Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/323830343a353863633a3a2f33322d313238203d3e20323638313530.roa
File:                     323830343a353863633a3a2f33322d313238203d3e20323638313530.roa (raw, json)
Hash identifier:          hjAtcBDQ6B7YhuRc/UzoScCEW1GR0p+BWsv1DF5meuQ=
Subject key identifier:   A1:68:5A:CC:AB:77:F6:7B:30:05:6E:B0:74:0A:F1:25:71:72:32:47
Certificate issuer:       /CN=A4F5FD50B52AA581E91746AE2FF4F6063D68E91A
Certificate serial:       7D4E63A96BE4BF38B0894EDF9A17046CBD9BFB57
Authority key identifier: A4:F5:FD:50:B5:2A:A5:81:E9:17:46:AE:2F:F4:F6:06:3D:68:E9:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F5FD50B52AA581E91746AE2FF4F6063D68E91A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/323830343a353863633a3a2f33322d313238203d3e20323638313530.roa
Signing time:             Mon 23 Mar 2026 11:29:32 +0000
ROA not before:           Mon 23 Mar 2026 11:24:32 +0000
ROA not after:            Mon 22 Mar 2027 11:29:32 +0000
asID:                     268150
IP address blocks:        2804:58cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/A4F5FD50B52AA581E91746AE2FF4F6063D68E91A.crl
                          rsync://rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/A4F5FD50B52AA581E91746AE2FF4F6063D68E91A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F5FD50B52AA581E91746AE2FF4F6063D68E91A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4e:63:a9:6b:e4:bf:38:b0:89:4e:df:9a:17:04:6c:bd:9b:fb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4F5FD50B52AA581E91746AE2FF4F6063D68E91A
        Validity
            Not Before: Mar 23 11:24:32 2026 GMT
            Not After : Mar 22 11:29:32 2027 GMT
        Subject: CN=A1685ACCAB77F67B30056EB0740AF12571723247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:c8:7d:cb:d3:83:02:81:4e:16:a9:99:81:
                    52:48:84:08:86:35:c3:2a:cc:40:d3:5a:be:d0:15:
                    11:cd:04:44:a1:48:0b:fb:8c:da:6a:cc:5f:67:22:
                    ce:d7:c9:84:86:6a:fe:ec:57:f1:51:e0:ef:51:0c:
                    aa:e7:e2:be:34:ed:36:29:22:70:43:fe:ff:2b:0b:
                    5f:db:58:f5:bb:29:e3:17:2d:0a:7f:63:13:03:1b:
                    ff:91:70:10:ad:b4:d0:8b:d6:87:0c:0f:29:b5:d2:
                    ea:8e:cc:cd:1d:c9:c5:6c:3b:7d:98:65:0f:5a:50:
                    a1:87:17:d2:63:61:a4:c7:e7:87:9b:03:d5:55:20:
                    e0:71:f3:42:8a:b1:69:69:0c:92:7e:cc:b0:27:5b:
                    d9:d4:97:9b:00:c4:2e:11:ba:fd:44:19:73:ae:b8:
                    eb:8f:f6:f2:dd:4e:52:7a:66:4e:14:60:b6:c5:80:
                    a6:7e:c7:05:2e:08:8d:c5:47:ce:95:d4:0b:b9:a2:
                    3d:34:27:0e:46:82:12:1d:83:93:4a:7f:a1:0e:2e:
                    57:45:dc:72:c9:27:91:1e:d1:8e:3c:3c:09:eb:15:
                    64:e4:4e:2b:d7:cf:fa:d8:18:e1:98:fa:ba:03:64:
                    68:c8:de:42:ea:8c:87:fb:63:a2:ed:e7:16:91:17:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:68:5A:CC:AB:77:F6:7B:30:05:6E:B0:74:0A:F1:25:71:72:32:47
            X509v3 Authority Key Identifier:
                keyid:A4:F5:FD:50:B5:2A:A5:81:E9:17:46:AE:2F:F4:F6:06:3D:68:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/A4F5FD50B52AA581E91746AE2FF4F6063D68E91A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F5FD50B52AA581E91746AE2FF4F6063D68E91A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/323830343a353863633a3a2f33322d313238203d3e20323638313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:29:d6:1c:68:e8:14:9e:a3:e0:a1:d5:96:95:51:30:e5:85:
         0c:ec:fe:4b:95:2c:05:44:18:ff:b3:d1:9e:bc:fb:c1:88:bc:
         29:3c:ba:fa:5a:04:2a:07:b4:bb:ea:cd:76:74:53:4b:7a:fa:
         6a:b3:ba:43:06:a6:86:cb:ea:b0:78:bc:9a:f3:5a:12:6f:ac:
         12:cf:6f:d1:e0:cb:e7:6c:78:ab:17:ca:80:dc:7b:47:31:12:
         c5:af:5f:1a:ca:8c:f2:75:d6:25:61:e8:36:56:5a:0f:5e:bc:
         a7:a6:80:51:f0:e1:a8:64:e8:78:cb:94:ab:3a:81:85:26:1e:
         dd:25:68:87:7b:2b:91:6f:b3:aa:40:14:31:7a:06:d4:a0:3c:
         10:f5:58:c8:3a:da:f2:99:ac:df:fd:aa:bc:d1:36:e1:db:8e:
         71:86:3c:3d:93:52:1e:0c:c2:07:58:fc:ff:65:2b:d1:f8:d0:
         1c:4e:17:82:7e:63:f2:79:b0:7b:34:65:f4:11:67:a5:ef:50:
         ee:b8:7c:a0:d3:b4:1f:e4:ab:11:39:7e:f2:92:cf:66:8e:1f:
         86:1a:59:48:57:38:21:31:41:15:03:1f:6c:35:66:a7:47:a8:
         71:06:ab:5f:55:bb:5b:1f:f1:d2:d7:e7:3b:a1:f0:85:37:d9:
         67:de:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:00 2026 by rpki-client