Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a643830303a3a2f33372d3337203d3e20323635313431.roa
File:                     323830343a326233383a643830303a3a2f33372d3337203d3e20323635313431.roa (raw, json)
Hash identifier:          4BvQdrXIrRG83xJILuhbEGz0qjsWzDQgGmzqMP5C3Vw=
Subject key identifier:   1F:4E:67:EE:91:01:A9:47:E7:18:93:D8:ED:80:FC:83:73:61:D6:19
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       3781C0F3400E574E81E8253EAB4EBEA617A45508
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a643830303a3a2f33372d3337203d3e20323635313431.roa
Signing time:             Mon 27 Apr 2026 18:35:17 +0000
ROA not before:           Mon 27 Apr 2026 18:30:17 +0000
ROA not after:            Mon 26 Apr 2027 18:35:17 +0000
asID:                     265141
IP address blocks:        2804:2b38:d800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:81:c0:f3:40:0e:57:4e:81:e8:25:3e:ab:4e:be:a6:17:a4:55:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Apr 27 18:30:17 2026 GMT
            Not After : Apr 26 18:35:17 2027 GMT
        Subject: CN=1F4E67EE9101A947E71893D8ED80FC837361D619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:49:d5:37:31:89:63:dd:56:f6:a8:f7:ad:92:
                    c2:34:51:a9:64:0a:aa:1e:52:ea:08:32:ff:ae:39:
                    b9:03:af:37:76:0d:1e:ce:2b:a9:42:9a:1d:67:fe:
                    11:18:31:f9:83:20:af:d5:90:f8:1d:7c:f6:3a:5b:
                    01:1e:18:be:10:a3:b9:a7:4e:48:e5:80:00:38:93:
                    fe:e3:7c:21:8f:f1:0a:cd:16:f1:5e:7e:49:de:69:
                    49:57:c0:d5:b6:b6:f5:d7:53:23:82:79:57:20:8d:
                    2b:7d:39:5e:45:88:36:50:6b:06:30:8b:6b:ec:98:
                    71:6e:5d:15:41:83:16:e5:38:20:9c:49:f1:19:06:
                    5e:e8:b9:3f:b6:69:e3:e7:4b:23:42:54:e0:be:c2:
                    25:c3:e7:e4:20:36:ae:72:3d:26:88:94:52:54:4e:
                    a4:c3:e7:a9:7d:c6:20:2c:24:df:4c:a9:b2:83:83:
                    da:07:df:32:29:30:4e:05:0f:6b:5e:99:ac:66:93:
                    17:4a:45:6a:df:d3:51:fc:da:a6:ae:c6:48:97:df:
                    5c:2a:a2:14:90:a3:73:a9:78:f0:cf:63:f1:bb:36:
                    9e:3b:9d:17:d6:da:48:55:22:e3:52:73:71:51:4b:
                    c1:9d:60:ee:71:61:3c:dd:06:30:13:dc:af:c7:e7:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:67:EE:91:01:A9:47:E7:18:93:D8:ED:80:FC:83:73:61:D6:19
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a643830303a3a2f33372d3337203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:d800::/37

    Signature Algorithm: sha256WithRSAEncryption
         af:e5:71:1a:fa:4a:8b:c5:5b:3a:84:9a:49:98:1d:04:70:f0:
         7a:ea:c1:be:33:22:99:2a:95:b9:d3:43:4f:45:bb:41:bd:76:
         fe:a6:29:c4:34:35:40:29:5e:dd:0a:05:ef:00:2b:7d:a3:27:
         82:d4:ac:7e:db:cf:0c:e4:34:8b:fd:8c:a8:ba:bc:06:82:47:
         57:e4:11:0f:1e:1b:d7:ef:02:25:34:aa:7c:c9:98:af:7a:8d:
         f1:7c:28:09:71:83:fa:8d:f9:85:59:b1:0a:d9:a5:19:56:c5:
         f3:39:ff:14:62:37:ff:ab:5c:d8:93:73:90:cb:01:31:59:67:
         f1:d7:81:10:d8:9b:93:f4:bf:17:97:87:f8:20:3f:1b:ac:ab:
         10:66:cf:4e:b7:4c:3e:d8:ca:34:83:59:d5:a0:79:09:00:8c:
         19:a8:a3:14:e6:0b:99:b3:6b:b3:e1:81:58:c0:2e:e7:92:f0:
         29:cf:91:ca:44:73:14:53:b3:d5:e1:43:a9:bd:90:07:8d:e5:
         77:6e:d0:3e:e3:f0:42:92:ad:96:08:b8:e5:69:cf:03:73:71:
         a5:39:04:e9:62:c4:6d:5e:c9:10:99:ea:96:81:fe:07:d2:c4:
         13:10:b9:85:5d:1a:e8:e9:a6:7d:c8:3f:c4:67:5e:88:38:75:
         d2:e2:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:17 2026 by rpki-client