Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a3a2f33342d3334203d3e20323635303238.roa
File:                     323830343a333161343a3a2f33342d3334203d3e20323635303238.roa (raw, json)
Hash identifier:          X1iBBVvZRrcp1oppfx/ooOtmsWrznnviuHEB9HAt5vU=
Subject key identifier:   71:2C:0C:E4:F0:D6:81:CC:5C:0B:FC:6E:0D:77:47:32:9C:89:84:C4
Certificate issuer:       /CN=342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4
Certificate serial:       479C258C84EF831CFDD3B405C8E65CFA51367332
Authority key identifier: 34:2C:FA:1C:A2:D2:01:64:4C:FE:5D:2B:A6:1B:C3:59:8F:CA:D2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a3a2f33342d3334203d3e20323635303238.roa
Signing time:             Fri 24 Apr 2026 22:19:02 +0000
ROA not before:           Fri 24 Apr 2026 22:14:02 +0000
ROA not after:            Fri 23 Apr 2027 22:19:02 +0000
asID:                     265028
IP address blocks:        2804:31a4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.crl
                          rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9c:25:8c:84:ef:83:1c:fd:d3:b4:05:c8:e6:5c:fa:51:36:73:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4
        Validity
            Not Before: Apr 24 22:14:02 2026 GMT
            Not After : Apr 23 22:19:02 2027 GMT
        Subject: CN=712C0CE4F0D681CC5C0BFC6E0D7747329C8984C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:2c:05:fb:09:71:43:e4:62:10:e4:79:3e:
                    c6:5a:57:11:3b:23:5d:fd:c7:4c:14:09:ad:56:83:
                    b6:a9:9a:24:e7:66:c2:99:1c:b8:14:10:35:85:a0:
                    93:09:b1:4d:79:f7:68:52:98:28:eb:ef:05:ec:ec:
                    5c:4c:b2:52:a5:2e:75:61:ef:e1:83:86:e8:27:b5:
                    a6:d6:78:7c:19:f9:67:24:f0:25:11:b3:1a:f5:f3:
                    34:61:18:ff:24:37:8c:7a:cc:84:ff:10:20:b6:9e:
                    65:60:fe:25:41:b1:58:16:c5:49:b2:2c:e0:b0:f4:
                    a7:cf:32:8f:0b:b9:3a:b9:b3:a0:af:c9:6b:ca:da:
                    a5:28:46:d7:66:7f:bf:63:81:f9:97:88:d4:cf:94:
                    e2:12:ae:03:2c:79:e8:82:f1:a4:64:e8:92:7b:d8:
                    21:53:52:68:b0:fe:ca:c7:45:3e:69:c3:71:bf:82:
                    8e:75:d9:09:b0:1a:e1:97:79:36:07:bd:b2:16:9b:
                    8b:06:e0:2d:60:b4:31:cc:69:35:cf:27:fa:89:7f:
                    24:89:c4:93:ba:83:8c:aa:92:e8:53:99:d6:cb:40:
                    84:65:34:44:24:5b:5b:e7:6f:87:5c:59:67:6d:f5:
                    29:3b:82:3c:59:fb:09:c9:4e:8b:6e:a2:01:de:67:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2C:0C:E4:F0:D6:81:CC:5C:0B:FC:6E:0D:77:47:32:9C:89:84:C4
            X509v3 Authority Key Identifier:
                keyid:34:2C:FA:1C:A2:D2:01:64:4C:FE:5D:2B:A6:1B:C3:59:8F:CA:D2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a3a2f33342d3334203d3e20323635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31a4::/34

    Signature Algorithm: sha256WithRSAEncryption
         8f:a3:48:cb:18:e4:ad:1b:90:f8:83:6a:aa:95:f9:1c:cf:d3:
         e7:c1:06:e7:f3:f2:bf:21:23:c6:3d:7c:0b:9a:07:83:11:12:
         89:02:f5:18:34:07:ec:04:a6:4c:19:46:d1:33:1b:f5:bf:42:
         d0:1b:da:14:62:81:3c:c0:b6:a1:68:7b:b6:9e:6f:d6:ee:33:
         c9:27:57:5d:eb:5c:ae:7e:5e:73:d5:d2:7b:f1:fe:0a:d8:1b:
         50:a4:f7:32:b7:2c:f7:7d:d9:af:09:94:6d:d3:db:30:e1:13:
         cf:01:36:90:fa:de:a1:4e:b9:90:bd:08:c0:26:9c:8d:dd:42:
         e6:2b:96:d0:32:1d:04:78:de:f5:1d:1d:64:92:88:c3:e9:f7:
         0f:4d:e4:88:17:5e:7e:6a:20:6c:d9:e6:2a:1d:10:a4:dd:d7:
         df:90:97:7a:fb:c8:24:ed:f0:ba:ae:57:56:3d:74:d2:19:3b:
         97:c7:5f:e6:56:09:d2:33:c8:d1:b8:5b:96:3e:af:8b:d6:bb:
         eb:aa:97:1e:56:ca:3b:52:d6:5b:a4:a9:2b:d0:f7:02:ff:8e:
         c9:0d:cb:6b:c3:68:e0:0d:fb:c9:40:05:81:be:96:5a:78:0a:
         93:73:69:c5:19:e2:37:24:4b:35:25:2a:c0:d2:2f:7d:d9:0c:
         88:17:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:09:08 2026 by rpki-client