Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa
File:                     323830343a353039383a3a2f33322d313238203d3e20323638333938.roa (raw, json)
Hash identifier:          glO24QzrfFsd9W0mZAi8AtSz+CFwQ+UbFrh7YDsSlgY=
Subject key identifier:   F5:1A:72:34:95:7E:9A:E4:5C:64:AC:C2:AD:8B:51:77:CA:97:39:0E
Certificate issuer:       /CN=974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6
Certificate serial:       48C8ACCEDFEE2ACC609028DF4C3AF5E8AB5840C7
Authority key identifier: 97:4F:38:24:1A:AF:F9:44:C0:1F:EE:40:6E:FE:8F:5D:DB:DF:F2:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa
Signing time:             Wed 01 Apr 2026 22:24:50 +0000
ROA not before:           Wed 01 Apr 2026 22:19:50 +0000
ROA not after:            Wed 31 Mar 2027 22:24:50 +0000
asID:                     268398
IP address blocks:        2804:5098::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.crl
                          rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c8:ac:ce:df:ee:2a:cc:60:90:28:df:4c:3a:f5:e8:ab:58:40:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6
        Validity
            Not Before: Apr  1 22:19:50 2026 GMT
            Not After : Mar 31 22:24:50 2027 GMT
        Subject: CN=F51A7234957E9AE45C64ACC2AD8B5177CA97390E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:3f:e8:d8:be:9a:80:dc:5f:8d:cd:ff:17:
                    35:e8:27:a9:87:50:fa:d7:fc:43:15:76:c5:3e:3c:
                    ef:84:bc:82:05:87:7c:e2:a5:2f:1d:b8:2d:28:1b:
                    d8:5e:6c:b6:c6:a9:65:da:1a:1d:b2:f6:1a:e5:e9:
                    c8:2b:60:39:fa:ef:98:ea:26:95:db:27:57:2f:dd:
                    ca:15:1e:fd:c6:d7:64:04:a9:92:e3:68:db:8a:e1:
                    79:9f:54:bd:b0:2c:ee:1a:35:90:64:49:d1:b2:a5:
                    33:39:b6:17:34:44:15:89:71:46:28:5d:4a:13:e6:
                    b0:48:66:62:02:3d:0d:23:47:ab:21:5c:7c:75:11:
                    8c:b3:1e:b1:89:01:c0:5a:48:15:74:7e:9b:84:7a:
                    76:0f:ce:14:45:b7:ec:c6:c8:1b:78:e6:50:fb:19:
                    9e:87:1a:04:42:c3:45:93:f8:00:3e:11:d8:dd:2c:
                    a4:40:ea:36:5e:a9:11:d8:62:70:a8:1c:26:06:c0:
                    05:7c:02:9e:34:7a:f5:49:c6:5a:e0:52:da:ef:c4:
                    9b:9a:34:29:a6:ad:e4:58:2d:3c:0e:45:28:e6:36:
                    97:92:b7:8b:07:44:9e:b4:c1:35:b7:27:a4:e6:09:
                    49:7e:dc:4b:a7:4f:22:3a:af:e3:9d:75:ec:cf:08:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1A:72:34:95:7E:9A:E4:5C:64:AC:C2:AD:8B:51:77:CA:97:39:0E
            X509v3 Authority Key Identifier:
                keyid:97:4F:38:24:1A:AF:F9:44:C0:1F:EE:40:6E:FE:8F:5D:DB:DF:F2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5098::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:50:bd:af:78:f8:52:9b:17:00:35:bc:f8:81:68:9e:fc:
         df:be:0f:be:d8:01:cc:37:77:03:fe:8f:df:53:0c:7f:f7:f2:
         48:be:d3:38:bd:31:c4:89:9a:89:b2:10:55:1c:9c:73:00:ee:
         bb:1d:5e:15:a3:49:53:7c:09:3f:3a:a8:3c:7c:91:ed:eb:99:
         a8:88:d1:67:d2:de:ae:44:48:11:25:7b:30:85:b1:c4:92:03:
         70:7a:67:8e:2e:07:dd:fe:38:41:68:e2:19:d6:56:04:0e:da:
         25:dc:34:ef:1d:ce:0c:11:00:c0:07:8e:44:46:17:69:a2:b2:
         82:ce:d2:a0:2f:ed:3c:42:f8:4a:9f:39:97:22:8c:16:72:71:
         ae:cc:9a:09:5b:b4:6c:de:fa:49:e0:ed:e6:5b:a3:dc:38:b2:
         4e:df:49:1d:79:9c:fe:65:30:51:cf:05:3a:29:8c:8f:a1:8b:
         48:49:cc:73:84:7c:aa:5f:1a:a1:7d:93:9b:13:c8:26:c5:07:
         aa:ca:01:e7:1b:1c:58:4f:26:cb:32:49:2a:3b:ea:eb:a3:b2:
         0c:70:3f:13:e9:85:92:84:e7:31:d8:fb:19:f1:08:2f:0e:dd:
         1a:52:d7:93:f7:74:57:d4:6d:15:7c:bb:e6:f1:5e:2d:ff:be:
         70:30:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:07:40 2026 by rpki-client