Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/323830343a353061383a3a2f33322d313238203d3e20323638343032.roa
File:                     323830343a353061383a3a2f33322d313238203d3e20323638343032.roa (raw, json)
Hash identifier:          9q9qPhBWBQoAlBZpgJRa6L2wd3cm/W4YBLOw8unitWM=
Subject key identifier:   13:02:BD:0F:DC:4E:2F:E6:E3:21:1C:B0:21:52:7E:49:3B:A0:E3:64
Certificate issuer:       /CN=A45B32BFEA22BEB46B80CC946BFC9E6FC385403E
Certificate serial:       2122729BC8A0319CA8E981F4B001FF7316FA3800
Authority key identifier: A4:5B:32:BF:EA:22:BE:B4:6B:80:CC:94:6B:FC:9E:6F:C3:85:40:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A45B32BFEA22BEB46B80CC946BFC9E6FC385403E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/323830343a353061383a3a2f33322d313238203d3e20323638343032.roa
Signing time:             Wed 04 Mar 2026 17:43:44 +0000
ROA not before:           Wed 04 Mar 2026 17:38:44 +0000
ROA not after:            Wed 03 Mar 2027 17:43:44 +0000
asID:                     268402
IP address blocks:        2804:50a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/A45B32BFEA22BEB46B80CC946BFC9E6FC385403E.crl
                          rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/A45B32BFEA22BEB46B80CC946BFC9E6FC385403E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A45B32BFEA22BEB46B80CC946BFC9E6FC385403E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:22:72:9b:c8:a0:31:9c:a8:e9:81:f4:b0:01:ff:73:16:fa:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45B32BFEA22BEB46B80CC946BFC9E6FC385403E
        Validity
            Not Before: Mar  4 17:38:44 2026 GMT
            Not After : Mar  3 17:43:44 2027 GMT
        Subject: CN=1302BD0FDC4E2FE6E3211CB021527E493BA0E364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:aa:3a:8b:63:0a:bc:41:a0:26:42:c4:1a:
                    09:8a:4c:1e:f1:2d:75:00:5e:0b:10:b8:5a:2b:f9:
                    c7:52:db:26:5a:b6:48:c2:ec:a7:71:d1:84:85:72:
                    7e:50:d6:bd:59:5a:7d:cd:95:4a:c6:07:ed:8b:51:
                    b9:3f:ed:ea:e5:21:00:66:5e:cc:da:65:0f:fe:dd:
                    62:85:09:c0:3f:17:85:28:aa:19:c1:ad:6d:b2:08:
                    9d:d2:c8:57:34:71:cc:4a:23:71:d6:8a:07:7a:d9:
                    aa:db:3d:7e:90:51:96:c3:f9:58:f5:f9:d2:5f:fb:
                    dc:ce:64:b4:2d:38:bd:02:f0:fc:65:3e:22:85:ff:
                    ee:83:f0:51:a5:26:7b:d1:47:2f:6e:07:fe:04:39:
                    36:d4:3e:de:0c:6a:d4:5b:93:04:93:3b:7f:0a:72:
                    50:10:37:bc:a3:be:65:ae:b3:84:42:b1:4f:a9:64:
                    4e:59:cf:17:df:70:9d:f8:d9:79:51:a3:7c:e6:22:
                    64:26:c5:0f:16:e6:82:ef:1c:06:80:4e:00:7c:be:
                    a7:9c:d9:8b:a2:89:b0:cd:f1:c7:07:ae:8f:1b:cd:
                    3c:34:20:69:ca:6e:02:09:7f:e3:49:cf:34:2f:b0:
                    65:5b:69:06:71:2b:15:18:04:96:12:ca:9f:bf:e5:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:02:BD:0F:DC:4E:2F:E6:E3:21:1C:B0:21:52:7E:49:3B:A0:E3:64
            X509v3 Authority Key Identifier:
                keyid:A4:5B:32:BF:EA:22:BE:B4:6B:80:CC:94:6B:FC:9E:6F:C3:85:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/A45B32BFEA22BEB46B80CC946BFC9E6FC385403E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A45B32BFEA22BEB46B80CC946BFC9E6FC385403E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/323830343a353061383a3a2f33322d313238203d3e20323638343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:30:88:f8:f4:ba:a4:94:ba:a2:40:56:9e:27:90:5a:3b:2f:
         f6:89:b6:82:a6:11:a2:8b:10:b7:14:54:1a:8c:bf:30:66:bf:
         38:19:e9:d5:29:25:86:81:19:42:2e:9c:27:66:5c:21:24:78:
         df:1e:89:ae:9a:37:86:c3:63:d1:2b:b3:b6:4c:cd:79:c5:a2:
         45:9e:0c:61:91:f5:e9:97:9c:61:9f:65:90:66:73:10:1b:9e:
         29:62:c2:b5:57:9a:32:4d:c5:19:dc:00:65:2b:e7:53:ee:61:
         be:dd:04:15:04:8a:01:2c:81:22:f1:b1:e3:f3:dc:d0:85:f0:
         a8:fc:97:1f:93:93:fd:44:54:95:57:66:6e:24:22:40:5a:5a:
         a3:5c:4d:cf:ec:c4:a6:98:9a:ed:52:b3:da:4c:9c:f8:c3:40:
         6f:50:6b:8a:7e:7b:5c:24:2a:d3:52:ad:f6:04:9c:bc:61:e2:
         0b:1e:94:54:b8:94:9e:33:71:61:cf:d4:3d:0f:95:bd:aa:d6:
         71:33:b8:9a:cc:d2:bd:60:22:42:9a:8a:df:6a:f5:6c:89:11:
         e2:15:97:39:b5:06:99:fd:50:72:f2:94:f6:89:c0:d6:79:a7:
         19:6f:ff:54:4c:67:f4:72:c3:78:82:62:a1:c5:ba:60:67:f8:
         56:26:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:23:43 2026 by rpki-client