Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa
File:                     323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (raw, json)
Hash identifier:          bjU0tbj6dGti83w1jnTb6EyWuzeNiMZkaiV2kBvopro=
Subject key identifier:   56:86:B1:C2:2B:BE:00:58:0C:5C:69:39:E4:C9:18:E5:F2:F8:BF:60
Certificate issuer:       /CN=376D677240B6F2686A282683E2EC3DDA79CE47CE
Certificate serial:       598944FCCAEF8F1EF2D55DB1C01010011919356B
Authority key identifier: 37:6D:67:72:40:B6:F2:68:6A:28:26:83:E2:EC:3D:DA:79:CE:47:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376D677240B6F2686A282683E2EC3DDA79CE47CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa
Signing time:             Thu 23 Apr 2026 17:04:57 +0000
ROA not before:           Thu 23 Apr 2026 16:59:57 +0000
ROA not after:            Thu 22 Apr 2027 17:04:57 +0000
asID:                     270838
IP address blocks:        2804:7230::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/376D677240B6F2686A282683E2EC3DDA79CE47CE.crl
                          rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/376D677240B6F2686A282683E2EC3DDA79CE47CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376D677240B6F2686A282683E2EC3DDA79CE47CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:89:44:fc:ca:ef:8f:1e:f2:d5:5d:b1:c0:10:10:01:19:19:35:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=376D677240B6F2686A282683E2EC3DDA79CE47CE
        Validity
            Not Before: Apr 23 16:59:57 2026 GMT
            Not After : Apr 22 17:04:57 2027 GMT
        Subject: CN=5686B1C22BBE00580C5C6939E4C918E5F2F8BF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:3e:33:83:e6:f9:37:04:1b:2e:30:0e:73:
                    15:14:24:7a:a9:8f:85:2a:ae:1d:72:3d:0d:d3:2f:
                    c7:7c:21:9f:66:d7:fb:75:1c:d5:ee:ff:82:09:dd:
                    6d:7c:e5:8f:45:4e:ea:92:25:04:6f:b9:91:2a:d4:
                    e4:53:15:75:5e:7d:60:ce:ca:d1:ee:a0:2c:30:5e:
                    5d:49:7c:4d:b9:c8:7b:63:03:59:14:e8:08:04:5e:
                    6a:1e:f6:94:b0:25:a9:88:ba:45:c5:bf:92:3e:1f:
                    27:14:d9:ba:76:88:2e:b1:c6:6f:02:bc:d9:fb:74:
                    07:fc:15:c5:03:b0:0a:93:b4:11:43:52:fc:05:ca:
                    5e:a4:76:38:e1:a7:80:6b:3d:69:70:d3:e7:a5:c9:
                    57:07:b1:cc:46:fb:3a:a3:4e:44:c4:72:39:de:33:
                    2e:b3:53:45:93:e4:d8:30:31:75:d8:c1:84:d2:16:
                    97:50:2c:aa:a7:19:42:59:57:0d:18:0b:64:de:22:
                    13:c5:16:bb:37:1b:fb:96:68:7a:f8:c8:01:21:3a:
                    af:e4:96:2e:b9:dd:7f:26:77:9d:f2:2b:dd:86:44:
                    08:74:9d:bd:a8:06:c6:89:14:08:ec:96:40:f4:5f:
                    b6:80:03:be:c5:a9:8b:32:1d:fe:b0:bd:61:0c:d8:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:86:B1:C2:2B:BE:00:58:0C:5C:69:39:E4:C9:18:E5:F2:F8:BF:60
            X509v3 Authority Key Identifier:
                keyid:37:6D:67:72:40:B6:F2:68:6A:28:26:83:E2:EC:3D:DA:79:CE:47:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/376D677240B6F2686A282683E2EC3DDA79CE47CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/376D677240B6F2686A282683E2EC3DDA79CE47CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7230::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:3a:47:a9:b9:6a:ef:03:7a:61:22:c2:c4:1c:72:62:f5:74:
         52:af:2c:8b:97:fc:f0:01:5c:d3:53:34:cb:c5:e4:d0:06:a0:
         19:43:fc:92:4e:27:d8:1e:d7:47:e1:1e:3e:5c:a3:75:3d:34:
         43:a7:28:93:0d:58:6a:b3:71:de:bf:38:6b:3f:c0:8a:84:6f:
         a5:6d:e4:13:7c:53:38:0a:2b:42:06:1a:59:c2:0c:26:5c:f6:
         24:9a:c0:5f:36:1f:66:3c:a1:76:53:96:57:40:b9:ca:85:76:
         69:ae:81:2f:92:53:93:50:ae:67:aa:dd:1b:fc:15:4b:59:82:
         af:14:53:ea:42:b3:2f:5c:97:28:b4:23:2b:89:a0:c3:f6:85:
         ce:26:d8:4d:52:2e:e9:33:73:44:ca:69:98:8a:e0:28:15:21:
         d1:8c:b0:af:07:02:d3:26:e8:51:50:9e:95:17:b8:b9:01:6e:
         f1:9c:7a:bc:32:e3:f2:fe:55:1f:75:4b:5c:7c:5e:8b:57:7a:
         0f:08:c2:5d:a8:68:d7:c4:7a:74:ab:04:d3:fb:9f:1d:4a:0c:
         78:11:7d:d4:a3:97:5f:9e:ff:37:c9:f8:c3:ff:ec:72:39:9b:
         b9:56:ce:b5:81:e5:37:15:40:f1:f2:2e:3f:c0:d3:16:aa:e8:
         90:ca:21:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:31:49 2026 by rpki-client