Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a3a2f33322d3332203d3e20323730393839.roa
File:                     323830343a373439303a3a2f33322d3332203d3e20323730393839.roa (raw, json)
Hash identifier:          KM0to5txXk1triNFN/i68QvrxYtPgF1s3Xe5NP5Ay5o=
Subject key identifier:   30:D1:E1:A7:FC:4B:9E:25:0D:A7:95:9F:96:02:9B:B5:47:50:58:A1
Certificate issuer:       /CN=19F47F472FDA2CAF0620C801DDAD6FD2380E17F0
Certificate serial:       7A00754EB35F77E62570982390D93AFFB4086644
Authority key identifier: 19:F4:7F:47:2F:DA:2C:AF:06:20:C8:01:DD:AD:6F:D2:38:0E:17:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a3a2f33322d3332203d3e20323730393839.roa
Signing time:             Fri 27 Mar 2026 17:21:12 +0000
ROA not before:           Fri 27 Mar 2026 17:16:12 +0000
ROA not after:            Fri 26 Mar 2027 17:21:12 +0000
asID:                     270989
IP address blocks:        2804:7490::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.crl
                          rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 03:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:00:75:4e:b3:5f:77:e6:25:70:98:23:90:d9:3a:ff:b4:08:66:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19F47F472FDA2CAF0620C801DDAD6FD2380E17F0
        Validity
            Not Before: Mar 27 17:16:12 2026 GMT
            Not After : Mar 26 17:21:12 2027 GMT
        Subject: CN=30D1E1A7FC4B9E250DA7959F96029BB5475058A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:d0:c5:08:2a:01:83:e2:b7:f4:f6:e4:1f:
                    82:8e:b3:47:7e:9f:f1:65:cd:9a:fc:d2:3a:35:bf:
                    52:ce:eb:96:38:4e:12:ab:a3:c6:5b:44:90:ff:b3:
                    1b:a5:08:c1:40:df:52:84:19:46:be:77:ae:8b:1b:
                    cd:a0:aa:c8:c8:4a:b5:7c:9e:87:6b:97:c6:20:08:
                    a6:8b:17:8d:43:b2:91:c0:0e:ff:62:b2:aa:77:bd:
                    e5:00:df:33:d8:c7:d7:cd:cc:30:f9:71:1a:15:de:
                    28:2a:f8:c0:c5:ac:cf:80:91:3a:3b:51:fe:16:cb:
                    65:9e:75:de:7b:11:86:22:6c:14:6b:d7:a4:d7:0a:
                    3c:04:23:b6:bb:ab:7a:33:65:3d:46:b4:2c:d2:72:
                    11:2e:79:f4:ac:98:21:db:75:f4:3b:aa:98:ec:fd:
                    9a:66:51:1c:07:a4:9e:69:ed:5b:b5:c3:c5:74:24:
                    ed:9e:e0:9b:5e:a0:b3:53:af:9a:ba:d8:b7:ea:5d:
                    0e:b1:56:21:57:ef:a9:27:9d:b7:aa:8e:97:82:e0:
                    d7:39:d9:71:6d:36:2c:d2:d1:ee:d4:7c:c0:9c:eb:
                    bd:4a:19:02:a4:af:91:a2:aa:90:14:f8:0c:e9:5a:
                    30:ae:11:fa:38:c4:c4:fe:9f:af:31:41:e4:32:a3:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D1:E1:A7:FC:4B:9E:25:0D:A7:95:9F:96:02:9B:B5:47:50:58:A1
            X509v3 Authority Key Identifier:
                keyid:19:F4:7F:47:2F:DA:2C:AF:06:20:C8:01:DD:AD:6F:D2:38:0E:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/323830343a373439303a3a2f33322d3332203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7490::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:3f:8f:e3:d7:ff:40:27:af:a8:f8:77:e9:72:a0:63:90:54:
         4b:92:b3:46:cf:a1:1a:99:23:4e:74:69:8e:43:1d:b7:f9:d6:
         e1:d4:1c:6e:df:28:54:e1:a5:3d:ae:43:ac:06:00:af:26:7d:
         ba:f3:30:40:1e:d8:8c:95:30:6b:bb:bf:5c:68:5d:0b:f1:5e:
         e5:0f:5e:9b:ca:6d:74:31:b5:6b:d6:12:ac:68:3f:0f:7f:15:
         5c:3e:46:b5:9c:75:3f:bc:ed:61:6a:33:ee:22:b2:a6:64:f0:
         c7:4c:57:81:2c:26:16:7a:4b:c6:1e:62:3a:c7:de:6a:28:4b:
         54:e9:f1:e0:e4:79:de:64:f2:8a:4f:63:e6:72:cb:63:c8:7c:
         f0:74:42:87:da:46:3c:66:62:d6:e2:18:f2:b0:a2:6d:02:4e:
         ee:ef:0d:ed:cd:e0:1d:f4:1d:c6:06:22:38:b4:b6:db:df:a5:
         f0:bf:b8:db:33:83:fb:7e:6d:8f:17:dc:82:94:6f:bf:43:b6:
         05:e5:42:97:2b:b3:2d:c0:42:b2:74:6d:41:15:97:d8:ff:d1:
         0f:3f:9b:08:0b:dc:9a:75:4e:b4:7f:bd:c8:cc:12:a6:49:f0:
         20:06:e9:39:b2:79:cf:ce:e5:bd:73:50:ae:3c:1d:2a:56:d2:
         fd:4d:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:56:29 2026 by rpki-client