Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a653830303a3a2f33372d3337203d3e20323635313431.roa
File:                     323830343a326233383a653830303a3a2f33372d3337203d3e20323635313431.roa (raw, json)
Hash identifier:          WRXSsxzg9ZQFM3jlSakBXpXapxHfLyg+9m+jaixe0mo=
Subject key identifier:   CD:63:02:70:62:82:DA:42:33:2D:E9:09:36:30:89:51:7D:EF:EB:46
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       6AC1DCBF0D806C4B08BA5A4E9482EA68B8BA1A33
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a653830303a3a2f33372d3337203d3e20323635313431.roa
Signing time:             Mon 27 Apr 2026 18:35:18 +0000
ROA not before:           Mon 27 Apr 2026 18:30:18 +0000
ROA not after:            Mon 26 Apr 2027 18:35:18 +0000
asID:                     265141
IP address blocks:        2804:2b38:e800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c1:dc:bf:0d:80:6c:4b:08:ba:5a:4e:94:82:ea:68:b8:ba:1a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Apr 27 18:30:18 2026 GMT
            Not After : Apr 26 18:35:18 2027 GMT
        Subject: CN=CD6302706282DA42332DE909363089517DEFEB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9a:7d:d1:c9:1f:b3:18:2d:55:9b:a8:52:ac:
                    61:71:4d:7b:27:de:7f:0e:85:64:5e:81:a3:66:ad:
                    a7:e3:e3:e4:47:f4:f3:9d:ba:e3:de:f1:b1:70:dd:
                    8b:3b:5c:e7:af:e0:a1:26:25:f8:37:6d:87:90:fb:
                    46:47:83:1f:23:be:27:aa:ea:9e:7f:37:56:b1:20:
                    8b:04:07:23:ee:49:7a:fe:ca:3f:31:47:f2:8b:f0:
                    41:18:ae:e3:6b:f8:bb:58:9d:fc:7a:8a:11:95:48:
                    64:2c:ea:da:f3:0c:5b:bb:fd:a0:cb:fb:03:e1:12:
                    82:7b:16:25:76:4b:5e:d9:c5:aa:05:04:c3:66:a5:
                    63:d0:d1:a2:8c:8d:80:91:00:45:99:81:e0:c0:d1:
                    e3:ea:6f:81:75:9e:ff:37:7d:91:6a:a0:91:1e:9f:
                    fb:62:0e:81:3a:ad:97:35:89:35:5e:7f:92:5f:bc:
                    c3:44:41:71:21:31:6c:86:ec:fa:c2:09:19:d3:6f:
                    ab:a2:53:e2:f4:09:94:3f:43:98:0d:bb:1f:fb:27:
                    aa:71:16:9b:b6:e2:b8:0b:d1:32:71:e1:b0:26:ee:
                    80:0e:3a:a8:18:0c:cd:43:4e:c7:55:33:05:96:d1:
                    03:de:67:2a:2c:6a:71:42:63:32:cc:cd:6a:b8:9b:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:63:02:70:62:82:DA:42:33:2D:E9:09:36:30:89:51:7D:EF:EB:46
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a653830303a3a2f33372d3337203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:e800::/37

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:bf:a1:7b:36:da:c6:9b:30:3f:36:3d:0c:b7:30:86:a4:
         b1:fe:56:09:d9:f8:6c:b5:2f:5c:c6:03:f9:cc:7b:9a:6c:0a:
         63:2b:6c:a1:82:17:2b:40:e3:a0:6e:5c:16:8e:74:f5:92:eb:
         e4:22:87:0e:16:a2:8d:2d:c0:45:81:43:72:9c:0b:32:17:6a:
         ef:cf:d4:44:1d:20:48:2e:ad:ad:6c:27:25:69:2c:40:ac:f8:
         aa:82:f8:8e:8e:89:60:b7:50:76:32:fd:18:bc:b1:96:7d:f2:
         b2:56:e8:00:c3:fb:54:61:cf:39:bd:92:df:ce:1a:62:ab:e6:
         2f:a9:c0:6d:33:6c:7a:53:57:0d:a3:f6:fe:56:6c:8f:8c:32:
         b6:65:e0:08:2a:53:58:e4:ba:52:78:bc:7b:23:59:c7:30:08:
         0d:45:a0:be:f6:d8:3a:3d:8f:a2:5f:51:96:d6:ac:b3:ff:8f:
         38:e5:d0:24:6a:15:91:13:19:37:6c:06:fb:7b:b0:6b:c9:d0:
         9a:01:05:9f:19:9a:81:8c:83:04:55:90:38:95:30:c3:9c:fe:
         96:33:fa:2d:63:1d:05:f0:b5:83:d9:17:c4:43:40:8f:9f:69:
         6b:fa:d1:5a:7d:57:b1:8b:46:ed:68:81:0c:2e:7f:0c:51:58:
         b0:06:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:17 2026 by rpki-client