Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/323830343a343962343a3a2f33322d313238203d3e20323637313938.roa
File:                     323830343a343962343a3a2f33322d313238203d3e20323637313938.roa (raw, json)
Hash identifier:          v1V7nTf9t7v8wKNnTetIQY7Zaitp+ijShRFdlL38DGE=
Subject key identifier:   0B:DD:A6:AE:2A:CE:45:97:44:80:DA:22:BB:2A:BC:34:60:1C:68:06
Certificate issuer:       /CN=1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1
Certificate serial:       4B024CDD9BB58052ADAAE7FF3D580DAFD8D8E32D
Authority key identifier: 1A:D5:26:2B:FA:23:BB:41:CD:0B:D6:C4:C3:1C:31:9F:D5:61:EC:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/323830343a343962343a3a2f33322d313238203d3e20323637313938.roa
Signing time:             Tue 24 Mar 2026 14:01:35 +0000
ROA not before:           Tue 24 Mar 2026 13:56:35 +0000
ROA not after:            Tue 23 Mar 2027 14:01:35 +0000
asID:                     267198
IP address blocks:        2804:49b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.crl
                          rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:02:4c:dd:9b:b5:80:52:ad:aa:e7:ff:3d:58:0d:af:d8:d8:e3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1
        Validity
            Not Before: Mar 24 13:56:35 2026 GMT
            Not After : Mar 23 14:01:35 2027 GMT
        Subject: CN=0BDDA6AE2ACE45974480DA22BB2ABC34601C6806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:7d:9f:67:4e:5c:93:14:67:3c:c9:d6:1b:
                    f0:f9:4e:c4:f5:25:7a:37:55:d7:f1:42:69:a9:c1:
                    2d:dd:76:46:93:7f:8a:74:98:42:66:4f:9c:21:d0:
                    9b:57:f0:5c:26:24:b6:25:b1:16:2f:72:2e:21:b9:
                    af:f4:eb:97:3f:fc:b5:d5:a4:74:da:d4:03:43:37:
                    ab:3a:75:e8:4f:f4:8f:ef:9a:e8:5e:00:29:e1:40:
                    c4:ea:c0:10:3f:2a:c0:85:5d:0e:2d:95:56:da:b9:
                    c1:05:13:bb:1a:7f:92:ce:a8:68:c8:03:d8:cf:eb:
                    c7:dc:56:91:81:87:87:7d:56:d8:c1:84:d5:25:8d:
                    04:f1:6e:bc:f2:40:d4:96:eb:c9:18:75:e2:20:49:
                    cc:69:47:88:7a:d4:78:a9:38:32:3e:32:7a:c0:45:
                    3c:c4:0e:cb:c6:11:fb:ed:c9:a2:0a:4e:4e:b4:dc:
                    a1:4b:db:0e:aa:d4:61:5f:96:72:77:8d:eb:83:ee:
                    bc:76:4b:49:d9:a0:25:4f:6e:27:26:ec:3d:1c:fa:
                    60:fe:c9:7f:52:be:d1:40:de:74:de:38:d7:98:d2:
                    6c:47:e1:0d:29:06:2d:aa:15:2c:63:15:0b:d1:06:
                    ec:47:6e:aa:f4:d1:82:95:5a:4d:52:7f:2e:a9:0e:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:A6:AE:2A:CE:45:97:44:80:DA:22:BB:2A:BC:34:60:1C:68:06
            X509v3 Authority Key Identifier:
                keyid:1A:D5:26:2B:FA:23:BB:41:CD:0B:D6:C4:C3:1C:31:9F:D5:61:EC:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/323830343a343962343a3a2f33322d313238203d3e20323637313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:3e:b5:6a:5e:ce:1d:8c:3d:a4:c0:e5:46:57:df:6d:2b:e0:
         c9:9f:05:db:98:b4:6d:90:8e:83:81:05:95:da:cd:39:a4:a8:
         22:fe:82:b7:23:73:db:5d:19:d3:17:ae:fd:12:94:9f:71:94:
         98:61:3d:da:e3:16:09:b8:51:51:fb:34:d8:8c:cf:8f:3f:41:
         df:74:8e:fa:4b:d1:53:fd:7a:41:1b:29:4b:b9:2c:ca:d8:18:
         1e:75:ef:e9:0c:d4:61:30:8c:43:31:bd:1e:cc:a9:1c:59:33:
         92:36:ed:1a:20:e5:97:ec:f5:49:26:4b:e2:db:09:ca:40:a7:
         cb:96:81:36:ff:0d:fe:54:fc:09:d6:85:8f:fb:1b:f0:ed:35:
         32:eb:e5:af:bc:85:7b:fd:df:51:58:41:29:74:98:ac:18:72:
         8e:24:f5:91:98:66:a7:26:50:41:d6:5f:aa:44:10:be:ef:9a:
         77:a1:72:ab:fb:94:95:d2:c2:7f:98:47:57:57:fa:5b:66:65:
         6c:c4:22:df:f8:cf:ee:63:6d:e6:bc:4d:59:ca:e8:50:17:25:
         d7:1f:70:e2:92:ed:5c:b1:84:bb:9a:46:23:eb:e2:0f:4a:4e:
         19:a8:da:f8:f6:68:59:c1:7e:06:f5:f1:7c:68:24:86:b1:9d:
         ac:e7:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:26 2026 by rpki-client