Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a3a2f33322d313238203d3e20323730383737.roa
File:                     323830343a373264303a3a2f33322d313238203d3e20323730383737.roa (raw, json)
Hash identifier:          Gks6Be/g4HR3+hGte3HA0NnYRPlD1k4mNFs48T4zq7E=
Subject key identifier:   D9:B5:D0:B5:D1:AF:F2:FF:39:A5:87:1A:E4:49:35:DF:77:8B:11:56
Certificate issuer:       /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial:       7C520648F105DA7B8832D4FB83AD4431C1227029
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a3a2f33322d313238203d3e20323730383737.roa
Signing time:             Tue 05 May 2026 19:07:17 +0000
ROA not before:           Tue 05 May 2026 19:02:17 +0000
ROA not after:            Tue 04 May 2027 19:07:17 +0000
asID:                     270877
IP address blocks:        2804:72d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
                          rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:52:06:48:f1:05:da:7b:88:32:d4:fb:83:ad:44:31:c1:22:70:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
        Validity
            Not Before: May  5 19:02:17 2026 GMT
            Not After : May  4 19:07:17 2027 GMT
        Subject: CN=D9B5D0B5D1AFF2FF39A5871AE44935DF778B1156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:13:0c:1c:9a:b1:2b:20:ac:d9:8d:ca:df:
                    3c:74:a8:2b:de:3f:12:c7:3f:75:c2:ce:1e:66:52:
                    b9:49:cc:38:c2:cb:6c:e4:3f:9b:48:77:bf:26:76:
                    fe:78:8f:f3:ae:dc:34:0c:0d:c1:76:43:4d:28:d6:
                    e8:34:97:35:2b:22:5a:fa:6f:21:ab:1f:5f:0f:a6:
                    22:67:ab:55:86:e6:c3:39:ae:1c:8f:bc:61:aa:d9:
                    60:5b:3b:9b:b4:bc:b0:92:b9:6a:01:a6:2d:4d:2d:
                    b0:02:6d:5a:62:4c:42:4b:2c:2b:68:de:4b:6f:c6:
                    a6:0a:73:0f:62:93:b1:9a:89:6e:75:bd:13:b4:16:
                    7a:2e:9f:63:c9:3c:18:f6:29:22:5f:a5:c4:fb:d4:
                    d0:93:46:b8:35:62:ce:3e:cf:dd:70:84:f0:91:3e:
                    08:39:16:66:f8:2d:76:c2:d5:22:6c:81:47:1a:35:
                    32:e1:dc:ed:d1:1f:51:9c:56:22:4c:38:59:b9:03:
                    16:23:70:42:5f:e7:0a:5d:70:8c:85:b1:3c:88:6a:
                    e7:de:7d:79:cc:78:87:2c:8c:cd:77:2b:ca:72:44:
                    78:06:70:02:70:b4:21:0d:d5:3f:a4:64:26:4f:01:
                    d8:a8:c1:ac:43:b0:34:0f:87:e5:d6:c9:38:f7:40:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B5:D0:B5:D1:AF:F2:FF:39:A5:87:1A:E4:49:35:DF:77:8B:11:56
            X509v3 Authority Key Identifier:
                keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a3a2f33322d313238203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:f4:26:78:d0:93:b9:61:4a:ad:ca:1d:45:d0:00:2c:55:eb:
         11:21:5c:43:0d:84:32:a9:6b:db:2b:10:60:07:b1:f1:01:c3:
         b1:ab:b8:de:21:1f:03:a1:ef:89:62:7c:69:c9:4d:60:34:06:
         e1:bd:9f:23:a5:e2:83:04:87:2c:87:00:ff:31:b2:6d:e3:5e:
         ca:18:f5:82:02:92:e5:80:ba:68:9a:0c:e6:95:03:86:08:31:
         8a:37:ad:e5:6d:79:cd:4c:67:e3:3c:f5:a4:dd:6a:42:e8:c1:
         f3:32:36:ee:2c:9e:02:e0:ef:d1:e9:8b:eb:ed:de:de:2c:77:
         45:4c:c6:69:22:bd:c4:d4:4b:22:8a:64:65:79:70:48:29:9d:
         dd:2a:12:0d:c1:11:97:a8:09:61:37:c3:f9:03:08:5a:ec:01:
         af:74:2f:8b:3d:be:44:b0:7d:15:d2:3e:2d:03:7d:44:a4:60:
         a7:3b:67:7d:43:19:95:e8:fc:45:d3:24:8d:eb:28:30:55:50:
         52:8b:9e:af:94:4b:01:22:c1:1e:1d:ce:32:35:2c:07:a7:3f:
         a7:ef:ff:bd:73:50:aa:a3:0d:f7:bf:62:6c:3d:20:e9:12:4c:
         fa:4b:71:43:1b:66:f4:d9:cb:a7:c3:b6:05:c4:f6:a8:48:fa:
         19:86:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:55:59 2026 by rpki-client