Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a353a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a353a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          tZ98tKVq4rlOwLx6Qp4xctTtG/pkra9SrRkH0GY5QkM=
Subject key identifier:   C7:28:53:86:B4:53:87:93:1D:67:FD:74:AD:F7:76:F6:A4:02:3E:D1
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       1E61EC669BE8E6CA5ABB95ECC04C1BAAE00C2575
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a353a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Mon 30 Mar 2026 11:50:19 +0000
ROA not before:           Mon 30 Mar 2026 11:45:19 +0000
ROA not after:            Mon 29 Mar 2027 11:50:19 +0000
asID:                     263522
IP address blocks:        2804:1338:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:61:ec:66:9b:e8:e6:ca:5a:bb:95:ec:c0:4c:1b:aa:e0:0c:25:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Mar 30 11:45:19 2026 GMT
            Not After : Mar 29 11:50:19 2027 GMT
        Subject: CN=C7285386B45387931D67FD74ADF776F6A4023ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:fd:63:4d:e0:5a:d3:26:14:3b:c9:4f:c6:
                    7c:25:e1:d1:20:60:6d:ae:66:8f:96:18:8d:78:f6:
                    ab:4c:65:92:65:b7:27:3b:e2:4d:3e:d1:5c:27:fa:
                    21:ef:7b:b6:18:33:8a:fe:1a:f4:d2:94:07:31:16:
                    a9:be:9f:51:1f:11:c7:0c:2b:a2:22:de:c3:d3:53:
                    33:ef:2c:4e:db:00:54:91:51:8e:3d:d4:89:3c:fe:
                    94:91:45:06:a6:0e:46:14:bd:93:41:ef:25:a6:0a:
                    b4:27:90:62:ff:70:0c:33:2f:2c:82:7b:aa:06:f0:
                    70:79:b1:8a:6f:4a:8b:79:20:86:f1:e8:8c:3d:60:
                    d6:40:0d:51:18:42:2a:c4:b6:95:e1:37:ce:80:98:
                    0c:fd:73:eb:12:1f:b4:c9:17:3d:4f:51:80:f7:f4:
                    d4:dc:c8:45:12:d0:d5:7d:51:e9:05:50:b5:55:8b:
                    18:ce:f3:ce:d2:a4:2d:85:d8:05:f5:1b:c2:4f:54:
                    a2:4c:6c:0a:f4:79:d8:8d:a5:cf:40:01:13:c6:c2:
                    6c:ba:b8:dd:9a:f4:b3:04:68:de:3c:b9:86:15:f7:
                    a4:13:d8:49:45:86:5f:07:a1:90:9c:ed:37:2c:6a:
                    a3:2b:87:be:89:e5:d8:e0:04:bb:75:69:a2:a6:0e:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:53:86:B4:53:87:93:1D:67:FD:74:AD:F7:76:F6:A4:02:3E:D1
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a353a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:26:53:ba:9e:c1:0d:b2:6b:f8:9b:12:33:41:ab:1d:d3:
         81:4b:ea:03:37:91:b8:25:f3:20:a8:0d:c6:34:11:41:01:8a:
         af:65:f6:55:f7:f2:4d:1a:53:f0:d8:b7:a7:21:f6:f2:69:1c:
         05:3e:08:55:c5:37:8d:ff:f2:d6:8e:88:ed:59:9c:16:c5:af:
         c8:9a:ef:c1:2e:64:cb:57:24:e4:4b:36:ab:50:d2:f2:2a:98:
         92:98:23:10:89:3e:67:26:d4:68:da:18:99:67:85:a4:19:be:
         fa:12:86:ba:46:0a:76:16:01:2d:ec:46:fa:b4:25:4b:e4:19:
         5f:7c:59:26:5c:83:5c:d2:d5:8a:a8:db:3c:8d:1e:2b:6c:62:
         7a:06:e3:1f:94:d7:79:e2:6b:83:4b:8f:c3:f3:4d:c8:68:a4:
         fa:af:7a:13:05:a5:78:6c:82:4c:5d:ce:23:40:4a:26:d5:95:
         27:0d:30:c6:e1:85:64:a2:47:ac:75:32:27:2a:00:72:93:64:
         b6:57:57:4a:c2:99:41:12:22:b3:1f:9a:9f:93:06:26:12:c6:
         76:84:dc:a9:ee:e7:3a:88:69:75:47:b3:e7:d2:29:1c:69:05:
         ca:84:c8:5e:f2:be:65:7b:83:f3:db:62:90:c3:b0:83:8a:e2:
         c8:c8:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:31:37 2026 by rpki-client