Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/323830343a386332343a3a2f33322d313238203d3e20323733373832.roa
File:                     323830343a386332343a3a2f33322d313238203d3e20323733373832.roa (raw, json)
Hash identifier:          6DLWFuvih4EpHdWk51Y4Aw2oxw8m3jfWL2NHvmNSUEI=
Subject key identifier:   DC:C3:93:BD:10:F3:D3:F7:1A:F4:CA:6E:39:14:BB:2E:60:22:23:23
Certificate issuer:       /CN=7F436CE8C973E9416BD8C3CA2CED319197176A5E
Certificate serial:       2E1BD67133399154C3B75295AB8B89BCA170CA95
Authority key identifier: 7F:43:6C:E8:C9:73:E9:41:6B:D8:C3:CA:2C:ED:31:91:97:17:6A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F436CE8C973E9416BD8C3CA2CED319197176A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/323830343a386332343a3a2f33322d313238203d3e20323733373832.roa
Signing time:             Thu 19 Mar 2026 20:02:57 +0000
ROA not before:           Thu 19 Mar 2026 19:57:57 +0000
ROA not after:            Thu 18 Mar 2027 20:02:57 +0000
asID:                     273782
IP address blocks:        2804:8c24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/7F436CE8C973E9416BD8C3CA2CED319197176A5E.crl
                          rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/7F436CE8C973E9416BD8C3CA2CED319197176A5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F436CE8C973E9416BD8C3CA2CED319197176A5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1b:d6:71:33:39:91:54:c3:b7:52:95:ab:8b:89:bc:a1:70:ca:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F436CE8C973E9416BD8C3CA2CED319197176A5E
        Validity
            Not Before: Mar 19 19:57:57 2026 GMT
            Not After : Mar 18 20:02:57 2027 GMT
        Subject: CN=DCC393BD10F3D3F71AF4CA6E3914BB2E60222323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d2:5c:29:1e:df:e1:95:58:f1:ba:2a:be:46:
                    6e:ab:c9:f4:74:7b:37:d6:a5:54:e6:03:c9:76:80:
                    de:4a:7e:d5:27:74:65:d4:c8:8a:67:e0:81:68:bb:
                    72:7a:b6:b3:0d:a6:ae:72:f2:5e:08:f9:dd:75:55:
                    ee:a8:c4:16:24:69:18:56:1d:fd:71:65:6c:a8:d1:
                    98:77:c6:4d:1e:eb:73:13:ae:f8:39:71:48:d7:e0:
                    3d:3d:9f:75:81:56:bc:a3:bf:db:bc:7d:8e:ab:b7:
                    eb:e0:9a:20:4f:d8:72:e8:02:32:96:75:70:25:7b:
                    99:a4:40:2d:93:69:63:79:65:f3:e9:4d:c2:c0:99:
                    17:c0:07:89:7e:b3:c3:0c:27:62:d0:bd:01:c1:be:
                    d6:77:ca:64:ed:db:8a:bc:36:77:20:3a:c8:19:76:
                    48:38:16:9f:5a:e8:a7:e3:a7:b0:47:6a:82:f8:e8:
                    ed:0c:a0:aa:00:74:23:a1:58:26:c8:c3:71:77:05:
                    ea:7e:6d:9b:1d:9e:03:a1:01:8b:b6:69:20:c1:b7:
                    55:85:95:c3:4b:64:e8:dd:bb:c5:bd:08:6d:23:84:
                    76:0f:84:76:cc:37:b2:96:09:4e:26:23:8e:07:a3:
                    71:18:e5:f7:14:67:2e:88:a1:b1:a5:1d:6f:d8:ad:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:93:BD:10:F3:D3:F7:1A:F4:CA:6E:39:14:BB:2E:60:22:23:23
            X509v3 Authority Key Identifier:
                keyid:7F:43:6C:E8:C9:73:E9:41:6B:D8:C3:CA:2C:ED:31:91:97:17:6A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/7F436CE8C973E9416BD8C3CA2CED319197176A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F436CE8C973E9416BD8C3CA2CED319197176A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/323830343a386332343a3a2f33322d313238203d3e20323733373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c24::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:32:f5:c8:25:6c:ef:0c:b3:19:a9:7f:5c:09:0f:ad:92:
         bc:e6:b2:57:b4:68:bf:8e:ea:0e:e0:d3:c6:7c:77:4b:1d:57:
         20:c0:96:b0:cb:f5:5f:df:e0:88:36:20:56:57:91:66:7d:a1:
         80:a3:f6:a5:7d:dc:1a:1a:21:fd:d6:4a:63:37:6d:e8:6c:30:
         bc:01:1c:1a:70:c9:cd:0e:62:f6:e5:02:1b:64:7f:53:c1:66:
         93:5f:bb:57:e5:bf:a0:ee:e2:23:5b:fc:95:5b:4f:30:a2:2d:
         55:3f:82:21:6d:02:7c:35:6b:e3:1e:e5:88:74:ec:a5:84:de:
         c7:31:82:4f:97:bf:93:83:d5:42:ee:30:ad:4b:22:31:47:2f:
         67:86:bb:14:e2:83:c8:1b:04:1e:1e:f3:29:38:5b:fc:e5:37:
         e3:4c:63:18:a8:a4:94:85:3c:38:76:99:12:12:36:0a:27:3f:
         38:85:21:3f:3d:c7:ee:ba:6b:33:cc:e2:f1:00:58:70:75:99:
         73:f4:84:9b:4d:e4:b6:e6:a1:42:43:96:b1:d1:ae:68:44:e9:
         79:9a:61:7e:de:24:d5:af:c6:dc:6f:e5:c3:d0:8c:b1:3d:a7:
         21:e9:12:d7:45:74:09:31:8f:00:3b:ec:3b:83:88:1b:a6:99:
         d4:e3:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:42 2026 by rpki-client