Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          rPirab4PQPwJnSul7EprgLakaM6GggTU+RnaAmMHXZA=
Subject key identifier:   A6:E0:A7:D3:7B:72:2D:8F:2A:CB:D8:FD:A0:BE:B9:C9:21:AA:65:34
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       7AAC3972B07F37CAA7E0DBBDF6126B4E9F5ACF98
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:21 +0000
ROA not before:           Fri 03 Apr 2026 23:57:21 +0000
ROA not after:            Sat 03 Apr 2027 00:02:21 +0000
asID:                     270764
IP address blocks:        2804:7110:5100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ac:39:72:b0:7f:37:ca:a7:e0:db:bd:f6:12:6b:4e:9f:5a:cf:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:21 2026 GMT
            Not After : Apr  3 00:02:21 2027 GMT
        Subject: CN=A6E0A7D37B722D8F2ACBD8FDA0BEB9C921AA6534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:74:ba:c6:1d:ac:89:67:f4:f2:fb:c8:58:
                    e7:c5:32:3a:8b:c5:e2:bc:fa:ff:ec:c8:f5:46:6c:
                    c0:0f:c7:35:6c:6a:9f:e2:f5:93:33:d1:ca:c0:1b:
                    9c:8b:31:48:50:14:e4:4f:83:11:49:0e:da:a1:ca:
                    99:a5:65:48:87:32:ba:db:23:cd:9d:76:bd:53:21:
                    58:68:2e:1f:06:8f:a9:5b:80:de:11:d7:39:af:ea:
                    46:50:40:53:ee:21:13:6a:1d:0d:ed:18:b0:dd:be:
                    61:c4:b2:ee:28:21:be:51:3a:12:39:07:b9:3a:8f:
                    43:2b:f1:83:a9:b6:84:8b:0c:02:13:a7:16:79:94:
                    9a:e2:b8:ff:a9:1e:2e:5e:db:8b:34:ea:14:4a:f6:
                    c8:3e:a4:70:0c:a6:2c:1b:21:9a:bf:ac:a4:8f:37:
                    31:53:40:b6:d6:8b:8d:09:17:2e:3b:c7:16:85:93:
                    93:67:4c:20:cd:59:c2:f5:01:fe:ea:08:5f:bc:74:
                    f2:e4:ed:67:35:f4:f4:a0:cc:8a:7f:25:01:64:74:
                    f0:8a:47:58:46:02:f0:ee:97:78:2e:00:22:75:30:
                    16:59:15:20:65:21:57:34:74:bc:44:ab:3c:1a:76:
                    bd:2e:c9:2e:fb:d1:5b:6b:db:47:35:1f:ba:b5:5e:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E0:A7:D3:7B:72:2D:8F:2A:CB:D8:FD:A0:BE:B9:C9:21:AA:65:34
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:5100::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:c7:49:49:fd:9c:95:a3:3f:dc:34:17:0d:22:fa:32:61:89:
         24:89:ea:c0:61:5b:f0:19:fd:eb:48:a7:47:d5:ce:e3:ab:5a:
         43:4b:b6:39:4d:4f:b2:d1:81:e0:18:90:25:a7:ab:8d:55:e4:
         44:68:2e:48:a1:59:79:ee:ab:d2:37:ee:14:25:25:6f:59:ff:
         3c:fa:6f:aa:0d:e6:93:a7:97:73:41:da:3c:a9:56:e6:a3:79:
         5b:6d:e6:f4:f8:22:96:a5:92:8b:1f:f7:b1:7c:a6:2c:cc:d9:
         35:62:e4:eb:66:42:97:d4:61:00:49:00:f1:43:92:03:81:65:
         68:6a:5f:d3:43:46:a5:44:c7:c9:97:c7:1f:3a:9a:be:7b:77:
         ab:05:03:02:c1:c8:30:f1:a6:3e:31:b7:de:34:90:e6:14:7d:
         43:02:a2:ed:a1:4e:24:7e:9c:47:3d:10:7f:45:82:7a:04:3f:
         d6:6a:0b:a9:8b:0a:cb:bd:4f:87:cc:7c:a9:eb:12:3f:87:b8:
         af:00:25:d0:a9:e7:b4:8a:40:73:71:c2:2d:24:5b:30:1c:a6:
         0b:96:ac:72:af:26:75:83:4d:19:9b:1d:db:ed:ff:30:66:2f:
         1c:69:31:60:87:1d:e7:c8:8a:ef:39:2b:5b:60:ed:8f:72:13:
         d6:00:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:36:54 2026 by rpki-client