Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/323830343a386365343a3a2f33322d313238203d3e20323733333231.roa
File:                     323830343a386365343a3a2f33322d313238203d3e20323733333231.roa (raw, json)
Hash identifier:          nUQyjMloJCS/+EcGR8sFzwwYNGyOM0O5TkGmhJotCfw=
Subject key identifier:   35:89:97:57:B7:DA:0A:B0:F3:B2:F4:38:94:29:03:9E:37:62:1C:C7
Certificate issuer:       /CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
Certificate serial:       1492291BBAEA5344FA159C3C448F5C5299129E9B
Authority key identifier: 45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/323830343a386365343a3a2f33322d313238203d3e20323733333231.roa
Signing time:             Fri 27 Mar 2026 15:49:01 +0000
ROA not before:           Fri 27 Mar 2026 15:44:01 +0000
ROA not after:            Fri 26 Mar 2027 15:49:01 +0000
asID:                     273321
IP address blocks:        2804:8ce4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl
                          rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:92:29:1b:ba:ea:53:44:fa:15:9c:3c:44:8f:5c:52:99:12:9e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
        Validity
            Not Before: Mar 27 15:44:01 2026 GMT
            Not After : Mar 26 15:49:01 2027 GMT
        Subject: CN=35899757B7DA0AB0F3B2F4389429039E37621CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:e9:1d:09:7e:d5:2c:15:55:13:fd:1e:7a:
                    58:62:2c:7d:f6:62:49:73:32:6a:ed:8f:1e:7d:d2:
                    f1:e2:3b:19:87:9c:4c:6d:2a:e2:44:29:00:31:00:
                    96:08:c2:b3:0c:c9:10:b9:0a:6b:0e:c7:f8:05:76:
                    f0:44:9d:4d:c8:20:e8:03:a6:dc:16:f9:a8:65:b5:
                    f0:e6:15:df:93:05:7f:72:6f:69:44:a3:f8:42:08:
                    99:ec:b8:d3:65:d1:28:93:f5:14:01:4c:a1:a1:17:
                    e2:35:00:27:7e:09:c2:14:ea:48:cf:76:e4:a7:4b:
                    a0:42:53:37:c9:c8:8c:d2:07:70:ef:c9:0e:df:7b:
                    e3:42:e8:bd:08:e1:6c:88:04:bb:f5:16:b1:62:14:
                    27:c8:68:d2:ff:cb:6b:41:6b:6b:b3:64:7f:c6:4f:
                    9f:f7:ec:72:61:39:e7:c8:9c:2f:60:c6:96:d3:5d:
                    dd:ac:f1:ed:1e:94:89:56:0c:2d:7d:8f:52:c2:6c:
                    fb:42:02:f4:70:11:be:0e:79:14:5e:29:7b:ae:9c:
                    d1:10:eb:88:f3:c9:59:21:96:cd:bf:3e:92:b2:ea:
                    27:00:0d:42:7d:b2:7d:fc:f2:79:51:63:53:cf:e4:
                    c3:65:0a:1d:2c:14:20:a6:73:1e:a1:62:c6:ca:55:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:97:57:B7:DA:0A:B0:F3:B2:F4:38:94:29:03:9E:37:62:1C:C7
            X509v3 Authority Key Identifier:
                keyid:45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/323830343a386365343a3a2f33322d313238203d3e20323733333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ce4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:3b:ea:81:18:2b:a6:5d:38:62:7b:95:44:0e:9c:54:45:
         df:2e:94:09:4a:35:bf:de:8c:d5:68:99:6f:ea:e3:50:62:45:
         c6:11:f0:d4:e3:21:ce:d2:50:24:a6:e9:a2:67:91:3d:6a:93:
         47:e1:cf:09:cd:38:8d:70:9b:10:3a:9c:64:6e:26:38:f3:09:
         43:12:0b:6d:06:36:61:8e:09:48:35:61:db:51:f2:ba:5a:9e:
         cb:3a:a5:58:9a:37:31:32:6c:ea:b4:62:d3:7b:44:d1:6c:c7:
         40:a6:b3:70:29:8c:3d:11:ce:71:db:c9:fd:52:8f:c5:51:f6:
         9a:19:c6:f4:1a:16:99:ed:72:fb:7a:8a:a9:4b:d2:02:0c:5d:
         a8:e6:85:a9:1e:6b:ce:eb:15:df:5b:f5:fc:fb:f7:7f:16:f9:
         98:cc:be:0d:8b:cb:41:db:46:eb:f7:ea:2d:72:25:b1:37:4c:
         20:73:7f:b6:ca:26:76:0a:80:b7:af:a1:9d:76:57:03:3e:fc:
         c1:64:fe:ef:54:9a:c3:53:1a:97:e4:04:59:a2:2a:cd:90:07:
         a2:0b:c7:9f:a9:db:de:8b:76:64:fd:7a:12:33:02:9f:5a:70:
         0a:56:64:3e:79:90:b7:c1:5a:b1:87:b3:83:02:75:ff:13:8a:
         48:57:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:36:53 2026 by rpki-client