Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          SVR7J2UuOnwpuKypvqBPf5ZM4y1V0nafNhyxtr7Z18w=
Subject key identifier:   E4:E5:08:95:07:0E:73:87:0F:55:D6:E2:83:91:87:8E:00:98:26:48
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       3180091118CE9488BD5FEE1713AB4D01EB268982
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:19 +0000
ROA not before:           Fri 03 Apr 2026 23:57:19 +0000
ROA not after:            Sat 03 Apr 2027 00:02:19 +0000
asID:                     270764
IP address blocks:        2804:7110:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:80:09:11:18:ce:94:88:bd:5f:ee:17:13:ab:4d:01:eb:26:89:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:19 2026 GMT
            Not After : Apr  3 00:02:19 2027 GMT
        Subject: CN=E4E50895070E73870F55D6E28391878E00982648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:53:f3:a0:f5:70:ed:03:b7:d9:41:23:3d:
                    6b:29:42:dc:e2:5c:d9:95:6b:6f:37:ef:8e:53:84:
                    8f:e8:6e:39:d4:c9:ae:3b:50:e7:00:5f:10:51:da:
                    a3:d4:98:cd:d0:26:e3:bf:66:29:09:66:ae:a3:e6:
                    ac:6c:26:8d:fe:f2:98:56:65:9e:ca:2c:b1:e1:a8:
                    1f:73:2c:26:fc:f8:c5:22:e2:0c:9e:8d:8f:18:ba:
                    b3:b2:98:df:c9:13:c8:1b:a2:9a:ef:79:b7:09:63:
                    e6:ff:f3:78:db:b0:9c:88:a4:51:1b:d3:7b:08:4f:
                    69:08:b5:b6:bb:b5:61:9a:2c:60:68:4b:c1:28:48:
                    ec:4a:6a:48:61:b6:1c:3a:2f:08:93:88:0a:d1:50:
                    91:3f:51:df:16:82:51:17:f8:e6:24:96:e5:48:e4:
                    99:06:e4:53:27:be:1e:51:0a:78:42:89:d5:1c:5e:
                    52:2f:35:ff:1d:0d:c0:aa:f6:4c:58:4f:62:27:49:
                    cf:f1:f3:a7:09:ca:92:c2:26:51:50:49:6b:70:d2:
                    a1:37:a3:98:e0:15:66:dc:1b:6e:82:53:f3:4e:f1:
                    78:7d:94:a6:5e:d7:8d:5a:8c:b5:db:46:96:85:e5:
                    1d:0d:b1:cf:bb:82:31:47:2c:d2:0a:57:1d:b1:83:
                    5f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E5:08:95:07:0E:73:87:0F:55:D6:E2:83:91:87:8E:00:98:26:48
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:e6:fc:91:7a:84:0e:cd:9e:6c:9d:c4:05:c2:a0:25:96:
         e5:ba:df:4f:b9:26:e8:2b:64:ba:ca:66:04:cc:55:0f:07:58:
         68:ba:92:06:c1:f1:9b:b2:43:3c:fd:45:ed:49:45:c8:83:94:
         72:c1:26:9d:fa:d6:4c:a3:fc:a8:43:ad:7b:08:6e:92:76:6e:
         ff:55:66:8b:b8:06:ec:6f:2a:8a:d2:d5:70:d8:09:3a:2f:38:
         82:33:0a:0e:13:c9:93:47:7a:0b:9e:45:8f:4b:f7:64:c0:00:
         c8:65:48:80:62:93:9c:a9:7f:c0:e3:bb:a2:fb:67:0a:85:5d:
         64:de:5f:84:c6:c7:f5:84:4f:2e:f6:e1:09:e5:8d:82:c0:e0:
         57:dd:bf:82:f9:28:89:ac:31:fe:2f:1f:e3:9a:55:08:ab:52:
         aa:ef:67:4e:c9:68:73:a3:09:7d:53:28:02:36:66:35:72:26:
         d8:c8:ed:44:02:c5:75:82:34:c7:47:cc:4d:92:fc:ae:1f:42:
         8f:0e:77:0f:ff:2f:01:c1:f9:6c:c7:31:ee:11:38:8d:26:22:
         bd:3c:a0:5f:89:25:30:35:e4:fd:37:5d:13:94:5d:25:a6:22:
         86:85:d0:03:fe:91:6a:41:30:e6:97:23:0f:05:ed:d6:82:cc:
         9e:bb:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:41:25 2026 by rpki-client