a33633a3a2f33322d3438203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:ee:7c:22:b4:a4:17:69:ef:70:7e:65:2c:54:20:52:de:5f:
         1d:45:43:cf:69:a4:56:ff:98:1a:22:55:b9:47:e2:2e:7a:35:
         90:b7:91:c8:be:79:e5:38:7e:2a:d5:ae:37:cd:0d:a0:69:61:
         1e:43:0e:a4:85:f1:a0:2a:c4:e9:65:35:1d:d5:d0:50:5d:da:
         3c:eb:3e:4f:17:16:77:ea:2d:64:42:ba:27:b7:d6:3a:b4:d8:
         da:9d:d7:fc:7f:ee:7b:52:17:3d:43:94:e2:60:93:10:e0:c6:
         04:a2:5d:89:b7:93:1c:ab:34:67:43:f6:a3:aa:ae:05:dd:42:
         b9:26:f8:f4:41:3c:40:bc:1c:8e:c0:46:87:56:d5:d2:b8:6e:
         53:59:75:0b:e4:c6:e6:a4:6f:d1:99:0a:d8:e3:9c:e6:c1:ad:
         b3:2a:d4:0a:f7:b9:e0:6e:55:26:0b:94:a4:6b:3a:e4:16:74:
         aa:c4:41:f8:c4:0b:1c:25:79:9a:66:8c:43:8d:88:5b:81:49:
         27:58:9b:cd:4c:29:d0:c9:eb:c9:53:00:ee:35:66:59:36:88:
         5a:c7:e5:7f:e4:f0:36:94:83:54:47:31:98:ea:98:03:46:9b:
         e6:04:01:05:b6:40:c6:40:62:30:83:e8:77:c9:cc:2a:5e:1d:
         ea:fa:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:21:57 2026 by rpki-client