Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/323830343a326466343a3a2f33322d313238203d3e20323635333134.roa
File:                     323830343a326466343a3a2f33322d313238203d3e20323635333134.roa (raw, json)
Hash identifier:          Mfs9W4uBeTdMyu9KPsn8GLxcTj39YdcYlYg3SRYntTY=
Subject key identifier:   B1:58:AA:FE:80:60:B4:FF:6C:41:E0:47:25:8A:8E:E2:8F:7E:22:34
Certificate issuer:       /CN=38CA677C90C7FC7382D14DAB610FD6C570C655EA
Certificate serial:       0155D5A2ED4539657A7794004E6EAB2DC5205507
Authority key identifier: 38:CA:67:7C:90:C7:FC:73:82:D1:4D:AB:61:0F:D6:C5:70:C6:55:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CA677C90C7FC7382D14DAB610FD6C570C655EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/323830343a326466343a3a2f33322d313238203d3e20323635333134.roa
Signing time:             Fri 20 Mar 2026 20:06:10 +0000
ROA not before:           Fri 20 Mar 2026 20:01:10 +0000
ROA not after:            Fri 19 Mar 2027 20:06:10 +0000
asID:                     265314
IP address blocks:        2804:2df4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/38CA677C90C7FC7382D14DAB610FD6C570C655EA.crl
                          rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/38CA677C90C7FC7382D14DAB610FD6C570C655EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CA677C90C7FC7382D14DAB610FD6C570C655EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:55:d5:a2:ed:45:39:65:7a:77:94:00:4e:6e:ab:2d:c5:20:55:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CA677C90C7FC7382D14DAB610FD6C570C655EA
        Validity
            Not Before: Mar 20 20:01:10 2026 GMT
            Not After : Mar 19 20:06:10 2027 GMT
        Subject: CN=B158AAFE8060B4FF6C41E047258A8EE28F7E2234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:3e:d5:b4:46:a7:45:b8:90:49:c6:25:2f:
                    cf:da:b3:73:37:5a:c6:60:61:9d:04:1f:59:5c:66:
                    5e:db:54:b9:0c:8b:6b:e6:0a:60:fb:20:8e:31:ee:
                    f3:a2:04:62:c5:5f:93:0e:b4:1a:05:63:5e:51:52:
                    f5:b5:1c:fe:02:ef:ce:05:f1:01:54:e6:a6:fe:63:
                    06:5e:04:48:8e:92:26:a0:fc:2c:86:f7:75:42:65:
                    6d:7d:0a:48:ba:a8:df:7e:64:77:c4:bc:b9:9f:41:
                    21:b8:7b:e1:e7:d5:da:a8:3e:3a:2a:2f:97:c4:b4:
                    17:90:8f:ad:09:45:f9:e0:6d:a0:d3:3b:a1:1a:b8:
                    8d:17:6e:1e:88:90:42:bc:a8:4a:9a:18:49:1e:87:
                    ee:94:35:77:b1:cf:8d:92:f5:69:43:69:bb:01:20:
                    b0:6d:11:d9:ed:50:a3:10:d7:e8:b3:4f:90:fc:43:
                    08:f4:3c:f6:d5:ab:17:e4:e0:69:df:3f:c8:77:d6:
                    b9:2b:6e:81:63:16:42:ce:0d:84:c0:86:1c:97:76:
                    b2:13:2d:c0:0d:7c:24:af:90:0f:80:b9:6d:52:c4:
                    13:51:51:c9:e8:a7:e9:cc:04:8f:d3:63:d4:6b:82:
                    9d:f6:9f:d8:c0:d6:91:bc:b3:17:c7:93:ef:d5:10:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:58:AA:FE:80:60:B4:FF:6C:41:E0:47:25:8A:8E:E2:8F:7E:22:34
            X509v3 Authority Key Identifier:
                keyid:38:CA:67:7C:90:C7:FC:73:82:D1:4D:AB:61:0F:D6:C5:70:C6:55:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/38CA677C90C7FC7382D14DAB610FD6C570C655EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CA677C90C7FC7382D14DAB610FD6C570C655EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/323830343a326466343a3a2f33322d313238203d3e20323635333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:91:d4:9d:8a:b1:a5:51:d8:bd:a5:53:b4:20:ce:36:f2:ba:
         81:ec:3e:8e:8b:7c:c6:3d:ad:02:64:67:ac:16:75:97:88:e2:
         61:65:2f:b6:31:ca:13:a0:f6:b6:fe:6f:51:ab:40:e7:1b:a9:
         30:8f:63:1c:bf:67:55:63:91:16:63:71:70:e7:48:48:97:7a:
         fc:4f:1a:52:1f:6d:66:93:50:bb:09:27:8d:a6:7d:78:1a:75:
         12:de:86:46:e7:95:c4:fe:6c:a1:4c:14:91:8a:13:a4:42:ed:
         fd:bd:af:cd:e5:aa:89:76:b8:08:7a:38:69:41:59:01:2f:7e:
         25:1c:52:52:e2:d9:ab:6a:b6:06:43:67:4e:b2:7e:0d:15:3f:
         1f:19:f1:58:a2:82:ee:f5:8f:43:51:46:3c:33:1f:96:ea:15:
         56:e9:eb:4d:49:6d:02:45:09:bf:ec:67:c7:c9:1c:8a:9a:a4:
         b2:ec:e9:69:97:3f:73:f2:59:b3:64:f8:4f:d6:5e:3a:07:63:
         6c:c1:78:4f:1b:d5:27:ac:11:3c:6a:6b:03:cd:3c:36:74:37:
         89:0f:f2:a4:e6:15:5c:d8:80:18:3e:ca:fb:e2:2d:f9:c7:2b:
         bd:b5:6e:da:92:77:86:74:da:1c:8e:a6:bc:eb:e0:2e:f1:43:
         47:e9:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:09:26 2026 by rpki-client