Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3a2f33322d3338203d3e20323731363332.roa
File:                     323830343a376539303a3a2f33322d3338203d3e20323731363332.roa (raw, json)
Hash identifier:          I4QweEMIGsP3bC2FRUZ2dWPNeTFiUQlRPrAhjSrHOJA=
Subject key identifier:   08:ED:A9:01:6C:C5:7C:F4:B3:77:E6:87:88:D9:38:0C:25:E7:D9:03
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       1FF2F6001DF405E3853CCB87C83FD77CFA7D4CD3
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3a2f33322d3338203d3e20323731363332.roa
Signing time:             Fri 06 Mar 2026 14:59:20 +0000
ROA not before:           Fri 06 Mar 2026 14:54:20 +0000
ROA not after:            Fri 05 Mar 2027 14:59:20 +0000
asID:                     271632
IP address blocks:        2804:7e90::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f2:f6:00:1d:f4:05:e3:85:3c:cb:87:c8:3f:d7:7c:fa:7d:4c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Mar  6 14:54:20 2026 GMT
            Not After : Mar  5 14:59:20 2027 GMT
        Subject: CN=08EDA9016CC57CF4B377E68788D9380C25E7D903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:90:12:c5:d2:a7:3a:63:0b:0b:26:ff:6e:
                    e5:26:b1:08:9b:fd:13:50:e0:3e:4c:ac:08:11:33:
                    78:e5:30:99:ea:4a:8a:c0:e3:24:1e:91:e9:c7:4e:
                    c8:c9:89:e0:50:34:c0:cf:68:ab:9d:cc:77:24:58:
                    f5:cd:cb:e3:59:5c:c1:db:c4:96:b7:2b:e4:4d:18:
                    8b:c8:27:d1:e5:3d:ce:ba:29:8a:3e:e1:9e:35:ce:
                    9a:69:0a:28:3c:c4:75:dc:e2:8a:9b:ee:75:ed:25:
                    7d:87:49:88:a5:f3:45:85:23:9f:95:f7:e5:8c:e1:
                    f7:32:0b:cc:28:88:52:2e:90:d6:9c:7e:61:75:50:
                    f8:18:f0:00:82:10:6d:a7:cd:c8:57:c5:e5:7f:e8:
                    ef:01:ab:4f:9e:da:02:3c:91:94:76:1c:ba:a2:70:
                    39:fb:8d:83:4a:83:85:0b:43:87:f0:6f:7f:9d:c5:
                    09:68:94:78:0e:6e:ed:0b:f3:05:4a:f9:90:43:ba:
                    25:6d:aa:49:00:80:73:83:c5:38:4c:62:31:3e:3c:
                    24:7f:ca:86:18:f8:9f:59:35:f1:ca:43:87:b9:83:
                    30:2b:47:52:ee:fe:1a:47:88:0b:f9:25:c3:78:dc:
                    1b:b0:47:5e:28:1c:09:11:f1:58:f9:54:89:13:a8:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:A9:01:6C:C5:7C:F4:B3:77:E6:87:88:D9:38:0C:25:E7:D9:03
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3a2f33322d3338203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:2b:dd:2b:54:2e:7c:6a:87:d1:0a:b7:fc:58:bf:4c:bf:b6:
         25:fb:7d:9c:27:ad:89:4e:2c:d5:aa:01:5f:4b:b4:96:01:13:
         2a:8b:6b:55:36:50:33:61:da:d2:c1:c4:5b:a0:e0:46:53:98:
         14:b1:a1:1a:2b:eb:4e:eb:82:a6:34:c4:a1:58:b4:08:12:93:
         8a:2e:07:8d:7e:33:21:02:2d:bc:c4:3e:6e:00:54:f7:13:73:
         a9:4c:01:d5:48:b4:d6:53:81:26:53:7b:a8:35:5c:74:3d:03:
         1a:69:21:96:08:95:7c:6a:eb:e1:09:db:09:96:d0:26:f9:a7:
         54:b7:14:f8:b1:d4:5c:35:4a:cb:bd:85:ea:b2:2e:ec:17:28:
         f1:25:f8:19:7a:82:75:73:1b:bd:f2:cd:f6:b4:38:b7:78:c5:
         63:a2:54:57:4b:91:7f:a9:12:4b:3b:18:94:2b:b6:45:49:a3:
         20:5f:50:a6:e9:f8:31:cd:2a:0a:37:14:22:8f:45:e6:6d:3f:
         d1:0c:cb:26:12:fc:4b:38:6d:df:83:99:69:e0:ba:b5:0f:17:
         e7:ad:a5:a1:92:b2:61:34:ad:80:47:df:7c:47:89:7b:d6:fd:
         de:44:de:28:d1:b7:8c:20:0f:b0:11:6e:8a:c0:62:9a:fc:03:
         6e:f5:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:08 2026 by rpki-client