Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          Nadrbb7pYGzaeT2EpvOoieGw2AULXeMa9mYbmhK/1Yc=
Subject key identifier:   67:0C:14:4F:0F:85:68:97:E4:89:8C:C9:C8:B6:19:2A:F4:1E:79:E3
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       07C3824980FB32C1F6BB4847310A75F98BEAC31C
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:21 +0000
ROA not before:           Fri 03 Apr 2026 23:57:21 +0000
ROA not after:            Sat 03 Apr 2027 00:02:21 +0000
asID:                     270764
IP address blocks:        2804:7110:4900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c3:82:49:80:fb:32:c1:f6:bb:48:47:31:0a:75:f9:8b:ea:c3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:21 2026 GMT
            Not After : Apr  3 00:02:21 2027 GMT
        Subject: CN=670C144F0F856897E4898CC9C8B6192AF41E79E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:46:84:87:02:71:53:9b:1b:8f:a8:62:7d:
                    c5:8a:bb:c7:36:74:18:d2:42:6b:68:5a:7b:fc:38:
                    04:c4:dc:f6:98:53:96:35:88:f7:e6:7a:1b:e7:60:
                    2c:e3:b5:ff:68:7b:68:55:ab:e8:c6:9d:3f:1e:0b:
                    43:68:0b:3e:51:24:21:a0:50:f4:59:8d:5f:73:72:
                    f5:52:66:83:0e:3f:f2:f8:34:1f:0a:a0:00:b1:02:
                    c1:9d:1a:58:df:0b:d8:f0:d9:88:19:ac:98:0f:a9:
                    1c:7b:b9:9e:a1:8f:8a:72:04:4b:0d:ff:16:43:4c:
                    d3:93:3b:2d:5d:91:f4:42:02:bc:ca:08:74:cd:41:
                    88:a8:22:6f:5b:26:a0:7e:3d:15:6a:19:1e:c0:be:
                    3e:99:71:2c:b1:0c:fb:6e:fb:6f:3d:5a:38:43:49:
                    aa:f5:bc:50:00:87:6c:00:0f:ca:51:4f:f1:d2:7d:
                    6c:3c:bf:82:4e:7f:93:6b:a0:ab:c2:f7:5d:0c:62:
                    67:e1:a5:54:bf:fd:aa:3a:a9:fe:ac:e6:b7:e2:f9:
                    6d:c1:a8:8e:25:14:99:a1:39:4d:c7:4f:01:94:ad:
                    25:e6:c5:a5:77:13:38:0f:d4:87:98:a7:a9:14:77:
                    ae:4c:c1:6c:83:2a:53:d0:ff:6b:20:c8:74:e2:8d:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0C:14:4F:0F:85:68:97:E4:89:8C:C9:C8:B6:19:2A:F4:1E:79:E3
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:4900::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:78:6d:24:be:25:55:bd:a0:4c:fb:b5:c4:fc:7b:d8:62:91:
         f3:bc:da:1b:de:6b:98:4a:9c:94:7b:4d:17:b7:81:0e:a8:11:
         f9:4a:a5:80:4b:75:c1:a7:bd:f5:ca:47:d4:8f:25:c6:21:2f:
         2f:f0:51:e6:ec:b5:fe:d6:4c:ff:8c:39:86:2d:5d:cb:58:40:
         0c:b1:0e:dd:3e:8f:17:f8:3a:00:da:5e:bb:68:98:75:19:23:
         56:f3:2f:69:0c:3a:a3:62:35:14:e6:d3:cf:bd:e3:50:dc:aa:
         3c:7e:59:a7:f0:be:a3:c6:11:c1:bf:66:85:aa:d1:34:0a:5d:
         8a:2e:b3:8d:d5:82:8a:ac:a6:47:f3:aa:59:7d:51:5c:37:78:
         f1:a8:d4:61:db:de:78:75:b5:83:19:dd:5c:3a:fc:05:47:c0:
         8a:5e:94:c4:38:2d:f8:d5:fc:b3:80:f0:63:6f:5a:f8:bb:f9:
         e6:41:f5:c5:c7:d1:2f:0e:8c:86:1e:fc:77:f5:04:a5:87:cc:
         23:38:5c:23:a8:74:d6:8a:91:e7:a0:07:e6:d7:c6:44:89:1d:
         7f:14:a2:95:80:b9:b5:d0:e3:61:cc:91:e5:82:18:b6:8d:b6:
         32:34:7b:0e:40:ca:b8:03:3e:fd:c9:f3:84:d4:29:34:a6:b1:
         80:13:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:28:40 2026 by rpki-client