Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33322d3332203d3e20323637333330.roa
File:                     323830343a346263633a3a2f33322d3332203d3e20323637333330.roa (raw, json)
Hash identifier:          RnKwzdLfvssUc5QkBZhlHfcSDr3ke+1o+cs8G22BJuQ=
Subject key identifier:   14:E2:17:29:3B:D6:37:95:82:DB:78:B2:F3:3C:D7:FD:BC:C1:4C:58
Certificate issuer:       /CN=0A467B137635F43F91188ECBB9D30961A5B090C1
Certificate serial:       284902394E80F3C0FEC68FD1BDEEB0A0EDAD444C
Authority key identifier: 0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33322d3332203d3e20323637333330.roa
Signing time:             Thu 02 Apr 2026 13:04:04 +0000
ROA not before:           Thu 02 Apr 2026 12:59:04 +0000
ROA not after:            Thu 01 Apr 2027 13:04:04 +0000
asID:                     267330
IP address blocks:        2804:4bcc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl
                          rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:49:02:39:4e:80:f3:c0:fe:c6:8f:d1:bd:ee:b0:a0:ed:ad:44:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A467B137635F43F91188ECBB9D30961A5B090C1
        Validity
            Not Before: Apr  2 12:59:04 2026 GMT
            Not After : Apr  1 13:04:04 2027 GMT
        Subject: CN=14E217293BD6379582DB78B2F33CD7FDBCC14C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:98:39:9a:6e:a3:3c:1d:23:1c:97:ac:37:
                    ba:3c:26:c2:86:3a:d5:6b:58:b0:bc:8a:f1:25:05:
                    26:31:30:23:78:b7:62:ba:c2:ab:a6:fd:b9:c3:66:
                    d2:40:b8:d9:cf:b6:fa:ab:0a:fd:56:1b:69:71:9d:
                    28:9a:b8:09:6d:10:f1:1f:16:5a:29:d2:55:39:12:
                    2a:b3:e8:f0:ab:eb:29:fb:31:76:07:d7:32:35:f2:
                    7c:93:f1:02:3b:14:48:02:1f:f5:fe:8a:4d:45:6c:
                    58:cb:b8:cb:fc:bf:be:32:89:30:32:0b:78:68:5d:
                    2e:43:da:e3:8a:90:f0:28:d4:7e:d4:47:0e:a5:8d:
                    b9:df:b8:d2:5d:92:4c:6d:ad:08:47:1a:44:ac:fc:
                    56:37:ed:4f:c6:e3:66:0f:c7:16:1f:6a:0b:14:d5:
                    fb:a2:3a:9b:b8:2b:c5:9c:2e:a5:82:4e:84:29:80:
                    8a:32:32:d6:d5:fc:26:38:1d:de:c2:6b:d1:d6:12:
                    f7:c6:db:22:90:7b:be:fa:2b:f9:24:13:75:56:b8:
                    01:91:b9:c8:94:84:b7:3c:c2:25:ab:e9:a4:6d:a1:
                    5d:ad:c8:6c:ec:7e:7f:e0:78:bb:97:e3:a6:3a:ba:
                    72:62:8d:de:74:3d:8d:36:0f:22:7d:0f:a8:c1:23:
                    47:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:17:29:3B:D6:37:95:82:DB:78:B2:F3:3C:D7:FD:BC:C1:4C:58
            X509v3 Authority Key Identifier:
                keyid:0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a3a2f33322d3332203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:e2:e6:d8:f5:2f:90:c6:97:61:ac:89:2a:b5:0f:e3:d0:e0:
         ef:3a:f4:c3:56:6c:f1:52:72:d0:8c:b1:61:c7:0a:be:e6:0d:
         a8:78:f0:2c:c6:74:15:5d:7a:be:8f:60:05:3d:ba:6a:71:10:
         43:d1:46:5d:24:a3:84:21:9f:ea:11:0d:89:d5:54:97:45:05:
         06:28:6c:ff:d2:56:db:83:1f:67:77:73:ed:49:04:5f:72:33:
         49:a8:98:ea:55:5f:21:95:db:b4:c6:28:c4:23:58:af:41:2e:
         57:13:a9:95:78:0d:43:e9:a6:d0:06:ce:f0:2f:90:98:94:0d:
         51:1d:d5:66:75:d2:89:0d:00:66:4e:7e:18:dd:c8:e0:a7:e3:
         03:46:1e:0c:51:45:a5:f3:ba:2e:a8:86:53:32:ed:41:64:d5:
         66:28:79:ec:ec:ad:03:14:c3:59:36:84:ea:67:3d:9e:16:e0:
         68:d8:69:2c:12:ff:3f:4a:b3:8c:95:8c:db:7a:36:4f:72:5b:
         46:69:a8:38:14:fd:b1:e0:0b:a3:2f:b2:0b:89:cf:70:10:49:
         8a:a9:0f:c5:4e:b6:4d:99:a6:11:7d:3f:74:9d:b6:c9:5b:10:
         52:eb:96:b8:99:93:2f:97:ef:15:f1:3d:73:d5:c5:aa:79:0d:
         95:fc:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:38:18 2026 by rpki-client