Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          DOC+8oRzTbrpqH8IGVQt9VB6JP7tzE1bFfsuRclhKgc=
Subject key identifier:   1B:82:34:18:B0:B6:75:8C:B1:82:3F:E8:FB:39:21:54:C7:79:5B:27
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       6DC19BCA165FEA9AB6664E54B6396F994F332A3A
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:21 +0000
ROA not before:           Fri 03 Apr 2026 23:57:21 +0000
ROA not after:            Sat 03 Apr 2027 00:02:21 +0000
asID:                     270764
IP address blocks:        2804:7110:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c1:9b:ca:16:5f:ea:9a:b6:66:4e:54:b6:39:6f:99:4f:33:2a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:21 2026 GMT
            Not After : Apr  3 00:02:21 2027 GMT
        Subject: CN=1B823418B0B6758CB1823FE8FB392154C7795B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:05:6c:0e:ad:f3:bb:b3:74:31:cf:70:ff:
                    7f:2d:ff:3e:96:2f:8d:80:46:2b:e1:24:91:e0:42:
                    1c:10:c8:54:2d:c8:ff:7a:bd:7d:7c:cc:cd:c1:8b:
                    d8:b7:0f:df:5b:16:5a:42:f0:25:19:91:13:af:f2:
                    8d:e8:02:ff:bc:39:77:26:75:c5:57:2c:e8:6f:27:
                    eb:fa:16:57:4c:3c:f5:7e:db:1d:c8:04:cd:93:4b:
                    30:e3:9f:0b:c3:fd:84:3a:fc:a6:aa:d7:a0:55:09:
                    c2:cf:e4:5e:00:b2:fe:83:51:30:42:1b:57:b6:37:
                    df:ac:cb:b6:ef:b1:08:14:bd:ca:22:f4:c4:42:2b:
                    ef:51:cc:2d:3a:11:fb:20:33:db:5a:26:af:64:ce:
                    f0:5d:e7:d5:1c:70:70:42:88:4a:92:00:0d:53:f7:
                    10:a9:d4:04:7d:08:01:97:20:84:ba:f1:60:25:ef:
                    71:4a:73:fb:12:5e:5d:a3:55:52:3a:f9:62:ac:32:
                    a2:a7:40:ec:84:97:d0:04:51:dd:02:70:c2:7f:3b:
                    7d:fe:4e:e9:7b:0c:af:27:9c:7e:eb:84:ce:b6:53:
                    91:d5:40:4b:6e:46:38:de:70:f1:4f:fc:c9:08:3d:
                    2c:b2:47:aa:00:81:da:d1:ca:f9:a0:fb:bb:44:ee:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:82:34:18:B0:B6:75:8C:B1:82:3F:E8:FB:39:21:54:C7:79:5B:27
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:5e:10:4a:6e:a4:3a:59:6a:f7:53:01:ef:ac:33:65:7f:b4:
         60:72:e8:aa:bf:76:a7:70:81:62:f0:b0:78:1b:9b:c2:0f:c2:
         82:65:e9:a3:a8:1c:af:f5:e0:f9:7b:d4:b2:15:69:7d:98:2d:
         f9:bd:69:60:ab:89:68:7a:e4:ba:9b:7a:75:64:34:4b:f4:4a:
         1f:9b:0d:5d:d8:f1:2b:fd:1d:9c:aa:61:4c:fe:e6:4b:b7:93:
         9d:c4:6a:21:6a:79:f7:cc:36:46:10:37:db:0f:32:59:ea:2e:
         ba:b1:6d:c9:4f:cb:f2:e9:17:a8:66:da:f4:82:64:d4:95:c7:
         b7:19:8d:9b:7e:d2:7c:0b:30:75:8b:cd:cb:7b:a9:da:3f:de:
         23:f3:15:c1:d2:28:6f:d8:78:a9:0a:d6:71:2b:e9:ca:a0:59:
         96:89:26:f3:66:41:6f:2b:97:2e:a6:e6:88:99:78:52:09:2d:
         45:5a:c9:2e:aa:2d:fe:b1:b6:68:53:d0:36:c8:77:55:19:49:
         fb:b7:39:fb:be:b7:3e:5d:ce:86:e0:36:6c:6e:24:84:b4:34:
         56:ea:53:c3:2b:80:17:4f:15:6d:9f:69:a4:79:a7:02:8d:87:
         88:52:1f:14:45:ac:6c:25:06:59:35:34:d8:0c:82:01:70:96:
         25:af:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:48:27 2026 by rpki-client