Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a3a2f33342d3334203d3e20323635313431.roa
File:                     323830343a326233383a3a2f33342d3334203d3e20323635313431.roa (raw, json)
Hash identifier:          wnVza8FwzOqfU2UOtAT2XovQzV4wpkpImBR3IfCOUbs=
Subject key identifier:   16:E8:02:2B:BB:44:3A:E2:0A:00:EB:89:26:2D:01:60:DD:32:18:A3
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       10F216ED37F4FCE109BD3204045673BBA03CE3EE
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a3a2f33342d3334203d3e20323635313431.roa
Signing time:             Mon 27 Apr 2026 18:35:14 +0000
ROA not before:           Mon 27 Apr 2026 18:30:14 +0000
ROA not after:            Mon 26 Apr 2027 18:35:14 +0000
asID:                     265141
IP address blocks:        2804:2b38::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f2:16:ed:37:f4:fc:e1:09:bd:32:04:04:56:73:bb:a0:3c:e3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Apr 27 18:30:14 2026 GMT
            Not After : Apr 26 18:35:14 2027 GMT
        Subject: CN=16E8022BBB443AE20A00EB89262D0160DD3218A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:be:2e:9d:ba:0f:b8:90:06:e2:cb:c8:50:
                    ff:6d:ef:fb:d7:b6:d9:23:35:2a:70:74:cb:0c:2f:
                    2c:0d:ef:92:8f:90:a0:c8:c9:b0:9f:36:45:4c:83:
                    56:1d:95:ae:22:45:46:35:a9:4d:1c:87:4c:3c:96:
                    c0:1b:e4:1f:2b:2e:ce:25:cb:67:77:c8:f1:ee:d1:
                    f3:67:40:d9:8c:59:5c:fd:d1:e2:bf:27:13:98:62:
                    76:57:e0:62:07:7d:58:d2:05:31:ef:fe:2e:d6:07:
                    c9:8d:0e:38:7c:ca:40:9a:ab:b2:84:3c:cd:03:55:
                    62:f2:81:7a:a9:2a:88:74:09:1a:19:cf:df:3b:ec:
                    a4:f3:26:52:f5:4c:4a:ac:86:b0:78:b1:64:9e:cc:
                    ea:3b:60:01:5c:00:62:dd:b0:5e:9b:cf:92:e3:34:
                    e0:3d:a6:c2:45:7b:eb:d7:81:49:f0:c2:e7:d7:9e:
                    33:ef:b3:bc:b6:27:21:95:06:0a:1d:30:d9:1f:5e:
                    04:ea:0a:88:7f:f0:c1:28:3a:88:86:83:1b:de:c5:
                    c7:48:ca:32:a4:27:bc:f3:f4:bb:37:c8:4f:07:b3:
                    4b:be:5f:65:e7:d7:b2:5a:f2:8d:1d:db:c2:11:6c:
                    f9:1a:d7:eb:ad:88:51:ca:6c:5c:a9:e6:10:af:cb:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E8:02:2B:BB:44:3A:E2:0A:00:EB:89:26:2D:01:60:DD:32:18:A3
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a3a2f33342d3334203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:57:4d:19:72:06:63:d2:35:ab:45:41:53:85:e3:2e:1e:46:
         0a:c7:e0:fc:d0:70:8b:fb:ec:ff:69:14:7d:34:03:75:3b:42:
         7b:ae:7e:ea:5c:86:89:34:7e:55:e4:5d:26:11:5e:5d:d1:db:
         03:33:6e:c0:f1:9a:f4:27:a7:39:a3:4e:ac:ee:c8:90:f0:f8:
         64:2b:0a:f5:0b:4e:b0:a2:a0:ad:9f:44:64:48:19:33:3a:52:
         dd:c5:2a:25:3b:5d:9f:89:2f:af:29:d4:7b:56:4d:de:c7:9e:
         b3:66:79:6c:27:a0:b2:fe:53:f0:83:5b:3e:44:ac:8d:c8:de:
         d7:eb:f9:28:47:07:6c:3e:52:07:8c:68:98:92:ac:60:24:82:
         80:b9:72:c2:4f:de:41:ee:b1:8a:d0:d4:48:44:c6:cc:f8:f6:
         3e:a3:5c:a6:95:40:05:4a:db:b6:28:a3:27:ff:18:a3:4d:f1:
         32:b1:33:bd:ec:61:99:37:70:36:23:42:7d:9c:64:1a:64:a7:
         69:e2:47:bd:33:4c:23:10:09:91:49:9c:07:4f:a2:9e:09:25:
         59:aa:57:9f:fb:ff:74:a0:44:75:0b:3a:13:2d:3b:8b:41:09:
         1d:a1:9b:b1:2c:04:e3:a3:a9:0c:1b:64:4b:cc:78:55:7b:d3:
         1f:6e:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:23 2026 by rpki-client