Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/323830343a363037633a383030303a3a2f33362d3336203d3e20323639313730.roa
File:                     323830343a363037633a383030303a3a2f33362d3336203d3e20323639313730.roa (raw, json)
Hash identifier:          WBjcqQr3xFhN0DZKdLFZTiX7WZfuigAUWVCrTxQVWrU=
Subject key identifier:   38:07:63:6A:5F:5C:FF:1B:EC:ED:16:14:05:A9:D0:80:40:26:B8:C7
Certificate issuer:       /CN=3D580FBC905909266C331DDA6416C18006A24750
Certificate serial:       63DFB9371159BC8322DBC4B0473ACD5C62BF1C0C
Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/323830343a363037633a383030303a3a2f33362d3336203d3e20323639313730.roa
Signing time:             Sun 19 Apr 2026 14:31:50 +0000
ROA not before:           Sun 19 Apr 2026 14:26:50 +0000
ROA not after:            Sun 18 Apr 2027 14:31:50 +0000
asID:                     269170
IP address blocks:        2804:607c:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl
                          rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:df:b9:37:11:59:bc:83:22:db:c4:b0:47:3a:cd:5c:62:bf:1c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750
        Validity
            Not Before: Apr 19 14:26:50 2026 GMT
            Not After : Apr 18 14:31:50 2027 GMT
        Subject: CN=3807636A5F5CFF1BECED161405A9D0804026B8C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:7d:89:d0:25:8c:40:f0:cc:ee:47:bf:bb:
                    1b:f7:dc:7d:40:1a:38:09:00:e7:8b:85:6e:6f:24:
                    3f:60:aa:a6:ad:2a:d8:76:63:f2:de:72:e7:c0:03:
                    eb:77:7b:dc:ee:82:84:d5:dc:79:03:d4:9a:87:3c:
                    3d:3c:63:08:d0:c3:79:f9:2f:79:51:f6:d5:55:91:
                    14:39:a2:a3:59:91:58:c5:58:93:57:11:a2:65:48:
                    53:09:73:a6:8b:69:8c:c0:e6:81:e5:a4:92:5f:01:
                    0e:f7:f3:bd:49:3f:4c:20:db:ef:f1:5e:4b:e5:25:
                    2a:c7:7c:3f:1a:0e:d4:4a:6c:e3:b9:db:23:d8:3e:
                    db:46:73:61:cd:9a:7a:d9:13:cc:fa:90:53:43:6a:
                    a2:71:c5:3b:38:e2:a6:0e:16:97:ee:8a:d0:c0:8d:
                    f8:a4:c0:4c:1d:46:28:de:12:bf:74:eb:7b:e8:1c:
                    c6:17:9f:67:a4:7d:7c:85:58:ce:5e:76:bc:56:67:
                    8f:f0:d0:fb:c5:eb:47:0e:23:46:d8:60:27:90:9c:
                    cd:f8:3a:14:6a:00:15:af:b5:14:df:78:3c:6d:1c:
                    40:45:5a:29:45:64:1f:8d:6a:5f:a0:e0:44:f2:3b:
                    27:53:a9:82:07:d3:3a:8d:06:9a:e3:88:6c:08:b5:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:63:6A:5F:5C:FF:1B:EC:ED:16:14:05:A9:D0:80:40:26:B8:C7
            X509v3 Authority Key Identifier:
                keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/323830343a363037633a383030303a3a2f33362d3336203d3e20323639313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:607c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:5b:51:ee:29:57:2d:88:4a:f8:ef:d5:7f:f1:9a:12:5d:4a:
         c8:c6:b8:f4:be:07:f8:be:b2:af:58:81:17:b4:fe:f8:7e:26:
         2f:0f:5b:1d:f8:a1:bf:54:82:6b:17:01:d3:6b:f5:b3:71:0f:
         24:a8:f2:15:18:6f:eb:8d:a1:ef:3d:35:04:13:73:df:f6:7c:
         c0:d9:27:67:a6:66:0f:1c:88:2f:20:79:91:a5:f1:c6:42:0b:
         f9:1c:87:77:40:55:0b:66:06:13:51:f7:23:a6:08:34:f2:65:
         e6:5a:4b:35:52:24:85:ff:89:26:10:55:2b:0d:b3:3f:43:e9:
         0c:86:0d:17:1f:e0:eb:bb:7c:57:64:be:d8:4e:14:65:af:e5:
         80:a1:3f:af:6e:c6:b4:b4:72:19:7b:15:3e:b1:28:02:c6:95:
         70:43:3f:89:48:1c:76:ad:0a:49:84:50:ad:da:28:4d:dd:72:
         ba:2f:66:ef:8f:3f:b0:8c:c2:59:ee:9c:fe:60:99:62:10:28:
         83:d4:78:2e:77:bf:90:0d:8f:d5:37:2d:d3:bb:bc:ca:d5:36:
         c2:e9:b4:00:ab:49:58:b5:8b:a6:46:57:37:4b:d1:25:99:47:
         79:f4:55:ff:50:f0:70:f8:07:8c:30:c5:3c:dd:6c:43:85:c7:
         b1:ea:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:04:51 2026 by rpki-client