Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a613030303a3a2f33352d3335203d3e203238323532.roa
File:                     323830343a313534343a613030303a3a2f33352d3335203d3e203238323532.roa (raw, json)
Hash identifier:          JP2Ybnpwv+heo7T0wqu5NaXiDj50Xu0ZXYTbDqsVb3U=
Subject key identifier:   B4:32:59:2D:4F:00:BD:D2:2A:ED:60:D5:12:AB:27:5E:7F:D9:F6:CE
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       40124E88CD65835A4FC337BD132ADF01AC153BC1
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a613030303a3a2f33352d3335203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:14 +0000
ROA not before:           Wed 11 Mar 2026 19:08:14 +0000
ROA not after:            Wed 10 Mar 2027 19:13:14 +0000
asID:                     28252
IP address blocks:        2804:1544:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:12:4e:88:cd:65:83:5a:4f:c3:37:bd:13:2a:df:01:ac:15:3b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:14 2026 GMT
            Not After : Mar 10 19:13:14 2027 GMT
        Subject: CN=B432592D4F00BDD22AED60D512AB275E7FD9F6CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:2c:55:9d:44:72:4c:ef:3f:80:c6:e9:dc:
                    9d:38:41:87:26:a9:56:c1:19:6c:0d:a6:88:3e:85:
                    4b:63:8d:65:a4:2e:27:89:87:05:95:16:7f:cf:58:
                    10:a3:2f:20:75:df:f6:5f:f9:1c:c8:ab:39:5d:3b:
                    17:10:f8:21:4a:75:c6:09:23:50:8f:31:fa:55:4d:
                    42:88:0a:85:05:e6:ce:10:80:9f:7e:17:66:27:2f:
                    e9:6c:a9:a8:b4:55:b0:fb:8d:b3:1d:80:d5:af:e2:
                    aa:ed:51:9d:ec:ec:8f:54:4e:e0:3a:5d:72:da:2f:
                    4c:8c:e6:b9:c4:09:e7:7b:9b:5d:85:92:5e:c4:85:
                    d3:e7:0c:db:f3:7c:0c:6b:60:c0:30:28:b5:60:ad:
                    a6:32:88:f5:ef:2c:6b:ea:06:af:8a:13:b4:5f:70:
                    b3:4b:a4:f4:31:5d:f5:75:fa:1a:96:15:88:dc:18:
                    81:6a:d6:47:f1:16:92:97:e1:f7:5e:cb:7e:bf:ed:
                    83:94:0a:e9:6f:20:f8:5c:79:39:10:03:d2:6a:c4:
                    1a:a8:a8:2d:7f:ad:68:53:2d:e9:92:b5:0f:27:d8:
                    e6:c7:85:66:0c:fb:ec:c3:e8:60:f7:6a:43:25:b2:
                    2f:a4:b2:1a:de:90:71:1f:1c:82:78:47:14:8d:13:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:32:59:2D:4F:00:BD:D2:2A:ED:60:D5:12:AB:27:5E:7F:D9:F6:CE
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a613030303a3a2f33352d3335203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         3c:82:7d:d9:f0:87:dd:2d:32:13:fc:8f:ba:90:8c:85:f4:fa:
         83:02:ec:32:18:71:e5:86:73:7e:47:03:09:c4:31:58:6a:fc:
         d6:61:da:d6:c9:c6:96:ac:02:9f:98:e0:b3:fa:b7:13:00:da:
         8e:6c:f6:84:ab:bb:25:f2:0e:91:a7:6b:d6:6f:60:f1:9d:fd:
         48:6c:2d:36:7f:0d:01:80:56:c5:af:cb:4a:95:91:e4:b3:8a:
         4b:f3:e0:ca:68:33:a7:86:65:08:1b:80:03:72:1c:4c:cc:a6:
         34:29:92:71:36:ae:c6:ab:0e:e4:bd:08:d7:11:8b:e1:ac:24:
         88:19:d0:c9:00:ce:ad:7b:34:ac:3b:7b:44:ac:2f:e3:27:63:
         7b:28:04:b7:27:70:f4:3c:62:dc:27:c7:40:d4:eb:93:be:bf:
         2f:59:3d:30:70:a0:b4:45:a4:2d:fd:13:50:24:cc:83:b8:92:
         b0:06:1c:41:6b:dd:93:19:9f:b3:00:d4:16:94:e6:db:df:7e:
         d8:0f:96:d1:df:b1:0a:92:3d:c6:4f:6d:5f:d5:24:75:5d:67:
         b3:69:dc:5e:5d:9a:ec:a5:9f:91:5b:2f:b2:8c:46:48:c8:5d:
         5f:1e:0f:05:e0:59:2c:90:f2:20:41:ba:d3:10:7b:f1:89:2b:
         10:ff:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:29:59 2026 by rpki-client