Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/323830343a346132633a3a2f33322d313238203d3e20323637323232.roa
File:                     323830343a346132633a3a2f33322d313238203d3e20323637323232.roa (raw, json)
Hash identifier:          G3RSI6sJ8IgfSRKsUOwAlIqaJR+HqhO6L0qVkB+VD9s=
Subject key identifier:   30:8A:B8:F0:C7:01:B7:FF:B1:A9:4A:3F:B3:6F:9E:09:EA:B5:EB:C6
Certificate issuer:       /CN=21CD91C985E580029306365FB6A119DAEFE368C7
Certificate serial:       21EEDBF872C13997FD7A547FA07A9856A9071AFD
Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/323830343a346132633a3a2f33322d313238203d3e20323637323232.roa
Signing time:             Wed 18 Mar 2026 19:49:13 +0000
ROA not before:           Wed 18 Mar 2026 19:44:13 +0000
ROA not after:            Wed 17 Mar 2027 19:49:13 +0000
asID:                     267222
IP address blocks:        2804:4a2c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl
                          rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ee:db:f8:72:c1:39:97:fd:7a:54:7f:a0:7a:98:56:a9:07:1a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7
        Validity
            Not Before: Mar 18 19:44:13 2026 GMT
            Not After : Mar 17 19:49:13 2027 GMT
        Subject: CN=308AB8F0C701B7FFB1A94A3FB36F9E09EAB5EBC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:cf:d2:e7:4e:79:83:f5:28:43:c5:49:d9:
                    dc:0b:23:60:1f:98:13:44:7c:73:aa:12:a4:6a:39:
                    ae:3e:e6:a9:0f:e6:58:fc:03:e7:25:69:ac:b2:19:
                    02:93:15:6f:93:66:c6:30:bc:49:e4:27:d3:6b:b3:
                    4a:0d:03:cc:f1:60:07:ff:17:9f:10:ad:cb:24:a9:
                    25:2c:f6:ab:35:b4:3a:4a:e3:d4:3d:98:a0:a3:34:
                    27:cf:17:d9:79:61:d1:e1:96:a6:12:c6:8b:47:88:
                    26:a1:8c:c4:ad:d9:f9:18:e2:5a:cf:2f:0b:df:d7:
                    53:cf:54:ca:5e:9b:f9:f9:91:cc:4f:cd:34:11:50:
                    30:c9:05:9c:c0:9e:e6:09:79:d7:1b:af:f4:e2:a1:
                    0f:a1:84:b4:c7:43:c1:fe:c7:ec:d3:a9:1c:ea:42:
                    12:0c:b4:32:fb:8f:93:5e:65:d8:72:74:bc:35:41:
                    08:86:c7:80:09:bc:71:73:4d:7b:60:69:86:6e:e1:
                    56:4f:c6:3c:09:17:82:36:4a:d2:ab:58:9a:6d:a0:
                    13:43:94:6c:47:f8:50:df:b8:f7:31:71:0e:e0:56:
                    b7:70:0c:1f:fb:ef:ed:af:4f:86:cb:9c:c7:c9:45:
                    1d:92:34:7f:52:f7:ea:9a:69:71:69:0d:8c:a3:fd:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8A:B8:F0:C7:01:B7:FF:B1:A9:4A:3F:B3:6F:9E:09:EA:B5:EB:C6
            X509v3 Authority Key Identifier:
                keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/323830343a346132633a3a2f33322d313238203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:b2:20:90:49:03:9e:9f:b0:e8:3b:98:3a:a6:4e:46:72:b2:
         bd:51:68:98:75:be:db:05:75:41:8f:36:6c:89:e0:4b:80:40:
         e8:9c:39:99:94:16:8a:ae:62:b1:71:48:ae:ac:63:13:da:9e:
         6b:da:3e:15:ca:70:3d:fb:35:10:81:75:06:43:9f:29:f1:f3:
         a5:80:b9:50:bf:02:2e:35:c4:45:9e:87:5b:72:9e:36:c8:93:
         88:ad:4d:91:d0:53:b6:d4:00:94:2d:12:98:d4:cb:fe:aa:48:
         48:0c:d7:8b:73:73:95:c7:10:ce:04:60:f8:72:c2:7e:e0:5a:
         a2:55:8c:ca:d3:2c:ef:0a:4a:e6:29:c8:e1:a5:60:ec:37:03:
         a2:68:1b:e5:10:9b:59:74:5b:ee:1d:24:39:95:34:90:69:5f:
         f5:44:1d:6c:77:66:94:71:2c:ab:b6:c2:4d:b6:2d:32:5d:ee:
         63:ad:44:4d:d0:ae:bc:6d:24:e4:bb:0a:34:dd:13:d9:fd:d1:
         a2:8a:c8:e2:3f:d4:b8:0f:ce:15:84:32:1d:44:d9:6e:8f:66:
         48:d9:64:a7:f7:c4:b5:af:c1:83:ef:a7:c4:c4:cf:9b:74:9a:
         d7:a5:7a:a0:d9:c9:73:9b:3f:0e:0f:ce:f5:26:03:54:68:8d:
         40:c1:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:08 2026 by rpki-client