Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          EhHdAbrWns4VKQOmUkTRJJLnohNXef2b03xI2dTdQXU=
Subject key identifier:   AB:D0:56:34:5A:68:75:FE:7E:9E:85:15:02:07:3C:44:13:2A:FD:7F
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       121128515FA5266E743F66229E7E2BA5CA0D4ED4
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:20 +0000
ROA not before:           Fri 03 Apr 2026 23:57:20 +0000
ROA not after:            Sat 03 Apr 2027 00:02:20 +0000
asID:                     270764
IP address blocks:        2804:7110:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:11:28:51:5f:a5:26:6e:74:3f:66:22:9e:7e:2b:a5:ca:0d:4e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:20 2026 GMT
            Not After : Apr  3 00:02:20 2027 GMT
        Subject: CN=ABD056345A6875FE7E9E851502073C44132AFD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:a4:d5:ad:4d:f9:fe:76:06:11:9b:3e:a0:
                    12:fc:7f:5e:6d:d1:66:1d:57:99:98:82:3e:bb:bd:
                    11:9d:b7:b2:52:3b:e8:3d:63:07:50:3d:1d:f4:e3:
                    fe:0a:c6:35:af:72:d9:4d:d4:a5:d4:38:b5:80:f7:
                    48:cb:00:c9:30:fa:07:8c:19:63:9e:3f:1a:11:24:
                    8c:d5:26:64:aa:a5:66:9c:99:db:36:72:3f:5c:be:
                    59:94:8e:51:a9:58:0a:0e:d9:ce:5d:85:2c:d1:8a:
                    d5:79:0b:93:c0:1c:d3:96:b5:72:a4:9e:9c:11:d9:
                    de:59:14:e9:ad:92:62:6b:13:4b:b5:cf:a6:f4:6b:
                    78:ec:78:13:52:dc:b9:18:e3:e8:d5:35:70:9c:f8:
                    63:5b:a2:10:dd:56:e0:f0:22:26:60:31:c3:dd:c7:
                    23:45:5b:07:15:1b:a5:18:8a:8f:1a:a9:c7:99:ef:
                    00:50:26:9b:28:0f:66:fa:2d:5b:09:93:03:3b:df:
                    52:68:35:2a:6e:87:37:91:fe:67:60:82:ef:9a:b8:
                    2f:77:b9:25:8c:48:66:ea:50:4b:84:7c:21:31:17:
                    43:02:3b:7e:f3:6c:b1:dd:f4:38:cd:f4:38:79:54:
                    ca:15:3b:d7:6e:43:cc:40:77:13:7d:a0:0d:48:64:
                    09:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D0:56:34:5A:68:75:FE:7E:9E:85:15:02:07:3C:44:13:2A:FD:7F
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:db:24:a7:3d:96:7d:f2:33:cf:43:97:e4:d3:75:27:72:0b:
         b1:a3:3e:30:f7:18:f3:46:5e:c2:a8:13:51:a3:b2:64:a9:f7:
         64:3f:ac:a7:5e:a4:de:94:a3:b8:07:7b:9a:88:64:dd:62:09:
         ce:36:da:03:1f:9d:a8:36:1b:53:b2:e8:58:79:16:ca:80:ed:
         52:f7:cc:b9:17:4a:5b:3e:ef:2c:4e:5e:d6:5d:3f:0f:68:25:
         f6:4a:e7:54:c8:c3:aa:6f:e2:8e:48:dd:53:84:8f:5f:8e:34:
         cf:2d:ff:5a:58:fd:23:77:54:ae:3f:ac:b1:9c:e5:76:e3:80:
         ba:7e:6a:da:6f:c7:cd:0d:6a:d5:c5:9e:7e:24:d0:1e:c5:b1:
         e5:c3:4d:da:68:8a:56:e9:95:d9:5f:89:fa:9c:36:28:6f:2e:
         fe:b6:94:d9:2c:cb:8e:63:37:70:2b:71:38:e3:03:a5:e0:47:
         35:ca:2b:63:2a:dc:86:af:df:d0:17:4e:46:81:74:e8:20:1b:
         50:03:b5:41:13:d8:7c:cd:15:fd:fb:9b:17:58:a0:2d:09:18:
         d0:23:ca:65:04:7e:47:41:ab:a3:14:3f:33:ea:14:25:4d:07:
         98:3b:15:f8:a6:d3:4b:af:c3:ee:7a:c5:c4:65:89:e1:c6:c4:
         29:29:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:41:48 2026 by rpki-client