Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a333130303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a333130303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          yPtRbzBnqjQzH9Vzdgaiq+se1xuQ+/poE1k1POnq2uA=
Subject key identifier:   C0:97:1D:9D:14:3F:7B:87:D2:E0:77:00:4D:7E:2D:66:D6:2F:BC:A7
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       3BCF1B06957681C196B2DCE5208F7063F0DAD96D
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a333130303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:20 +0000
ROA not before:           Fri 03 Apr 2026 23:57:20 +0000
ROA not after:            Sat 03 Apr 2027 00:02:20 +0000
asID:                     270764
IP address blocks:        2804:7110:3100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cf:1b:06:95:76:81:c1:96:b2:dc:e5:20:8f:70:63:f0:da:d9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:20 2026 GMT
            Not After : Apr  3 00:02:20 2027 GMT
        Subject: CN=C0971D9D143F7B87D2E077004D7E2D66D62FBCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:1f:da:da:e7:40:90:53:80:24:7d:21:89:
                    bb:2a:2c:45:26:23:32:7a:cd:cb:ca:c1:19:e4:ac:
                    85:b3:72:2d:6b:0e:dc:5e:26:dd:6c:7b:69:09:5e:
                    35:b9:75:eb:14:4c:e3:06:38:7e:46:c1:91:3a:e8:
                    84:32:56:c4:b6:5b:c9:d9:bf:a7:7b:03:7a:5e:31:
                    b2:7a:09:09:d6:b2:15:f2:8e:84:34:bf:b7:d6:8a:
                    e2:b5:ed:8e:dc:47:b5:cf:b7:cb:ad:4d:18:7e:ff:
                    74:8a:8c:91:64:93:69:e5:7f:81:4a:88:9a:9a:7d:
                    ef:13:46:27:64:fc:26:93:5e:70:b7:b7:12:8d:d7:
                    8b:1f:62:f7:85:35:c7:d2:90:52:f2:37:ed:b6:d2:
                    d1:f6:46:b7:ed:4e:64:f9:c8:ab:b8:16:8b:2d:ce:
                    a0:66:8a:c5:0e:21:b5:63:28:72:1b:3c:ea:7e:a5:
                    f0:77:62:c7:55:45:46:20:8b:1c:0c:ec:4b:ca:b1:
                    6c:a4:fd:a8:e3:b1:0e:20:fc:f3:e1:64:98:55:ee:
                    a5:ff:b3:1c:66:33:c2:15:cb:f3:c4:31:17:4c:97:
                    1d:8c:2b:0b:45:3f:09:fc:4a:86:dd:4c:a4:78:8d:
                    33:73:7c:5f:c3:9a:ea:f1:5f:48:17:f2:21:d4:a3:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:97:1D:9D:14:3F:7B:87:D2:E0:77:00:4D:7E:2D:66:D6:2F:BC:A7
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a333130303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:3100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:13:23:1a:01:bc:c9:51:54:7d:ef:7f:41:c1:65:0b:28:
         cc:85:72:26:03:f8:b9:b7:e3:be:6f:09:2c:ac:57:10:06:86:
         db:0b:bf:eb:2a:93:9a:13:1a:5a:b0:b7:98:2e:f2:df:e7:74:
         de:c4:ec:ae:0a:c7:06:15:a0:c9:d2:8c:ac:3d:50:53:dc:24:
         5b:e2:10:63:65:e5:97:44:8d:fd:33:57:15:ae:61:da:2e:8e:
         26:db:07:29:ea:fc:83:d7:c0:b1:18:ec:b8:97:09:8d:97:85:
         a9:57:63:fc:ab:96:22:cb:7e:9f:49:76:eb:03:0d:38:dd:ab:
         d2:d5:0a:0d:8a:8d:aa:da:ce:a7:c2:9e:44:05:a8:d9:ee:ac:
         41:0e:c1:78:c6:ae:e9:c2:05:d0:64:57:1f:94:1a:b0:65:55:
         6e:fa:4b:c6:52:8e:e1:25:33:ae:09:60:83:32:0e:14:2d:03:
         65:55:65:49:7e:c8:15:d7:cc:48:b2:56:67:b2:6c:0c:e8:94:
         7a:e2:05:73:d2:11:6a:f9:53:35:13:ac:23:4f:0b:95:ec:8c:
         47:86:90:62:8b:16:26:9b:ef:f3:2c:35:2d:6d:1b:ed:43:19:
         05:96:56:7a:40:84:44:f6:40:1c:4e:fc:d7:f2:63:28:12:84:
         ae:59:f3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:48:22 2026 by rpki-client